In order to conduct our business, The Simpro Group Pty Ltd, a company established in Australia with company number 131 893 573 and its related bodies corporate which includes its offices in Australia, New Zealand, United Kingdom, Republic of Ireland and the United States of America (collectively referred to in this Notice as “Simpro”, “we”, “our” or “us”) need to process Personal Data of individuals that interact with us.
AroFlo Innovations Pty Ltd, with company number 85 638 665 362, is part of the Simpro family of companies (“Simpro”). Simpro's personal data protection notice applies to the use of AroFlo's website, products and services.
We process Personal Data when we perform (whether or not by automated means) any operation or set of operations on it. For example, we process Personal Data when we collect, record, organise, structure, store, alter, retrieve, consult, use, disclose, disseminate, restrict, erase or destruct such Personal data.
We consider the protection of your Personal Data a paramount corporate responsibility and we will always process Personal Data lawfully, fairly and in a transparent manner. This Personal Data Protection Notice (“Notice”) sets out the Personal Data we collect from you, why we collect it, how it is used and shared and your choices and rights regarding the use of Personal Data we collect.
This Notice describes how we process Personal Data of:
This Notice does not cover the processing of Personal Data belonging to Simpro’s employees, contractors and job applicants. If you are one of these individuals, please see our separate Privacy Notice here.
Personal Data is any information relating to relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
We will primarily collect Personal Data from you either directly or indirectly from your interactions with us and our Products and/or Services. In some cases, we may also to collect Personal Data about you from third parties who provide services to us (for example, credit information agencies)
Our Products and/or Services may use cookies. Cookies are small pieces of data stored on the web browser of your device. These are used by us for site administration and analysis purposes and to deliver tailored content. If you wish not to take advantage of cookies, you may configure your browser not to accept them (although this may disable or render unusable some of the features of our Products and/or Services).
We collect and process different types of Personal Data depending on who you are and why you interact with us.
We may process the following types of your Personal Data:
Sensitive Personal Data
Our policy (which is reflected in our terms and conditions applicable to our Products and/or Services is not to collect or otherwise process your ‘Special Category Data’ and/or ‘Criminal Offence Data’ (both as defined in The General Data Protection Regulation 2016/679 (“EU GDPR”) or EU GDPR as retained in the Data Protection Act 2018 or other applicable national legislation of the United Kingdom (“UK GDPR”)) and/or other data which is treated differently by law due to its sensitive nature. If we do need to collect or otherwise process this category of your Personal Data, we will only do so on the basis of your consent to such processing and we will provide you with more details of our processing (including the measures we take to keep such data secure) at the point of collection.
We will only process your personal information when the law allows us to. Unless otherwise stated in this Notice, we process Personal Data for our Legitimate Interests. In particular, we process Personal Data in order that we may conduct our business operations and transactions smoothly and efficiently and continue to provide and develop our Products and/or Services. More specific examples of how our Legitimate Interests operate as the basis for our processing are listed below. In some cases, we also process your Personal Data in order to perform a contract we have entered into with you or because you have asked us to take specific steps before entering into a contract. We may process your Personal Data for any other purposes for which you have provided your consent or if there is another lawful basis for doing so and the new purpose is compatible with the original purpose. We may also process Personal Data where we are required to by law.
We process your Personal Data for the following specific purposes:
We may also (upon obtaining your express permission) collect and otherwise process your Personal Data for secondary purposes, such assending you targeted marketing activities (including email mail outs or electronic marketing materials) in relation to events and/or our Products and/or Services.
We only process Personal data when this is necessary, including where this is for our Legitimate Interests as detailed above. Our ability to perform the functions listed above (for example, our ability to perform any contract entered into with you) may be adversely affected if we do not process your Personal Data. It may also prevent us from complying with our legal obligations.
Except to the extent set out in this Notice or unless you are advised to the contrary, we do not use Consent as the lawful basis upon which we process your Personal Data.
Automated decision-making takes place when an electronic system uses personal information to make a decision without human intervention. We will only subject your Personal data to automated decision making where:
We may disclose your Personal Data (which may sometimes include Special Category, Criminal Offence, or other sensitive Personal Data but only where you have consented to the processing of such Personal Data) to related bodies corporate as well as with third parties involved in the running of our business where it is necessary to administer the working relationship with you or where we have another legitimate interest in doing. We might also be required to disclose your Personal Data to a third party:
In particular, we may disclose your Personal Data to the following parties:
Related Bodies Corporate
Where necessary, for the internal and/or external operations of the Simpro group of companies, including in order to provide you with our Products and/or Services, to perform a contract we may have entered into with you and/or so that we can best fulfil any of the purposes set out in clause 6, we may disclose your Personal Data between our related bodies corporate, meaning our offices across the world. See a list of our current locations listed here. This may result in your Personal Data being transferred to countries other than your country of residence, including countries which may be subject to reduced privacy laws. We can confirm that Simpro entities are subject to the same corporate policies and procedures (including this Notice) and we will only transfer data in accordance with the provisions of section 11 of this Notice.
Third Parties
We may also need to disclose your Personal Data to:
We do not allow our third-parties service providers to use your Personal Data for their own purposes unless this was specifically notified to you. We only permit them to process your Personal Data for specified purposes and in accordance with our instructions.
Where disclosure to one of the parties mentioned above results in data being transferred to another country, we will only make such disclosure where we have a lawful basis for doing so and we shall ensure that the disclosure complies with all applicable laws. This may include entering into a legally binding contract with the recipient under which they are obliged to handle your information in accordance with applicable laws of that jurisdiction or a higher standard if required (for example to meet compliance with the requirements relating to international data transfer under EU GDPR and UK GDPR).
For the purposes of this Notice, “disclose and disclosure” means to transfer, share (including verbally and in writing), send, or otherwise make available or accessible your Personal data to another person or entity.
We have an obligation to ensure that your Personal Data is protected from unauthorised processing, accidental disclosure, access, loss, destruction or alteration. Accordingly, we have a range of technical security measures and procedures in place to ensure that your Personal Data is protected appropriately. These measures have been implemented and are reviewed regularly to protect your Personal Data from scenarios which may result in the accidental or unauthorised disclosure of your Personal Data as mentioned above.
In the unlikely event there is a data breach, we will notify the relevant data protection authority as required by applicable law.
For further information on the security measures in place you can contact us by using the contact details at section 17.
We will only keep your Personal Data for as long as necessary to fulfil the purposes for which we are processing your Personal Data, unless the law requires us to retain it for longer. Further details on our retention policy can be obtained by contacting us in accordance with the details set out in section 17.
In accordance with our retention policy, we will ensure Personal Data is destroyed securely.
Our Products and/or Services may contain links to other websites. We are not responsible for the privacy practices or the content of other websites. The privacy practices applicable to other websites may differ substantially from ours. Please read the privacy Notice of any other websites you visit before using such websites.
Any Personal Data that you choose to submit or post on our social media pages or any other public forum (“Forums”) may be read, collected, or used by others who visit these Forums and may be used to send you unsolicited messages. We are not responsible for the Personal Data you choose to submit in these Forums.
You have certain rights in relation to your Personal Data that we hold about you, though the details of these may vary depending on the country where you are based.
In general, it is within your rights to:
If you wish to exercise any of the above rights, please send your request to our Data Protection Officer using the contact details set out below.
If you are a Data Subject of the UK or the EU, for the purposes of this Notice, Simpro is the “Controller” (as defined in EU GDPR and UK GDPR) in relation to your Personal Data and the terms “personal data”, “data subject”, “processing”, “special category data”, “criminal offence data” and “legitimate interests” used in this Notice, (whether capitalised or not), shall have the meanings given to them in EU GDPR and UK GDPR as applicable.
In addition to the rights described in section 15 (What are your rights in relation to the Personal Data we collect), you have the right, in certain circumstances to:
If you:
please contact our Data Protection Officer using the following details:
Name: Data Protection Officer
Email: privacy@simpro.co
Post:
Attention: Data Protection Officer
Simpro Software Limited
Building 17, Garden City Office Park
2404 Logan Road
Eight Mile Plains QLD 4113
Australia
If you are not satisfied with Simpro’s response the regulatory body that governs privacy in your jurisdiction may be able to help you. Please contact our Data Protection Officer for details of the regulatory body that applies to you.
We will ensure that your question, concern or complaint is dealt with as soon as practicable. We reserve the right to verify your identity before complying with the request.
We will update this Notice from time to time where necessary to reflect changes in applicable laws or in our privacy compliance practices. The latest version of this Notice will always be available online through the Simpro website.
This Notice was last updated on 30 April 2024.
