Privacy Policy

INTRODUCTION

Joval Wine Group (NZ) Limited (we or us or our) is committed to respecting your privacy at all times. This Privacy Policy applies to our website, www.catalinasounds.co.nz, or any related website operated by us. This Privacy Policy describes what personal information or data we collect, and how we use, store and disclose the personal information we collect, to ensure we comply with our obligations under the Privacy Act 2020 (Privacy Act).
By providing your personal information or using our products/services, you agree to this Privacy Policy. If you provide information about any other person, then you must have authorisation from that person to provide such data to us. We urge you to read our Privacy Policy carefully.
Our Privacy Policy outlines what personal data we collect, how we collect it, and how we process, use and disclose personal data. Generally, we only process personal data where:

we have your specific, informed consent; or
we need to process your personal data:

to perform a contract with you;
to comply with laws or regulations; or
for our legitimate interests (rarely, and only if consistent with your fundamental rights and freedoms in relation to personal data).

This Privacy Policy may change at any time. We will tell you about any changes by posting an updated policy on our website. These changes will take effect from the date we post it, so please ensure you review our Privacy Policy from time to time.
By using our website or any product/service offered by us, you will be accepting the terms of this Privacy Policy and any changes made by us from time to time.

WHAT INFORMATION WE COLLECT

We may obtain information about you from various sources, including through your general interactions with us and through your use of our products/services and website.
The types of personal information we may collect through your general interactions with us include your:

name, contact details, date of birth and other contact information;
driver licence details or other form of identification;
IP address, device ID, memory information, browser type and version, connection speed, network information, geographical location, device identifiers and cookie identifiers;
user experience, progress and decision making;
billing, credit card and address information;
conversations with our staff, agents or other persons;
email communications, and your written or verbal interactions with us or our agents;
number of visits to our websites;
use of our social media platforms; and
other information such as product and service preferences.

When you use our website, the data we collect depends on the authentication method used but may include, without limitation, profile information (e.g., from your Facebook profile, Twitter profile, or other social media profiles) and information voluntarily entered by you on our website (e.g. name, gender, birthdate, email address, phone number).

HOW WE COLLECT INFORMATION

We will usually collect personal information in a number of ways, including:

When you log in to our website and/or online services;
When you register to be become a member of the Catalina Sounds Wine Club
When you enter any of our competitions or trade promotions;
When you register to be a member of our website or sign up for newsletters and our marketing material;
During any negotiations or business transactions that you are a party to;
If we supply products or services to you; and/or
directly from you when you interact with us over the phone, via email or letter, via our website.

Where possible we will collect personal information directly from you. However, in some circumstances we may need to collect personal information from authorised third parties (i.e. a representative). When we receive personal information from a third party, we will process that data in accordance with this Privacy Policy.
We also use cookies to track the activity on our website and hold certain information. You may disable cookies by changing the settings on your browser, although this may mean that you cannot use all of the features of the website.
We (and any authorised third parties in accordance with this Privacy Policy) may also collect personal information:

when you apply for employment or contracting opportunities with us;
when you submit your personal details to participate in competitions and promotions or to subscribe to any of our communications;
through the use of cookies, web beacons and usage monitoring software when you use our website;
from our business partners that sell you products or services; and
from publicly available sources of information, such as telephone directories and websites.

Where required by law, we obtain your prior opt-in consent at the time of collection for the processing of:

personal information for marketing purposes; and
personal information that is “sensitive” under any applicable laws.

If you choose not to provide your personal information to us, we may not be able to:

provide you with the product or service you want;
respond to your requests;
manage or administer your product or service;
personalise your experience with us; or
verify your identity or protect against fraud.

WHY WE COLLECT THE INFORMATION

We, and any third parties in accordance with this Privacy Policy, may use your personal information for any one or more of the following purposes, to pursue our legitimate interests:

to provide, administer and communicate with you on our products, services and promotions;
to tailor experiences to you and report back to you on your experience;
to help us develop, market, improve, manage or review our product series and services;
to conduct client surveys in order to improve our products and services;
to enforce our terms and conditions;
to comply with applicable legal requirements, industry standards and our policies, and as part of the investigation and analysis of incidents;
to respond to queries, complaints or to provide you with our general customer service;
to comply with requests made by a court or governmental or other public authority, for example, in connection with legal proceedings or the prevention or detection of fraud and crime;
to notify you of services, special offers, opportunities, products or benefits that are being offered by us; and
to generate statistical information and reports on the use of our products and services.

We may use your personal information for additional purposes related to the purposes listed above and will provide specific notice at the time of collection. We will not, however, use your personal information other than for a purpose that:

you would reasonably expect;
is made known to you;
is required or permitted by law; or
is otherwise authorised by you.

By providing your email address, you consent to us sending you information connected with the above collection and use purposes via email. We may also contact you from time to time to check that your personal information remains accurate.
If data is aggregated or de-identified so it cannot identify you or any other individual, we may use it for any business purpose.

WHO WE SHARE INFORMATION WITH

We may share information with our staff and advisers where they “need to know” that information. We may also disclose information to our service providers and contractors who perform services on our behalf, where permitted under this Privacy Policy.
We may disclose personal information to a third party where that third party is a related body corporate, or entity of us.
We may disclose personal information about you to law enforcement authorities or other government official:

if we are permitted, required or authorised to do so by law;
if we believe disclosure is necessary or appropriate to prevent physical harm or financial loss; or
in connection with an investigation of suspected fraudulent or illegal activity.

We also reserve the right to disclose personal information we have about you in the event we sell or transfer all, or a portion of, our business or assets or subsidiaries or related companies. If such a sale or transfer occurs:

we will use reasonable efforts to direct the purchaser to use personal information you have provided to us in a manner that is consistent with our Privacy Policy; and
following such a sale or transfer, you may contact the entity to which we transferred your personal information with any enquiries concerning the processing of that information.

We do not disclose personal information to any foreign person or entity (as that term is defined in the Privacy Act). If, in future, we wish to change this policy we will only do so with your consent or otherwise in compliance with the Privacy Act.
In all other cases, we will not disclose personal information we collect about you, except as disclosed to you, and authorised by you, at the time the information is collected.

HOW WE PROTECT AND RETAIN INFORMATION

We implement and maintain appropriate administrative, technical and physical safeguards designed to protect the personal information you provide against accidental, unlawful or unauthorised destruction, loss, alteration, access, disclosure or use. We use encrypted communication transfer certain personal information to our websites.
We generally store the personal information we collect in Australia.
We are committed to meeting and maintaining industry standards for the security and protection of personal information and take all reasonable steps to ensure this. We also have internal policies for the management of personal information and undertake regular staff training to ensure compliance.
If needed to provide our services, we may potentially store your data securely on servers owned by other technology providers.
We only keep your identifiable personal information for as long as and to the extent that we need it to reasonably meet the purposes for which we collect it (as set out in this Privacy Policy). The length of time we retain your identifiable personal information is also affected by:

any legal requirements we are subject to with respect to your personal information; and
any consent given by you to retain such personal information.

ONLINE PAYMENTS

When making a purchase from our website you must provide valid credit card details.
We use the eWAY Payment Gateway for online credit card transactions. eWAY processes online credit card transactions for thousands of merchants, providing a safe and secure means of collecting payments via the internet. All online credit card transactions performed on this website using the eWAY gateway are secured payments, as follows:

Payments are fully automated with an immediate response.
Your complete credit card number cannot be viewed by us or any outside party.
All transactions are performed under 128 Bit SSL Certificate.
All transaction data is encrypted for storage within eWAY's bank-grade data centre, further protecting your credit card data.
eWAY is an authorised third-party processor for all major banks.
eWAY at no time touches your funds; all monies are directly transferred from your credit card to the merchant account held by the Company.

For more information about eWAY and online credit card payments, please visit  www.eway.com.au.

YOUR RIGHTS AND CHOICES

We offer you certain choices about what personal information we collect from you, how we use that information, and how we communicate with you. You also have certain rights, including the rights to:

not provide personal information to us;
refrain from submitting personal information directly to us;
ask us not to share your personal information with third parties;
withdraw any consent you previously provided to us;
correct any personal information we hold about you; or
object at any time on legitimate grounds to the processing of your personal information.

In some circumstances, taking these actions may mean that you cannot take advantage of our products and services. You do not need to provide us with some information that we automatically collect (e.g. some cookies), but we may need this information to provide you with full functionality of our products and services.
You can request access to, and correction or deletion of, your personal information held by us. In some circumstances we may restrict access to personal information in accordance with the Privacy Act. All other requests for access, correction or deletion we will reply to within a reasonable time. If you would like to ask for a copy of your information, or to have it corrected, please contact our Privacy Officer in writing at Privacy Officer

Joval Wine Group (NZ)
PO Box 387
VICTORIA 3067
Email: privacy@joval.com.au

Our Privacy Officer will endeavour to respond to your request as soon as reasonably practicable.
The right to access personal information may be limited in some circumstances by legal requirements. In order for us to process your request, we will need to verify your identity. In the event that we refuse you access to your personal information, we will provide you with an explanation for that refusal. These reasons may include where:

access would have an unreasonable impact on the privacy of other individuals;
the information relates to legal proceedings relating to you;
the information would reveal our commercially-sensitive trade secrets; or
we are prevented by law from disclosing the information or providing access.

If we are unable to provide you with access to your information or make any amendments then the Privacy Officer will inform you of our reasons for this.
We reserve the right to charge for any request for any personal information at our discretion. It is anticipated that any charge will only be considered if the request requires a significant amount of time and/or resource to respond to. The charge levied will be nominal.

QUESTIONS AND COMPLAINTS

If, at any time, you have questions, concerns or comments about this Privacy Policy or our privacy practices, please contact us at:

Joval Wine Group (NZ)
PO Box 387
VICTORIA 3067
Email: privacy@joval.com.au

If you wish to complain about any breach or potential breach of this Privacy Policy or the Privacy Act, please contact the Privacy Officer via the contact details above who will make every effort to resolve your complaint internally.
In receiving your complaint the Privacy Officer will:

listen to your concerns and grievances regarding the handling of personal information;
discuss with you the ways in which we can rectify the situation; and
put in place an action plan to resolve your complaint and improve our information handling procedures, if appropriate.

If we do not resolve the complaint to your satisfaction, you may apply to the New Zealand Privacy Commissioner Te Mana Matapono Matatapu (Privacy Commissioner). We will work with the Privacy Commissioner to resolve any issues.
For more information on how you may lodge a complaint with the Privacy Commissioner via the website https://www.privacy.org.nz/about-us/contact/ or using the contact details below:

Privacy Commissioner
P O Box 10 094
WELLINGTON 6143
Telephone: 0800 803 909