Privacy Policy

Introduction

We are committed to safeguarding the privacy of Scandipik's website visitors and service users.

This policy applies where we are acting as a data controller with respect to the personal data of Scandipik's website visitors and service users; in other words, where we determine the purposes and means of the processing of that personal data.

We may use cookies on our website. Insofar as those cookies are not strictly necessary for the provision of Scandipik services, we may ask you to consent to our use of cookies when you first visit our website.

How we use your personal data

We may process data about your use of our website and services, including IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views, website navigation paths and information about the timing, frequency and pattern of your service use.

We may process account data, profile data, service data, enquiry data, notification data and correspondence data where this is necessary to provide services, communicate with you, maintain accurate records and operate the business.

Providing your personal data to others

We may disclose personal data to insurers, professional advisers, suppliers or subcontractors where reasonably necessary for the purposes set out in this policy.

We may also disclose personal data where such disclosure is necessary for compliance with a legal obligation, or in order to protect your vital interests or the vital interests of another natural person.

Marketing communications and consent

We only use an email address for promotional or commercial mailouts where we have recorded a defensible consent basis. Depending on the circumstances, this may be express consent or consent reasonably inferred from a provable, ongoing relationship where the marketing is directly relevant to that relationship. Holding an email address does not, by itself, mean that it can be used for marketing.

We may keep a compliance record of the email address, consent basis, source or context and relevant dates. If a record was imported, the underlying express or inferred basis must still be recorded. You may ask us about the source of your information or withdraw from marketing at any time.

Every Scandipik marketing email includes a no-login unsubscribe option. We apply a valid unsubscribe request immediately to future marketing mailouts. This does not prevent genuine booking confirmations, booking changes, service-delivery messages or other operational communications that are necessary to provide services and are not promotional.

Email delivery and campaign measurement

Scandipik uses Resend, an email delivery service, to send marketing mailouts and receive delivery, bounce, complaint, approximate open and link-click events. Open measurement may use a small tracking image and link measurement may route a link through the provider before reaching its destination.

An open event is not definitive evidence that a person read an email. Apple Mail Privacy Protection, other privacy proxies, automated security tools, image caching and image blocking can create or hide open events. A click is recorded as a factual link event and may be a stronger engagement signal, but it does not establish a person's intention.

The Communications Centre retains only the identifiers needed to deduplicate and attribute events, event times, a minimised clicked destination and relevant delivery or failure reason. It does not intentionally retain provider-reported IP addresses or user-agent strings in campaign event records.

Resend and its service providers may process email content, recipient details and campaign-measurement information outside Australia, including in the United States. We use this information to deliver messages, protect sending integrity, measure campaign performance and enforce marketing suppression.

Retaining and deleting personal data

Personal data that we process for any purpose shall not be kept for longer than is necessary for that purpose.

We may retain consent, unsubscribe and suppression records where necessary to demonstrate compliance and prevent further unwanted marketing. Campaign event information is restricted to authorised staff and should be deleted or de-identified when it is no longer needed for those purposes.

We may retain personal data where retention is necessary for compliance with a legal obligation, or in order to protect vital interests or establish, exercise or defend legal claims.

Your rights

You may have rights to access, correction, erasure, restriction, objection, data portability and complaint to a supervisory authority, subject to applicable law.

You can contact Scandipik about privacy matters using the contact details published on this website.

Updates

We may update this policy from time to time by publishing a new version on our website. You should check this page occasionally to ensure you are happy with any changes.