This is the Privacy Notice of Lyptus (the data controller) part of Acacium Group that is engaged with you (“we”, “us” or “our”) via the link you have clicked on the website. A full list of our group companies and their trading names can be found here.

If you require a printed copy of this privacy notice or our group companies, please contact us using the details below.

This Notice sets out our global approach to data protection and makes you aware of how and why your personal data will be used.  We cannot list all applicable data protection legislation globally as it is changing constantly.  The Notice is primarily based on the requirements of the General Data Protection Regulation (‘GDPR’) and the Australian Privacy Act 1988 (as amended) (the ‘Privacy Act’).  If you believe that we are not addressing your privacy rights, then please contact us: dpo@acaciumgroup.com  Further to contacting us, if you are still not satisfied with how we manage your personal data then you should contact your country data protection supervisory authority.  We may change this Privacy Notice from time to time.  You should check this Privacy Notice occasionally to ensure you are aware of how we need to use your information.

This Privacy Notice relates to personal information that identifies “you” in the circumstances set out below.   If you are an organisational customer, partner or a supplier a separate privacy notice or data processing agreement applies to you instead. 

Please read this Privacy Notice to understand how we may use your personal data. 

This Privacy Notice was completed on 1st November 2024 and may vary from time to time so please check it regularly.

Summary

  • We keep to a minimum the information we hold about you
  • We use your data to provide our services to you, respond to your enquiries, manage our relationship with you, meet our legal obligations, and improve our website
  • We delete your data when it is no longer needed for these things
  • Generally, we do not give your information to third parties, but there are some exceptions
  • You have lots of privacy rights
  • We take security seriously
  • We are happy to answer your questions about any of this

This Notice relates to your use of our website only.

What personal information we hold and how do we collect it

You can look at our pages, and search for jobs without giving us any personal information about yourself.

Information which is collected and stored during normal use of the site, such as the internet protocol (IP) address used to connect your device to the internet, some other information such as your browser type and its version, and pages you visited if you opt to submit personal information for us to send you further information or email alerts. Furthermore, our website may also download cookies to your device – this is described in our separate [cookie policy].

When applying for a vacancy:

We may hold your name, contact details, details of the roles you are interested and other information regarding your career history and remuneration which you choose to provide to us or which we may request, if you:

  • make an application via a third party website;
  • provide us with your CV or other details directly by email or by phone;
  • make an application or submit your CV or other details via our website.

If you become a candidate for our permanent recruitment services, internal opportunities or agency-based work with us, additional personal information about you will be collected. This is described in our candidate privacy notice, which will be provided to you if applicable.

If you do not provide us with personal information requested, we will be unable to assess your application and/or progress your application.

Some of the personal information which you provide to us is categorised as ‘sensitive personal information’ (for example, health information). Under the Privacy Act any collection or use of such information will be in accordance with the Privacy Act.  

How we will use information about you

We will only use your personal information and sensitive personal information as set out below.

We are only allowed to process your personal data if we have a lawful basis to do so in accordance with data protection laws. We have reviewed the purposes of our processing activities and selected the most appropriate lawful basis (or bases) for each activity. In accordance with the GDPR, we rely on the appropriate legal bases set out below.

Processing Activities                                         Legal Basis

we analyse browsing activity data to understand how people use the features and functions of our website to identify improvement so that we can provide you with a better website experience we analyse how you interact with website and email content to enable us to provide you with better and more relevant content to fulfil your requests for more information, white papers, articles, alerts, newsletters or other content. Pages that collect this type of information may provide further information as to why your data is needed and how it will be used for surveys or research questionnaires to help improve our content or our services to you. We have a legitimate business      interest to provide you with our  services
to contact you for marketing purposes where you have agreed to this. You have provided us with consent

Data sharing

In connection with any application, request or enquiry you make, your information will be passed directly to the relevant business unit within Acacium Group.

We will not share your personal information with any third party, outside of Acacium Group that intends to use it for direct marketing purposes, unless we have specifically informed you and you have given us specific permission to do this.

We may use third parties, like service providers, agents or contractors to provide support and administration assistance for the internal operations of our websites, event registration systems, and applications.

These third parties may come in to contact with your personal information in the course of providing their services to us. All our third-party service providers are required to take appropriate security measures to protect your personal information in line with our policies. We do not allow our third-party service providers to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes and in accordance with our instructions.

International Transfers

Acacium Group operates in several international countries. It is possible that your personal information may be transferred, stored, and/or processed outside Australia, including in India. Depending on what you use the website for and in order to provide you with the best service and to carry out the purposes described in this Privacy Notice, your data may be transferred:

  • between and within Acacium Group entities.
  • to third parties (such as advisers or other Suppliers to the Acacium Group).
  • to third party service providers including technology providers.

We want to make sure that your data are stored and transferred in a way which is secure. We will therefore only transfer data outside of Australia where it is compliant with data protection legislation and the means of transfer provides adequate safeguards in relation to your data where you have consented to the data transfer.

To ensure that your personal information receives an adequate level of protection, we have put in place appropriate procedures with the third parties we share your personal data with to ensure that your personal information is treated by those third parties in a way that is consistent with, and which respects the law on data protection.

Data security

We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need-to-know. They will only process your personal information on our instructions, and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.

Data retention

We will only keep your personal data for as long as is necessary for the purposes for which it was collected.

Marketing: How do we use cookies? 

Information about how you use our website is collected automatically using “Cookies”. Cookies are small files that are sent to your device when you visit a website or app. They stay on your device and are sent back to the website or app they came from when you visit it again. For more information about cookies please visit www.allaboutcookies.org. You can control and delete cookies through your browser settings for more information on how to do this please visit www.allaboutcookies.org/manage-cookies. 

We use the following Cookies on our website: 

Typeof CookieDefinitionHow we use that Cookie
Session CookiesA Cookie that will only be stored on a device’s memory during the current browser session. Once the session has been closed the Cookie will be deletedThese Cookies will allow a more streamlined use of our website. You will be able to navigate around our website and we’ll remember the pages you visited so you can easily find and reach them again
Permanent CookiesA Cookie that will be permanently stored on your device’s and will remember information each time you revisit a websiteThese Cookies will allow you to save login details for your next visit. These cookies are enabled through your web browser, not our website. You can view your Permanent Cookies within your web browser settings
Targeted Advertising CookiesA Cookie that will remember the things you’re interested in on our website and remind you of these things through targeted adverts, sent via third-party platformsAfter you have visited our website we may send you personalised adverts via third-party platforms such as Facebook, Google or LinkedIn. These adverts are delivered to you so we can continue to engage with you and display new opportunities that may be of interest
Site Analytical CookiesA Cookie that will allow an anonymised analysis of how visitors navigate and use a websiteWe use Google Analytics to receive anonymised reports on how long visitors stay on our website, whether they apply for jobs and which of our jobs and web pages are getting the most views and interactions. This information allows us to improve user experience and make sure the content is relevant and interesting
Third-party CookiesA Cookie that will appear in third-party embedded content on a website, enabling the third-party to monitor engagement with that contentWe may embed third-party content onto our websites if we believe it is of interest to our website visitors or to improve their experience. This third-party content will carry a Cookie so that the content owner can measure how many people are engaging with that piece of content. We don’t control the settings of these Cookies. We recommend you check the third-party websites for more information about their cookies policy and how to manage them

Rights of access, correction, erasure, and restriction

Your rights in connection with personal information

Under certain circumstances you have the right to:

  • Request access to your personal information (commonly known as a “data subject access request”). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
  • Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
  • Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
  • Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.
  • Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
  • Request the transfer of your personal information to another party.

If you want to review, verify, correct or request erasure of your personal information, object to the processing of your personal data, or request that we transfer a copy of your personal information to another party, please contact DPO@acaciumgroup.com writing.

Right to withdraw consent

When you ask us for further information or sign up to our information services such as newsletters, you have the right to withdraw your consent for processing for this purpose at any time. To withdraw your consent, please contact DPO@acaciumgroup.com Once we have received notification that you have withdrawn your consent, we will no longer process your information and, subject to our retention policy, we will dispose of your personal data securely.

Data protection officer

We have appointed a data protection officer (DPO) to oversee compliance with this privacy notice. If you have any questions about this privacy notice or how we handle your personal information or wish to complain about an alleged breach of the Australian Privacy Principles as set out in the Privacy Act, please contact the DPO at dpo@acaciumgroup.com. We will acknowledge your compliant within 5 working days and expect to get back you with a substantive response within approximately 28 working days.

If you are not satisfied with our response to your compliant, you have the right to make a complaint at any time to the appropriate Data Protection Supervisory Authority in the relevant jurisdiction. In the UK, this will be the Information Commissioners Office (ICO), in Australia this will be the Office of Australian Information Commissioners Office (OAIC) https://www.oaic.gov.au/