Privacy Policy

COTSYS respects your right to privacy and is committed to protecting any personal information you provide to us.

COTSYS is bound by the National Privacy Principles (NPPs) set out in the Privacy Amendment (Private Sector) Act 2000. The NPPs set out minimum standards of privacy protection in relation to the collection, holding, use, disclosure, management, access, correction and disposal of personal information.

You may request more information about the way COTSYS manages the personal information it holds by contacting COTSYS at the contact details set out below. Here is some general information about COTSYS's information handling practices.

What sort of personal information does COTSYS hold?

Generally, the type of personal information COTSYS holds consists of names, addresses, contact details, credit card details and, in the case of applications for an account with COTSYS, credit reference information.

How does COTSYS collect personal information?

COTSYS collects personal information mainly by way of forms, over the telephone, and by facsimile and email.

What does COTSYS mainly use personal information for?

COTSYS mainly uses personal information for the purpose of processing orders for its products, processing applications for an account with COTSYS, completing other transactions and assessing applications for employment with COTSYS. From time to time COTSYS also uses personal information to give details about new products that become available, or other information about COTSYS and its products.

Who does COTSYS share personal information with?

In the case of applications for an account with COTSYS, COTSYS may disclose personal information received in connection with the application to credit reporting agencies and credit insurers.

How does COTSYS store and secure personal information?

COTSYS treats personal information as confidential and restricts access to it to those of its employees who need access to it for the purpose for which it was provided. Paper records containing personal information are stored in secure cabinets or rooms which are locked after hours. Records stored in computer systems are protected by restricted password access, backed up daily and stored off site. Credit card details processed on line are encrypted when being collected or transferred.

How can I gain access to my personal information held by COTSYS?

You can request access to your personal information at any time by contacting COTSYS at the contact details below. COTSYS will give you access to that information which it may provide by allowing you to inspect records or giving you a photocopy, printout or an accurate summary of the information.

Please note, however, that there are a limited number of situations in the NPPs where COTSYS is allowed to refuse access to personal information.

In that case COTSYS will provide you with an explanation of its refusal and will give you access to any part of the information which is not exempt from access.

COTSYS will require evidence of your identity before giving you access to your personal information.

How can I make a complaint to COTSYS about its handling of my personal information?

If you wish to complain about a breach or possible breach of the NPPs by COTSYS concerning its handling of your personal information, please contact COTSYS's Privacy Officer at the contact details below. COTSYS will acknowledge receipt of your complaint within 15 days (Official-working days/business hours) and use its best endeavours to resolve the complaint to your satisfaction.

If you are not happy with COTSYS's response, you may ask the Office of the Privacy Commissioner to investigate your complaint further.

More information

If you have any questions about COTSYS's privacy policy or if you would like a copy of the National Privacy Principles, please contact us form and mention policy officer within subject line.