Privacy policy

This Privacy Policy describes how Uniform Management Services Pty Ltd (trading as UMS) ("UMS", "we", "us" or "our") collects, uses, holds, discloses and protects your personal information when you visit or make a purchase from umspl.com.au (the "Site"). We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Our Privacy Officer is responsible for privacy matters at UMS and can be contacted using the details at the end of this policy.

Personal Information We Collect

When you visit the Site, we automatically collect certain information about your device, including your web browser, IP address, time zone, and some of the cookies installed on your device. As you browse the Site, we collect information about the pages or products you view, the websites or search terms that referred you to the Site, and how you interact with the Site. We refer to this automatically-collected information as "Device Information". We collect Device Information using cookies, log files, and web beacons, tags and pixels. For information about cookies and how to disable them, visit allaboutcookies.org.

When you make or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information, email address, and phone number. We refer to this information as "Order Information".

Where you are ordering uniform items for a student, we also collect the student's first name, surname and class or year level at the point of ordering. We collect this information so that we can identify your order, prepare the correct items and sizes, and deliver the order to the correct student at the correct school.

When we talk about "Personal Information" in this Privacy Policy, we are referring to Device Information, Order Information and student details.

Children and Students

Our Site is intended for use by adults. We do not market to children, and customer accounts are intended to be created and used by parents, guardians, school staff and other adult purchasers.

We do collect a limited amount of information about students, being the student's name and class or year level provided by the adult placing the order, together with the school the order relates to. This information is used only to fulfil and deliver the order and to support returns, exchanges and enquiries about that order. We do not use student information for marketing, profiling, data mining, advertising or analytics, and we do not disclose it other than as described in this policy.

How Do We Use Your Personal Information?

We use the Order Information that we collect to fulfil orders placed through the Site (including processing your payment, arranging shipping, and providing you with invoices and order confirmations), to communicate with you, and to screen our orders for potential risk or fraud.

We use the Device Information that we collect to help screen for potential risk and fraud (in particular, your IP address), and to operate, maintain and secure the Site.

We do not sell your personal information, and we do not use it for third-party targeted or behavioural advertising. Where UMS supplies services to schools or government customers, personal information collected in connection with those arrangements is not used for profiling, data mining, advertising, or analytics.

Sharing Your Personal Information

We share Personal Information with service providers only to the extent necessary to operate our store, process and fulfil your orders, and answer your enquiries. We may also disclose Personal Information to comply with applicable laws and regulations, to respond to a lawful request for information (such as a subpoena, search warrant or other lawful request), or to otherwise protect our rights.

Service Providers and Sub-processors

We use the following providers to operate the online store and to process and deliver orders, disclosing to each only the personal information necessary for the stated purpose.

Shopify Inc. (including Shopify Payments), shopify.com/legal/privacy. Provides the e-commerce platform that hosts the store and processes orders and payments. Information disclosed: customer name, email, phone, billing and shipping address, order details including student details, and payment status (card data is processed within Shopify Payments' PCI DSS environment). Processing location: cloud infrastructure (Google Cloud), typically a United States region. Basis: necessary to provide the store and fulfil orders.

PayPal, paypal.com. Provides an alternative payment method at checkout. Information disclosed: payer contact and transaction details necessary to process the payment. Processing location: overseas, including the United States. Basis: necessary to process the customer's chosen payment.

Shipping and courier providers. UMS uses one or more carriers to deliver orders and may change carriers from time to time. Information disclosed: recipient name, delivery address, and contact details necessary for delivery. Processing location: primarily Australia, and overseas where a carrier processes information outside Australia. Basis: necessary to deliver the customer's order.

Clever Few Corp., trading as Parcelify, cleverfew.co (privacy contact: privacy@cleverfew.co). Calculates delivery charges at checkout. Information disclosed: customer name, email address and phone number, shipping and billing addresses, device information, and order and cart details, received from the store at checkout. Processing location: Canada and the United States. Retention: short-term operational retention in accordance with the provider's published policy. Basis: necessary to calculate delivery charges so that your order can be completed.

2690292 Ontario Inc., trading as Dash Checkout (DC Order Limits), dashcheckout.io (privacy contact: data@dashcheckout.io). Applies the purchase limits that schools and UMS set on certain items. Information accessed: customer email address, device and activity information, and recent order history, accessed at the time of the order; the provider stores only a numeric customer identifier. Processing location: Canada. Basis: necessary to apply agreed ordering limits.

Locksmith, uselocksmith.com (privacy contact: team@uselocksmith.com). Controls which school product ranges are displayed on the store. Information accessed: store, product and customer information through the platform's interface, with customer records held only transiently. Processing location: Canada and the United States. Basis: necessary to present the correct school's product range to the correct visitors.

LayoutHub, layouthub.com. Provides page layout and presentation for parts of the store. Information accessed: store configuration and store owner details, and, through platform permissions, visitor information. UMS does not operate analytics or advertising components on the store. Processing location: per the provider's published policy. Basis: necessary to present the store.

Microsoft Corporation (Microsoft 365), microsoft.com/privacy. Hosts the UMS email environment, in which notifications of orders placed for a school are received and held so that the relevant UMS shop can answer collection enquiries. Information disclosed: customer contact details, order contents and student details contained in those notifications. Processing location: Microsoft's cloud infrastructure; information may be processed or stored outside Australia. Basis: necessary to operate our business and to support your order.

UMS systems are administered on our behalf by a contracted Australian managed information technology provider, under confidentiality and security obligations. That provider's personnel may access systems containing personal information for administration and support purposes only. The provider's identity is available on request.

Access and Disclosure Outside Australia

Some personal information is processed, stored or accessed outside Australia.

Our providers. Shopify holds online store customer data on enterprise cloud infrastructure (Google Cloud), typically in a United States region. Other providers listed above process information in the United States, Canada or other locations as described.

Our own personnel. UMS operates a facility in Vietnam. UMS order-processing staff at that facility access online order information, including your name, contact and delivery details, the items ordered, and the student name and class provided at checkout, for the sole purpose of processing and fulfilling your order. The information remains held in our cloud environments and is accessed remotely for that purpose only. It is not stored on local systems or devices at that facility, and it is not used for profiling, data mining, advertising or analytics. Administration of the online store, and customer service, are performed from Australia.

Before personal information is disclosed to, or made accessible from, an overseas location, we take reasonable steps in the circumstances to ensure it is handled consistently with the Australian Privacy Principles, as required by APP 8. For UMS personnel outside Australia this includes limiting access to staff with an order-processing role, requiring individually named accounts with multi-factor authentication, and applying the same access control, confidentiality and acceptable-use requirements that apply to our Australian personnel.

Opt-Out Preference Signals

Where your browser sends a recognised opt-out preference signal (such as Global Privacy Control), we treat it, to the extent it applies, as a request to opt out of any disclosure of personal information that could be considered a "sale" or "sharing" for that browser and device.

How We Protect Personal Information

We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. These steps include access controls and multi-factor authentication for staff accounts, individually named accounts rather than shared logins, security monitoring of our managed environment, backup of business systems, staff privacy and security awareness training, and the use of reputable providers that maintain recognised security certifications for the platforms we rely on.

Your Rights

You may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. To make a request, contact us using the details below. We will respond within a reasonable period and in accordance with the Australian Privacy Principles.

If you have a complaint about how we have handled your personal information, please contact us first using the details below so we can try to resolve it. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or 1300 363 992.

Data Retention

We retain Order Information, including student details, for as long as necessary to fulfil the purposes described in this policy and to meet our legal, taxation, audit and record-keeping obligations. When we no longer need personal information and are not required by law to retain it, we take reasonable steps to destroy or de-identify it in accordance with APP 11.

Customer accounts on the Site are optional. Where an account has had no login or order activity for 24 months, we treat it as dormant and delete or de-identify the account and its associated personal information, unless we are required to retain related order information to meet a legal, taxation, audit or contractual obligation. You may also ask us to delete your account and personal information at any time using the contact details below.

Changes

We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons. The date at the top of this policy shows when it was last updated.

Contact

For questions about this Privacy Policy, to exercise your rights, or to make a complaint, contact our Privacy Officer:

Uniform Management Services Pty Ltd (trading as UMS)
2/205 Queensport Road North, Murarrie QLD 4172, Australia
Email: customerservice@umspl.com.au
Phone: 07 3535 9500