Privacy Policy

1. About this Privacy Policy

In this Privacy Policy, Murray Valley Organics, we, us and our refer to the business operating under the Murray Valley Organics name, together with its owners, employees, contractors and authorised representatives.

This policy applies to personal information collected through our website, enquiry forms, email, telephone, text messages, social media, customer and supplier dealings, employment applications, farm or business visits and other interactions with us.

This policy explains:

• the kinds of personal information we may collect and hold;
• how and why we collect, use and disclose that information;
• how we protect and retain personal information;
• how you may request access to or correction of information;
• how you may make a privacy complaint; and
• how to contact us about privacy matters.

2. Privacy law and scope

We will comply with the Privacy Act 1988 (Cth), the Australian Privacy Principles and other applicable Australian or Victorian laws to the extent that they apply to our activities.

Some small businesses are exempt from parts of the Privacy Act 1988. Publishing this policy and following responsible privacy practices does not amount to an admission that every provision of that Act applies to every Murray Valley Organics activity. Where a law imposes a higher or different requirement, that requirement will prevail.

3. What personal information means

Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information is true or not and whether it is recorded in material form or not.

Information that has been permanently de-identified so that an individual is no longer reasonably identifiable is not treated as personal information.

4. Information we may collect

The information we collect depends on how you interact with us. It may include:

4.1 Contact and identity information

• name;
• residential, postal, business or delivery address;
• email address;
• telephone number;
• business name, employer, position or job title; and
• other contact or identification details reasonably required for the relevant interaction.

4.2 Enquiry and communication information

• website enquiry form contents;
• emails, telephone calls, text messages and social-media messages;
• requests, complaints, feedback and correspondence; and
• records of our communications and responses.

4.3 Customer, wholesale, supplier and transaction information

• produce or product requirements;
• quotations, orders and supply arrangements;
• delivery, collection, freight and logistics instructions;
• billing, account, invoice, payment and transaction records;
• contractual information; and
• records required to manage an ongoing business relationship.

4.4 Website and technical information

When you use our website, we or our service providers may collect:

• internet protocol address;
• browser, device and operating-system information;
• referring website and pages viewed;
• date, time and approximate geographic region;
• website interactions, cookie or session identifiers;
• security, error and diagnostic logs; and
• information used to detect spam, fraud, misuse or security incidents.

4.5 Sensitive information

We do not generally seek sensitive information through the website. Please do not include unnecessary health, financial, identity, criminal-record or other sensitive information in a general enquiry.

Where sensitive information is reasonably necessary, we will collect, use or disclose it only with appropriate consent or where required or permitted by law.

5. How we collect information

We generally collect personal information directly from you when you:

• submit a website form;
• contact us by email, telephone, text message or social media;
• request information or a quotation;
• place or discuss an order;
• enter into a customer, wholesale, supplier, contractor or service arrangement;
• arrange delivery or collection;
• visit our farm or business premises;
• make a complaint or provide feedback;
• apply for employment or contract work; or
• otherwise communicate or deal with us.

We may also receive information from your employer or business, a person authorised to act for you, customers, suppliers, transport providers, professional advisers, referees, recruitment providers, payment or accounting providers, technology providers, public records, social-media platforms, or government and regulatory bodies where permitted by law.

If we receive unsolicited personal information, we may determine whether we could lawfully have collected it. Where we could not, and retention is not otherwise required or permitted, we may destroy or de-identify it.

6. Why we collect and use information

We may collect, hold, use and disclose personal information to:

• receive, respond to and manage enquiries;
• communicate with customers, wholesalers, suppliers, contractors and business contacts;
• prepare quotations and manage orders;
• organise production, collection, transport, freight or delivery;
• provide information about produce, availability and the business;
• manage accounts, payments, invoices and financial records;
• assess employment or contract applications;
• operate, maintain, secure and improve our website and systems;
• detect and prevent spam, fraud, misuse and security incidents;
• handle complaints, disputes, claims, insurance matters and legal proceedings;
• obtain legal, accounting, insurance, technical or other professional assistance;
• comply with contractual, taxation, employment, regulatory and legal obligations;
• protect our lawful interests, property, systems, staff, visitors and customers;
• send direct marketing where permitted by law; and
• carry out another purpose explained at the time of collection or authorised by law.

We may use or disclose information for a secondary purpose where it is related to the original purpose and would reasonably be expected, where you consent, where it is required or authorised by law, or where another lawful exception applies.

7. Anonymity and information not provided

You may browse the general public areas of our website without giving us your name. Where reasonably practicable, you may deal with us anonymously or using a pseudonym.

Identification may be necessary where we need to respond to an enquiry, prepare an accurate quotation, process an order, arrange delivery, verify authority, manage payment, investigate a complaint, assess an application or comply with law.

If requested information is not provided, we may be unable to provide the requested product, service, response or assistance.

8. Disclosure of information

We may disclose personal information where reasonably necessary to:

• our owners, employees and authorised representatives;
• contractors, consultants and service providers assisting our operations;
• website developers, hosting providers, IT-support, email, cloud, communications and cybersecurity providers;
• payment, banking, bookkeeping and accounting providers;
• transport, freight, courier and logistics providers;
• insurers, assessors, claims managers and professional advisers;
• debt-recovery or credit-management providers where lawful;
• government agencies, regulators, courts or law-enforcement bodies;
• parties involved in a proposed sale, finance, restructure, merger or transfer of the business;
• another person with your consent; or
• another person where disclosure is required or authorised by law.

We seek to limit disclosures to information reasonably necessary for the relevant purpose. We do not sell or rent personal information to third parties.

9. Direct marketing

We may send produce availability information, news or other marketing communications where we have the required consent or another lawful basis.

Submitting a general enquiry or making a one-off purchase does not automatically subscribe you to a marketing list.

Where required, marketing communications will identify Murray Valley Organics and include a functional unsubscribe method. You may opt out at any time by using the unsubscribe facility or emailing info@murrayvalleyorganics.com.au.

We may continue to send non-marketing communications reasonably necessary to respond to an enquiry, manage an order or account, provide service or delivery information, handle a dispute, or comply with legal obligations.

10. Cookies and website technologies

Our website may use cookies, local storage, session data and similar technologies to:

• operate essential website functions;
• remember preferences and consent choices;
• process and secure forms;
• prevent spam, fraud and misuse;
• maintain website security and performance;
• understand general website usage;
• diagnose technical problems; and
• improve the website and user experience.

You can usually control cookies through your browser or the website’s cookie controls. Disabling certain cookies may affect website functionality.

Where analytics, embedded video, maps, social media, security or other third-party services are enabled, those services may set or read their own cookies in accordance with their policies.

11. Third-party websites and services

Our website may link to or embed third-party websites, maps, videos, social-media platforms or other external services. Those services operate independently and may collect information under their own privacy policies and terms.

Murray Valley Organics is not responsible for the privacy, security, availability, accuracy or content of an external service merely because our website links to or embeds it. Review the relevant third party’s privacy terms before providing information.

12. Overseas storage and processing

Some website, hosting, email, cloud, analytics, security, payment or communications providers may operate infrastructure or engage subcontractors outside Australia. Personal information may therefore be stored in, processed in, or accessible from overseas locations.

The countries involved may change depending on the providers and infrastructure used at the relevant time. Where applicable law requires it, we will take reasonable steps appropriate to the circumstances when using overseas service providers.

You may request information about known overseas service locations relevant to information we hold about you by emailing info@murrayvalleyorganics.com.au.

13. Security of personal information

We take reasonable administrative, physical and technical steps appropriate to our circumstances to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure.

Measures may include access controls, authentication, secure hosting, website security, anti-spam and malware controls, software updates, backups, restricted staff or contractor access, record-management procedures and appropriate service-provider arrangements.

No website, email service, internet transmission, computer system or storage method is completely secure. Although we take reasonable precautions, we cannot guarantee absolute security or that unauthorised access will never occur.

Do not send highly sensitive information through a general website form or ordinary unencrypted email unless specifically requested and appropriate arrangements have been made.

14. Retention, destruction and de-identification

We may retain personal information for as long as reasonably necessary for:

• the purpose for which it was collected;
• ongoing customer, supplier, employment or business relationships;
• business operations and administration;
• accounting, taxation, employment and record-keeping requirements;
• insurance and risk-management purposes;
• fraud prevention and cybersecurity;
• complaints, disputes and legal claims;
• backup and disaster-recovery processes; and
• other applicable legal or contractual obligations.

When information is no longer reasonably required, we will take reasonable steps to destroy it or permanently de-identify it, unless retention is required or permitted by law.

Residual copies may remain temporarily in secure backups, archives, email systems or disaster-recovery storage until removed through ordinary retention cycles.

15. Accuracy and information quality

We take reasonable steps to ensure that personal information used or disclosed by us is accurate, current, complete and relevant for its intended purpose.

Please notify us when your contact, delivery, account or other relevant details change by emailing info@murrayvalleyorganics.com.au.

16. Access requests

You may request access to personal information we hold about you.

Your request should identify you, describe the information sought, provide relevant dates or details, and give sufficient information for us to locate the records. We may request reasonable identity verification before releasing information.

We will respond within a reasonable period. Access may be refused or limited where permitted by law, including where access would unreasonably affect another person’s privacy, reveal legally privileged or confidential information, prejudice an investigation, be unlawful, or relate to existing or anticipated legal proceedings.

Where required by law, we will give reasons for refusing access and information about available complaint mechanisms. A reasonable administrative charge may apply where permitted, but we will not charge merely for making a request.

17. Correction requests

You may ask us to correct personal information you believe is inaccurate, out of date, incomplete, irrelevant or misleading.

Please identify the information concerned, the correction requested, why it should be corrected, and any supporting material. We may verify your identity before making a change.

Where required by law, we will respond within a reasonable period and provide reasons if we refuse the requested correction.

18. Deletion requests

You may ask us to delete or de-identify personal information by emailing info@murrayvalleyorganics.com.au with the subject Privacy Deletion Request.

Australia does not provide an unrestricted right to erasure in every circumstance. We will consider the request and delete or de-identify information where reasonably practicable and legally permitted.

We may retain information required for an active order or business relationship, taxation, accounting, employment, insurance, security, complaint handling, legal claims, regulatory or contractual obligations, or another lawful purpose. Deletion from active systems may not immediately remove residual backup or archive copies.

19. Privacy complaints

If you believe we have mishandled your personal information, please make a written complaint to us first.

Please include your name and contact details, a description of the concern, relevant dates and communications, supporting information, and the outcome sought.

We will assess the complaint, may request further information, and aim to acknowledge and respond within a reasonable period. We may consult relevant personnel, advisers or service providers where reasonably necessary to investigate and resolve it.

Where the Privacy Act 1988 applies and you are dissatisfied with our response, or we do not respond within the period considered reasonable by the Office of the Australian Information Commissioner, you may be entitled to contact the Office of the Australian Information Commissioner.

20. Data breaches

If we become aware of suspected loss, misuse, unauthorised access or unauthorised disclosure of personal information, we may:

• contain and secure the incident;
• investigate what occurred;
• assess the information and likely consequences;
• take remedial and security measures;
• seek professional advice;
• notify affected individuals where appropriate; and
• notify a regulator where required by law.

Where the Notifiable Data Breaches scheme applies, we will assess suspected eligible data breaches and provide any notifications required by law.

21. Employment and recruitment information

If you apply for employment, contract work or another role, we may collect your contact details, resume, employment history, qualifications, licences, skills, availability, right-to-work information, referees, interview notes and other information relevant to assessing the application.

We may contact referees or previous employers where you have authorised us to do so. Information about unsuccessful applicants may be retained for a reasonable period for recruitment, legal, insurance or record-keeping purposes, unless deletion is appropriate and legally permitted.

Employee records may be subject to specific legal rules and exemptions. We will handle them in accordance with applicable workplace and privacy requirements.

22. Photographs, videos and farm visits

Photographs or videos may occasionally be taken at our farm, workplace, events or business activities. Where an individual is clearly identifiable and an image is intended for public, promotional or marketing use, we will seek appropriate permission where reasonably required.

Visitors must not photograph or record employees, contractors, other visitors, documents, equipment, restricted areas or business operations without appropriate permission.

We may restrict photography, recording or access to parts of the farm or premises for privacy, workplace safety, biosecurity, security or commercial reasons.

23. Children and young people

Our website and produce-supply services are not directed specifically at children.

A parent or guardian who believes a child has provided personal information without appropriate authority should email info@murrayvalleyorganics.com.au. We will assess the request and take reasonable action where appropriate.

24. Business changes and legal rights

If Murray Valley Organics is sold, financed, merged, restructured or transferred, personal information may be disclosed to professional advisers, prospective purchasers, financiers, insurers, related entities or the new owner or operator where reasonably necessary and legally permitted.

Nothing in this policy requires us to disclose legally privileged material, another person’s confidential information, or commercially sensitive information where disclosure is not legally required. It does not require us to destroy records that must or may lawfully be retained, or to waive any legal right, privilege, defence or remedy.

25. Policy changes and contact details

We may update this policy to reflect changes to our business, website, systems, service providers, information-handling practices, law or regulatory guidance. The current version will be published on this page with its effective or last-updated date.

26. Website Contact Form Collection Notice

When you submit an enquiry through our website, Murray Valley Organics collects the name, email address, telephone number, enquiry type, message and technical information entered or generated through the form for the purpose of receiving, responding to, securing and managing your enquiry.

The information may be accessible to authorised Murray Valley Organics personnel and service providers assisting with website hosting, email delivery, administration, security, spam prevention, backups or the handling of your enquiry.

The website records that the required privacy acknowledgement checkbox was selected. Valid enquiries may be stored privately in the WordPress administration system before email delivery is attempted so that an enquiry is not lost if the email service fails.

Submitting an enquiry does not automatically subscribe you to marketing. If required information is not provided, we may be unable to respond or provide the requested assistance.

For access, correction, deletion or complaint requests, email info@murrayvalleyorganics.com.au.