We know your personal information is important to you and it is also important to Gallery Systems. This Privacy Statement tells you what we use your personal information for and explains your rights around how we use it. Please read this Privacy Statement to understand how and why we use your personal information.
If you give us personal information about someone else, please make sure you have their permission and please make them aware of this Privacy Statement as it also applies to them.
For the purposes of the applicable data protection legislation, Gallery Systems and Suncoast Web Solutions are the only companies that have access to your data. You will find our contact details in the “Contact us” section below.
We may collect and process the following categories of data:
Without collecting and using the information you provide to us or we obtain about you, it would not be possible for us to provide you with our products and/or services.
We use information held about you in the following ways:
We will use this information:
We must have lawful bases to collect and use your personal information, the below sets these out:
Needed for your contract.
Personal information about you and other users registered with Gallery Systems is held and used to:
Required by law: We use your personal information to comply with any law and regulations where we are required to do so.
Our legitimate interest: We use your personal information for our legitimate interests as shown below. We have taken account of any privacy risks and ensured that your data protection rights are not affected. We believe these uses benefit our customers. You can contact us if you have any questions using the contact details firstname.lastname@example.org
With your consent: For certain uses, we rely on your consent to collect and use your personal information. You are given the choice to provide consent or not. When we collect your consent, we explain what we need it for and how you can change your mind in the future.
Who We Share Your Personal Information With
We may share your information with selected third parties including:
If a service provider needs to access information about you to perform services on our behalf, they do so under close instruction from us, including policies and procedures designed to protect your information.
We may disclose your personal information to third parties:
It is our aim to only hold your data for as long as this is necessary. While you continue as a customer with us we will retain your data as detailed above in this statement. The retention period will be 24 months from the date of termination of our terms of service. We have a high number of customers who re-engage with our service after a period of absence from the end of their contract. This retention period allows for the data to be reused where necessary. However, you can request that your Data is deleted at any time within this period. We will respond to your request and complete the full deletion within 30 days.
Specific legal periods are in place for payments details, tax and invoicing data, and this would be retained in accordance with the law (which is currently five years).
We are committed to protecting the security of your personal data. We use a variety of security technologies and procedures to help protect your personal data from unauthorised access and use. As effective as modern security practices are, no physical or electronic security system is entirely secure. The transmission of information via the internet is also not completely secure. We cannot guarantee the complete security of our databases, nor can we guarantee that information you supply will not be intercepted while being transmitted to us over the Internet. We will continue to revise policies and implement additional security features as new technologies become available.
Although we will do our best to protect your personal data, we cannot guarantee the security of your personal data transmitted to us. Any transmission of data is at your own risk. Once we receive your personal data, we use appropriate security measures to seek to prevent unauthorised access.
Physical files are stored in secured premises at our business address. Electronic files are stored on secure servers or in the cloud. Your data will not be transferred to any outside source not specified in this policy without your permission.
As an individual, under EU law you have the right to request that we:
Where we process your data solely on the basis of your consent, you are entitled to withdraw your consent at any time. This will not affect the lawfulness of our processing before the withdrawal.
You also have the right to lodge a complaint with the appropriate authories at any time.
The exercise of your rights might be subject to certain conditions and we might require further information from you before we can respond to your request.
We reserve the right to change this Statement at any point in time, at our sole discretion. If we make any changes, we will publish those changes on our website. At the bottom of this document you will find the date on which this Statement was last updated.
Questions, comments, requests and complaints regarding this Statement and the information we hold are welcome and should be addressed to us directly. We endeavour to deal with all requests promptly and efficiently.
Bimani Pty Ltd., Trading as Gallery Systems
Unit 3, 6 Technology Drive,
Warana Qld 4575
Last updated: 14th June 2018