This Privacy notice contains important information about the information we collect through this site and through use of our services. It contains details of who we are, how and why we collect, store, use and share personal information together with your rights in relation to your personal information and how to contact us and supervisory authorities in the event you have a complaint. We ask that you read this carefully.
Who we are
Upstairs is a trading name of Upstairs Regional Incubator Bathurst Ltd (ABN: 16 621 542 381).
In order to provide our services, we collect, use and make available certain personal information. We do this in accordance with the principles set out in this Privacy Notice, and in compliance with the Privacy and Personal Information Protection Act 1998 (PPIP Act).
For the purposes of PPIP Act, we are a “controller” of personal information.
The personal information we collect and use in the course of operating this website and providing services is provided below.
Information you give us
- your name;
- your email address;
- your social media handles (Twitter/LinkedIn/etc);
- payment information; and
- password details.
Information we collect automatically (Cookies)
This site, like many others, uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the US. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf.
More information about how Google uses this information can be found here.
By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.
How we use your personal information
- operate, monitor and improve this website and the services we offer, including allowing you to log into your Upstairs member account (if any) and for us to personalise it for you;
- communicate with you in order to respond to questions or comments that you have raised with us;
- send information to you regarding your membership – this may include copies of invoices, security alerts and messages regarding technical and administrative support issues; and
- send information to you regarding news, developments in our service, upcoming events, and other services offered by us and selected third parties that we believe will be of interest to you.
- we will only share your personal information in the following circumstances:
- where you have given us permission to do so;
- where you have made an application to Upstairs and we wish to include your registered name in order to identify you as the author of such application;
- with third parties who work with us and need it in order to provide our services to you (e.g. mentors, angel investors etc.); and
- when required to do so by applicable law.
How long your personal information will be kept
We will retain your personal information for as long as is necessary to fulfil the purposes outlined in this Policy, except where a longer period is permitted or required under applicable law.
Reasons we can collect and use your personal information
Legitimate InterestUnder the PPIA Act, it is lawful for us to process your personal information if we have a legitimate interest in doing so provided this legitimate interest is not overridden by the need to protect your rights and interests. In practice, this means that we will process your data when:
- it is necessary in order for us to provide services to you;
- our processing is in line with what you would reasonably expect us to do with your data; and
- our interests and our interests are aligned.
ConsentWe may also process your information in ways that you have consented to. Whenever we ask you for consent, we will do so in a way that is unambiguous, requires a clear affirmative act (i.e. an opt-in rather than an opt-out) and gives you all the information necessary to make an informed decision as to whether you wish to provide us with such consent. You have the right to withdraw any consent you have provided at any time. If you wish to do so, please contact our team at email@example.com
Transfer of your information to Third Parties
In providing the services through this website, we work with third parties. Where we transfer your personal information to a third party we will ensure that adequate safeguards are in place that are designed to help safeguard your privacy rights and give you remedies in the unlikely event of a misuse of your personal information.
- fair processing of information and transparency over how we use your use personal information;
- access to a copy of your personal information;
- require us to correct any mistakes in the information we hold about you;
- require the erasure of personal information concerning you in certain situations;
- receive the personal information concerning you which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to a third party in certain situations
- object at any time to processing of personal information concerning you for direct marketing;
- object to decisions being taken by automated means which produce legal effects concerning you or similarly significantly affect you;
- object in certain other situations to our continued processing of your personal information;
- restrict our processing of your personal information in certain circumstances; and
- potentially claim compensation for damages caused by our breach of any data protection laws.
Keeping your personal information secure
We have appropriate security measures in place to prevent personal information from being accidentally lost or used or accessed in an unauthorised way. We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.
We also have procedures in place to deal with any suspected data security breach. We will notify you of a suspected data security breach where we are legally required to do so.
How to complain
We hope our team would be able to resolve any query or concern you raise about our use of your information.
The PPIP Act also gives you right to lodge a complaint with a us or the NSW Ombudsman. Please submit your concerns or complaints to Upstairs at firstname.lastname@example.org
If you feel your complaint has not been adequately addressed by Upstairs, you have the right to contact the NSW Ombudsman at email@example.com
If you have any questions about this Privacy Notice, or the information we hold about you, please contact our team via email at firstname.lastname@example.org
By Post: Upstairs Regional Incubator Ltd, Level 1/203-209 Russell St, Bathurst NSW 2795.
Changes to this privacy notice
This privacy notice was published on 8 July 2020.
We may change this privacy notice from time to time, when we do, we will inform you via email if you have a registered membership with us.