1. WHO ARE WE?

In this policy “Ficeda”, “we”, “ours”, “us” means Ficeda Pty Ltd ACN 003 381 235 trading as Ficeda Motorcycle Accessories, Ficeda and Ficeda Accessories. Ficeda is a wholly owned subsidiary of Yamaha Motor Australia Pty. Ltd. ACN 002 556 989 ("YMA") and part of YMA and its related bodies corporate (the "Group").

Ficeda provides various motorcycle accessories throughout Australia and are committed to securing the privacy of your personal information. Ficeda is bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (‘APPs’) upon which this policy is based.

2. WHAT INFORMATION DO WE COLLECT?

Personal Information

For products and services we provide, it is often necessary for us to collect ‘personal information’. Personal Information is any information about an individual that identifies them or by which their identity can be reasonably ascertained.

The personal information we collect will usually be your name, identity details, residential address, mailing address, contact details (including email and phone number(s)), demographic information such as post codes, preferences and interests about our products and services, and other information relevant to customer surveys, social media, product research and/or offers.

Information collected from your online activity

When you use our website, we may collect information about your location or activity including your IP address, telephone number and whether you have accessed third-party sites from our website. We refer to this information as ‘Website Information’.

Some Website Information is collected using cookies (see section further below on ‘HOW WE USE COOKIES’) and is used to improve our services and enhance your online experience with us and does not identify the internet browser. Where we do identify you (such as where you have logged onto one of our online services), we treat any use of disclosure of that information in accordance with this policy.

Personal information collected from employment candidates

If you have applied for employment with us or an entity in the Group, this privacy policy applies to your personal information that you share with us or the Group, or that is otherwise acquired by us or the Group, during the application and/or recruitment process, including but not limited to:

• your name, address, email address, telephone number and other contact information;

• personal information contained in your CV, resume, cover letter and other accompanying documents relating to your application;

• personal information obtained from interviews and reference checks (including referee checks and National Police Check); and

• personal information obtained from publicly available sources.

We collect your personal information so that we can carry out the application and recruitment process, which includes, but is not limited to, assessing your application and skills, identifying you, verifying your information, conducting reference checks (including referee checks and National Police Checks), and complying with all applicable laws and regulations.

3. WHY WE COLLECT YOUR PERSONAL INFORMATION?

We collect your personal information (including Website Information) so we can:

• identify you and conduct appropriate checks;

• understand your requirements and provide you with a product or service;

• set up, administer and manage our products and services;

• tailor your experience on our website, showing you individually tailored content;

• manage, train and develop our employees and representatives;

• manage complaints and disputes, and report to dispute resolution bodies;

• comply with our legal obligations;

• get a better understanding of you, your needs, your behaviours and how you interact with us, so we can engage in product and service research, development and business strategy including managing the delivery of our services and products via the ways we communicate with you; and

• provide you with marketing materials and offers.

All phone calls to our customer relations team are recorded for quality and training purposes. You must notify the customer relations representative if you do not wish to be recorded.
If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your express consent, or provide you with an opportunity to say no.

4. WHAT WE DO WITH INFORMATION WE DID NOT ASK FOR

Where we receive unsolicited information, we will check whether that information is reasonably necessary for or directly related to our functions or activities. If it is, we will handle this information the same way described in ‘HOW DO WE HANDLE YOUR PERSONAL INFORMATION?’ If the information is not reasonably necessary, we will take reasonable steps to securely destroy the information or permanently de-identify it as soon as practicable, provided it is lawful and reasonable to do so.

We will not retain your personal information for longer than is required for the purpose for which it was collected, or as otherwise required or permitted by law. When personal information is no longer required, we will take reasonable steps to securely destroy or permanently de-identify it.

5. WHAT HAPPENS IF YOU DO NOT GIVE US YOUR PERSONAL INFORMATION?

If you choose not to provide us with the information we have requested, we may not be able to provide you with our services or products, and/or properly manage and administer services and products provided to you.

6. HOW DO WE COLLECT YOUR PERSONAL INFORMATION?

We will collect personal information directly from you, and in some cases, from other people or organisations. This may take place in several ways, such as when a form for a product or service is completed or a product or service is requested over the telephone, internet, via social media, SMS or email. If you provide us with information about someone else, you must only do so with their consent and agree to make them aware of this privacy policy.

Regardless of who provides personal information to us, it will always be handled by Ficeda in accordance with this privacy policy.

7. HOW DO WE HANDLE YOUR PERSONAL INFORMATION?

We may disclose your personal information to entities in the Group and they may disclose or use your personal information for the purposes we describe in ‘WHY DO WE COLLECT YOUR PERSONAL INFORMATION?’ in relation to products and services they may provide to you. They may also use your personal information to help provide products and services to other customers, but they’ll never disclose your personal information to another customer without your consent.

We will use and disclose your personal information for the purposes we collected it as well as purposes that are directly related, where you would reasonably expect us to. We may disclose your personal information to and/or collect your personal information from:

• other entities within the Group together with other related bodies corporate from time to time;

• any of our Group joint ventures where authorised or required;

• customer, product, business or strategic research and development organisations;

• data warehouse(s), strategic learning organisations, data partners, analytic consultants;

• social media and other virtual communities and networks where people create, share or exchange information;

• publicly available sources of information;

• clubs, associations, member loyalty or rewards programs and other industry relevant organisations;

• a third party as required by law;

• a third party that we’ve contracted to provide financial services, financial products or administrative services – for example:

• information technology providers,

• administration or business management services, consultancy firms, auditors and business management consultants,

• marketing agencies and other marketing service providers,

• claims management service providers,

• print/mail/digital service providers, and

• imaging and document management services;

• accounting or finance professionals and advisers;

• legal and any other professional advisers or consultants;

• any other organisation or person, where you have asked them to provide your personal information to us or asked us to obtain personal information from them, for example your family member;

• debt collection agencies, your guarantors, organisations involved in valuing, surveying, or registering a security property, or which otherwise have an interest in such property, purchasers of debt portfolios;

• hospitals and medical, health or wellbeing professionals;

• any external dispute resolution body such as tribunals;

• government, statutory or regulatory bodies and enforcement bodies; and

• suppliers, manufacturers and the Group’s dealership partners.

We will use a variety of methods to collect and disclose your personal information, including through written correspondence, telephone calls and electronic means. We may collect and disclose your personal information during the information life cycle, regularly, or on an ad hoc basis, depending on the purpose of collection.

8. OVERSEAS DISCLOSURE

Sometimes, we need to provide your personal information to, or get personal information about you from, persons located overseas for the same purposes as in ‘WHY DO WE COLLECT PERSONAL INFORMATION?’.

The countries we may disclose your personal information to include:

• New Zealand;

• Japan;

• India;

• Singapore;

• Switzerland;

• Sweden;

• United States of America;

• France;

• Italy;

• United Kingdom;

• China.

From time to time, we may need to disclose your personal information to, and/or collect your personal information from, other countries not mentioned above. Nevertheless, we will always disclose and collect your personal information in accordance with Australian privacy laws.

9. YOUR PERSONAL INFORMATION AND OUR MARKETING PRACTICES

Every now and then, we and the Group might let you know (including via mail, SMS, email, telephone or online) about news, special offers, products and services that you might be interested in. We and the Group will engage in marketing unless you tell us otherwise. You can contact us to update your marketing preferences or ‘opt out’ at any time.

In order to carry out our direct marketing, we collect your personal information from and disclose it to others that provide us with specialised data matching, trending or analytical services, as well as general marketing services (you can see the full list of persons and organisations under ‘HOW DO WE HANDLE YOUR PERSONAL INFORMATION?’). We may also collect your personal information for marketing through other avenues such as competitions, trade shows and by purchasing contact lists.

We, and other people who provide us with services, may combine the personal information collected from you or others, with the information we, or the Group or our service providers already hold about you. We may also use online targeted marketing, data and audience matching and market segmentation to improve advertising relevance to you.

10. HOW WE USE COOKIES

A cookie is a small file that is stored on your device which may ask permission to be placed on your computer's hard drive. Once you agree, the file is added, and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.

We use traffic log cookies to identify which pages are being used. This helps us analyse data about webpage traffic and improve our website in order to tailor it to customer needs. The information collected through these cookies is used for statistical analysis purposes, and is not used to personally identify you.

Overall, cookies help us provide you with a better website experience by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.

You can choose to accept or decline cookies. Most web browsers initially or automatically accept cookies, but you can usually modify your browser setting to decline, delete, or receive alerts about cookies on your device. If you decline or delete cookies, this may limit the functionality or availability of certain features on our website.

11. LINKS TO OTHER WEBSITES

Our websites may contain links to other sites. If you click on a third-party link, you will be directed to that site. Note that these external sites are not operated by us. Therefore, we strongly advise you to review the privacy policy of these websites. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services (including cookies).

12. SECURITY OF PERSONAL INFORMATION

We are committed to ensuring that your personal information is secure. To prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the personal information we collect.

The security of your personal information is important to us and we take all reasonable precautions to protect personal information from misuse, loss, unauthorised access, modification or disclosure.

Some of the ways we protect personal information include:

• training Ficeda staff on how to keep your personal information secure;

• external and internal premises security;

• implement appropriate IT security measures and conduct regular monitoring;

• restriction of access to personal information to staff who need it to perform their day to day functions;

• implementation of internal policies and procedures regarding privacy and information management practices;

• document, investigate and implement preventative measures in the event of business incidents relating to systems and/or data;

• maintaining technology products to prevent unauthorised computer access including identifiers and passwords, firewalls, antivirus etc.;

• encryption of data that has been stored offsite from our premises;

• other security controls including, annual penetration testing, data transmissions over https and sftp;

• raising staff awareness through appropriate policies and training; and

• securely storing hard copy documents.

13. MORE INFORMATION, ACCESS, CORRECTION OR COMPLAINTS

You can access your personal information we hold about you by using the contact details described in section ‘CONTACT US AND OPTING OUT’. We will need to confirm your identity before providing you access to the personal information requested. We will try to provide you the personal information requested within a reasonable period of your request.

It is very important for us to have your correct details to service you better. If you become aware that the information we hold about you is not correct or if you wish to update your information, please contact us using details described in ‘CONTACT US AND OPTING OUT’. In the event inaccurate information was previously disclosed to another entity or third party, we will take reasonable steps to notify them.

We may charge reasonable cost of retrieving the information and supplying it (including any correction) to you, or the authorised person on your behalf who has requested access.

Access to personal information may be refused in a number of circumstances, such as where the information relates to legal proceedings or the request for access is frivolous or vexatious. If we deny or restrict an individual's access, we will explain why.

If any of the information we are holding about you is incorrect or incomplete, please write to or email us, via details provided under ‘Complaints’ section below, as soon as possible. We will promptly take reasonable steps to correct any information found to be incorrect or not up to date.

14. COMPLAINTS

If you believe that the privacy of your personal information held by us has been compromised or would like to make a compliant, you can contact us:

By phone: 1300 437 711 By email: info@ficeda.com.au

We will respond to your complaint as soon as possible. If you are not satisfied with our response or disagree to a decision, you may take your complaint to the Office of the Australian Information Commissioner by visiting www.oaic.gov.au, calling 1300 363 992 or by emailing enquiries@oaic.gov.au or in writing, GPO Box 5288 Sydney NSW 2001.

15. CONTACT US AND OPTING OUT

If you would like more information about Ficeda’s approach to privacy or if you wish to withdraw your consent (including for things such as receiving information on products and offers by us or persons we have an association with), please contact us on 1300 794 454 or email info@ficeda.com.au.

16. CHANGES TO THIS PRIVACY POLICY

This policy may change from time to time. Please visit our website regularly as we will let you know of any changes to this policy by publishing a notification on our website. In addition, over the course of our relationship with you, we may provide additional information about how we handle your information. This could be when you complete an application or form. We recommend you review these statements, as they may contain specific details for your product and/or service holding.