1. About this Privacy Policy
1.1 Northern Minerals Limited ABN 61 119 966 353 and its related bodies corporate (collectively, NTU Group) are committed to ensuring the privacy of your personal information. All references to NTU, our, us, or we in this Privacy Policy refer to any or all members of the NTU, as applicable.
1.2 This Privacy Policy sets out how:
(a) NTU may collect, use, disclose, store and otherwise process your personal information and the kinds of personal information NTU collects;
(b) you may seek access to, or the correction of your personal information; and
(c) you may make a complaint in respect of a breach of this Privacy Policy or the Australian Privacy Act 1988 (Cth) (Privacy Act).
1.3 We may vary this Privacy Policy, at any time, by making an updated version available at: https://northernminerals.com.au/privacy-policy/. By choosing to engage with NTU, you acknowledge and agree to this Privacy Policy, as varied.
2. Collecting your personal information
2.1 We collect personal information through a number of mediums and such information includes personal information that you provide to us or that we gather.
2.2 The following sets out the kinds of personal information we collect and hold, and how we collect it.
(a) Visiting our websites: We may collect personal information when you submit an enquiry through, or to our email address provided on, our website. We may also collect personal information when you message us via, or post on, our social media pages (but we will never ask you to supply personal information publicly). We may also collect cookies from you when you access, browse or otherwise use any of our websites. Although cookies are not personal information, in some circumstances, cookies may allow us to identify you. Any personal information obtained through the use of cookies will only be processed in accordance with this Privacy Policy. If you want to, you can disable your web browser from accepting cookies. If you do, you can still access our websites, but not all functionality may be available. If you follow a hyperlink to another third party website or external content, the privacy policy (if any) of that third party website or host of the external content will apply.
(b) Investing with us: We collect personal information from existing and prospective investors to support the shareholder transaction and related communication. This may include financial holdings information and shareholder status, and may occur through our external service providers such as those who manage our share register and our investor communication.
(c) Doing business with us: We collect information from clients, suppliers, investors and other external parties for the purpose of business transactions. This includes entering into and fulfilling contracts, supplying goods or services and for communication purposes. This information is generally only business contact related information.
(d) Working for us: We collect personal information when you submit a job application, commence employment with us either directly or through an external provider. Such information varies, but may include information regarding your identity, contact details, right to work, employment history and training and qualifications, and may include sensitive information such as whether you have a disability we need to accommodate or results of any background checks. We generally only collect sensitive information if it is reasonably necessary to do so.
(e) Visiting our work sites: We collect personal information from visitors for safety and security purposes. This may include basic contact information and images collected through closed circuit television (CCTV).
(f) Other sources: We may also collect your personal information from indirect sources such, as publicly available data sources and information service providers.
3. Using your personal information
3.1 We will only use personal information for the primary purpose(s) for which it was collected and for any other purpose that you consent to, including to:
(a) notify you of our ASX announcements, company presentations, projects and other news relating to us;
(b) respond to your enquiries;
(c) provide you with goods or services;
(d) directly offer you products and services we believe may be of interest and value to you (but we will not do so if you tell us not to via the contact details set out in this Privacy Policy or opt-out facility provided to you);
(e) keep a record of our dealings with you;
(f) form or maintain business relationships;
(g) carry out our business and related processes;
(h) verify your personal information, consider your job application, conduct background checks, contact you about any available job position;
(i) ensure your safety and security and that of others (e.g. by the use of CCTV); and
(j) comply with our legal obligations.
3.2 We may also use your personal information for a secondary purpose that is related to a purpose for which we collected it, provided you would reasonably expect us to do so.
3.3 If we offer you products and services under paragraph 3.1(d), we may do so by various means including by mail, telephone, email, SMS or other electronic means and we may disclose your personal information to companies outside the NTU Group who assist us to market products and services to you.
4. Disclosing your personal information
4.1 We may disclose personal information:
(a) where necessary, authorised or required by law or a regulator;
(b) with your prior consent or when your consent can be reasonably inferred from the circumstances;
(c) to entities within the NTU Group;
(d) to protect our rights, property or the safety of our employees;
(e) to our contractors, suppliers (including technology suppliers) and business partners in connection with the operation of our business; and
(f) to carry out background checks for the purposes of reviewing your job application.
5. Overseas disclosures
5.1 You expressly consent to the disclosure of your personal information to overseas recipients, including to other entities within NTU Group and to their customers, contractors, suppliers (including technology suppliers) and business partners located overseas. Such overseas disclosures may be to the following countries: America, Germany, United Kingdom, Canada, France, China.
5.2 We take reasonable endeavours to ensure that third party recipients of your personal information located overseas comply with the Australian Privacy Principles. However, you acknowledge that:
(a) these third parties may not be bound by the Australian Privacy Principles; and
(b) we cannot control the acts or omissions of third parties.
As such we cannot guarantee that those third party recipients will handle your personal information in compliance with the Australian Privacy Principles and will not be required to comply with Australian Privacy Principle 8.1.
6. Storing your personal information
6.1 To ensure the privacy of personal information, we will take reasonable steps to:
(a) embed privacy protections into the design of information handling practices to protect personal information from unauthorised access, modification, deletion and disclosure;
(b) ensure that the personal information stored is accurate and up-to-date; and
(c) where personal information is no longer required by law or for the primary purpose it was obtained, destroy or de-identify it.
6.2 If we believe that there has been a data breach that impacts your personal information and creates a likely risk of serious harm, we will notify you and the Office of the Australian Information Commissioner as soon as practicable and keep in close contact with you about the nature of the breach, the steps we are taking and what you can do to reduce the impacts to your privacy.
7. Your rights
7.1 If you:
(a) wish to seek access to, or correct any of your personal information that we hold;
(b) have a question, concern or complaint regarding the way in which personal information is handled; or
(c) believe that we may have breached our obligations under the Privacy Act or has failed to comply with this Privacy Policy, please contact us by email at info@northernminerals.com.au or post correspondence to Level 1, 675 Murray Street, West Perth WA 6005, in each case addressing it to the “Privacy Officer”. We will review and respond as soon as possible, and generally within 30 days of receiving your correspondence.
7.2 If we refuse to provide access to, or allow correction of your personal information, we will notify you in writing setting out a written explanation of the reasons for the refusal (unless it is unreasonable to expect us to do so). In the event you are dissatisfied with the outcome of your request or complaint, you may contact the Office of the Australian Information Commissioner:
Website https://www.oaic.gov.au/
Email enquiries@oaic.gov.au
Post GPO Box 5218
Sydney NSW 2001
Phone 1300 363 992
Last updated: 7 September 2020