18 November 2024

At Priceline, we are committed to safeguarding your personal information. This Privacy Policy is here to help you understand how we collect, use, and share your information, as well as how you can reach out to us with questions, concerns, or requests to access your data.

This Privacy Policy is the official privacy policy of Priceline Pty Ltd ABN 18 005 968 310 (Priceline). It covers all businesses operated by Priceline, including under the ‘Priceline’, ‘atomica’ and ‘Sister Club’ brands and those operated by our franchise partners under the ‘Priceline Pharmacy’ brand (each a Priceline Business). A store operated by a Priceline Business is referred to in this Privacy Policy as a Priceline Store.

This Privacy Policy applies to all personal information collected by Priceline, including via:

• www.priceline.com.au, shopatomica.com.au and Priceline Business social media pages/accounts (each a Website);

• any Priceline Business mobile or tablet application (each an Application);

• Priceline Pharmacy Franchisees that own and manage Priceline Pharmacies;

• our Related Companies (as defined below); and

• from an individual via any other means, including physically or electronically.

Our collection, use, disclosure, storage, and destruction of personal information is governed by the Privacy Act 1988 (Cth), as amended (Privacy Act). Personal Information is defined in the Privacy Act as “information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not and whether the information or opinion is recorded in a material form or not.”

In addition to this Privacy Policy, there may be specific personal information collection notices for certain services, which are also important for your privacy. If there is any inconsistency between this policy and a specific collection notice, the latter will apply.

To ensure we are as transparent as possible with you, we have set out in this Policy some of our key relationships and programs and the way in which your personal information is treated as part of those relationships/programs. These include:

• Priceline Pharmacy franchisees that own and manage Priceline Pharmacies;

• Other companies and businesses within Wesfarmers Health (including, Australian Pharmaceutical Industries (API), Clear Skincare, Silk Laser Clinics, Australian Skin Clinics, Eden Laser Clinics, Instant Scripts and SiSU); and

• Sister Club, our loyalty program;

• OnePass, a membership program which we participate in, along with other brands (“Participating Brands”), to provide you with tailored engagement and member benefits. Throughout this Policy, a reference to ‘Related Companies’ includes OnePass as it is also a related company of ours;

• Related Companies, these are companies within the Wesfarmers Group (including Wesfarmers, Kmart, Target, Officeworks, Bunnings, OnePass and Catch).

Types of personal information we collect 

The types of personal information we collect will depend on the function or activity being performed. Some personal information we will collect from you and some personal information we will collect about you from others where you consent, or it is otherwise in accordance with the law.

• name, gender, date of birth and age;

• contact details, including address, mobile and telephone number, and email address;

• information contained in any communications between you and us;

• information about your transactions at Priceline Stores and online;

• information about products (such as products you view on our Websites or Applications, add to a basket or wish list and those you purchase from Priceline Stores and online);

• digital information, such as software versions used, device identifiers (such as IP address), location data, dates, times, file metadata, referring website/app, data entered, and user activity such as links clicked app installations, app launches, adding items to a basket, adding items to a wish list and making purchases;

• member number or identifiers for loyalty schemes (including Sister Club and OnePass) and Wesfarmers team member discount card number;

• search information when using our Websites or Applications;

• interactions with us on social media platforms;

• images from video surveillance and other cameras in Priceline Stores (including store entrances); and

• if you apply for employment with us, details regarding your employment history, educational qualifications, and similar information.

We may also create new information about you or infer information about you as a result of us undertaking data analytics.

If you are providing us with personal information about someone else, you must have their consent to do so.

Why we collect your personal information and how we use it 

We use your personal information in connection with carrying on our business (including supply products and services to you and administering loyalty schemes that we administer or are involved in that you have joined). We may use your personal information to:

• supply you with goods and services or information about those goods or services;

• make ourselves aware of any special product or service requirements you may have;

• provide you with electronic confirmation of your orders (where applicable) and advise you of any changes to our goods and services;

• deliver orders, provide refunds, exchanges, or discounts;

• manage our Sister Club loyalty programme;

• to provide you with the benefits on your OnePass membership

• enable us to provide you with offers, experiences, and direct marketing that interests you (unless you have opted out of receiving marketing from us), display online advertising, and personalise our website and apps for you;

• assist in determining your product or service preferences and preferred Priceline Store locations or to direct you to the closest Priceline Store to you when using our Websites or Applications;

• provide you with information about charities or charitable purposes or activities we proudly support;

• invite you to complete a review of a Priceline Business, or our products and services, or to participate in promotions, competitions, surveys, or charitable events;

• assist us to develop, improve and market new products and services;

• maintain and update our records;

• work with our suppliers and service providers;

• administer and manage the provision of our goods and services to you, including billing and debt collection;

• perform data analysis and matching to help us better understand what you like and want from us;

• develop insights about our customers as a whole, or groups of them;

• send you service, support, and administrative messages, and identify and fix issues and incidents;

• recruit our employees or engage contractors;

• address any queries, feedback, or complaints we receive from you;

• develop, improve, and market our goods and services;

• comply with relevant laws, regulations, and Codes; and

• use your personal information for any other purpose that it was collected for or any related purpose for which we are entitled to use your personal information.

Sister Club 

Joined our Sister Club? Welcome! To ensure you are getting all the perks you are entitled to, we will collect personal information about you to administer your membership of the Sister Club including to:

• verify your identity and process your application to join the Sister Club;

• communicate with you about your Sister Club membership;

• provide you with information about events, sales, and benefits;

• provide you with loyalty points and allow you to redeem those points;

• invite you to redeem gifts, such as Beauty Boxes; and

• offer you Partner Perks (exclusive offers and discounts from our favourite partners).

Our relationship with OnePass 

In our capacity as a participating brand in OnePass, we may acquire, from OnePass and other participating brands (referred to as “Participating Brands”), the personal information of OnePass members. This information may include, but is not limited to: contact details, historical and future transaction details, historical and future interactions with OnePass and other Participating Brands, and insights derived from interactions with OnePass and other Participating Brands.

The purposes for which we collect and use this information include:

• facilitating engagement with OnePass members and delivering personalised and targeted advertising when they utilise our website/apps, social media, and other platforms;

• personalising communications, marketing offers, customer surveys, and trading updates sent by us;

• improving product offerings, service offerings, advertising, and offers based on shopping and browsing habits;

• developing insights about the preferences of OnePass members;

• responding to feedback, queries, or complaints;

• conducting data analytics for insights and strategic and operational decision-making;

• handling product safety-related matters, including recalls;

• pursuing other purposes where the OnePass member has been duly notified, provided consent to OnePass or us, or where such purposes are otherwise permitted by law; and

• fulfilling other purposes as outlined in the OnePass Privacy Policy.

We reserve the right to combine the personal information received from OnePass with other personal information we collect from or about you. This combined information may be shared with OnePass and Participating Brands in accordance with our Privacy Policy and the OnePass Privacy Policy.

We may retain personal information about our customers even after they cease to be a OnePass member or after we have ceased to be a OnePass Participating Brand, for the uses outlined in this Privacy Policy or for any other lawful purpose.

Disclosure of personal information to third parties 

Where reasonably necessary to, or directly in connection with, the conduct of our business, personal information we collect about you may be disclosed to third parties as we determine necessary from time to time, including, but not limited to:

• third parties to facilitate the provision of products and services to you (including to facilitate customer recalls), such as to product manufacturers, suppliers, and couriers;

• marketing and advertising service providers and event organisers in connection with our marketing, advertising, and events;

• third parties who provide services to us in connection with our business operations, undertaking data monitoring or data analysis and data matching activities, monitoring trends in customer preferences or transactions and the operation and maintenance of our Websites and Applications;

• third party platforms who display advertising or content (including personalised advertising) based on your personal information or preferences (including social media platforms);

• third parties who provide other administrative and operational services to us in connection with our business, security services providers, market research or feedback collection companies, IT service providers, payment processors and collectors, mailing houses and card manufacturers;

• any person who introduces you to us, or who is acting as your referee;

• your authorised agents or your executor, administrator, or legal representative;

• organisations that conduct or promote charitable purposes or activities we proudly support;

• our professional advisers, where required to enable any such adviser to provide services to us;

• third parties necessary to assist us in investigating and preventing any potential, suspected or actual breaches of law or fraudulent activities;

• third parties who we share information with for loss prevention and law enforcement purposes, in investigating and preventing any potential, suspected or actual breaches of law or fraudulent activities;

• law enforcement agencies, government agencies or other third parties, where required under or authorised by law (for example, to comply with a subpoena, a warrant or other order of a court or legal process); and

• other persons disclosed to you at the time the relevant personal information is collected.

We take steps to ensure that third party recipients are obliged to protect the privacy and security of your personal information and use it only for the purpose for which it is disclosed.

Health information 

We may collect personal information related to health (defined in the Privacy Act as sensitive information) about you where:

• you have consented to us collecting that information and it is reasonably necessary for one or more of our functions or activities, or

• where we are legally required or legally permitted to collect that information.

The health information we collect about you includes information regarding dispensing pharmacy items and scripts.

We may use or disclose health information for the primary purpose for which we collected it, or for any reasonably expected and directly related secondary purpose.  We may also use or disclose health information if permitted by law or with your consent.

We may not use or disclose health information for direct marketing purposes unless we have obtained your consent.

Related Companies 

We exchange and combine personal information with our Related Companies to enable us and them to undertake a range of functions. The personal information that we exchange and combine with our Related Companies includes:

• details about your purchases and transaction history with Priceline Businesses and Related Companies, product and service preferences, and details about purchases and transaction history with us and the Related Companies; and

• information about your use of Priceline Business and Related Company websites and apps (using cookies, tags, and pixels) including your searches and search history on them, and the products you have viewed, added to cart and/or purchases.

We may use this personal information (and disclose it to our Related Companies):

• to undertake data analytics and matching to enable us to better understand your requirements and other preferences and for insights and strategic and operational decision making;

• to personalise the appearance of our Websites and Applications, to invite you to complete a product review or send you targeted and personalised news, offers and promotions of our products and services;

• to send direct marketing or personalised communications to you (where you have consented to receiving direct marketing or personalised communications) and to allow us to better us to personalise the communications, offers, surveys and updates that we send;

• to display targeted advertising;

• for product safety-related matters (including recalls);

• to develop aggregated insights about the health and preferences of our customers;

• to enable us to improve product and service offerings, advertising and offers based on member shopping and browsing habits; and

• for other purposes where you have provided consent to us.

Our Related Companies may use it for similar purposes relating to their operations.

Transfer of personal information overseas 

Some of our service providers may be located overseas or may store or process information that we provide to them overseas. We may also provide your personal information to our Related Companies that are located overseas. The countries your personal information may be held or processed in include Australia, New Zealand, the United States, Canada, the United Kingdom, the European Union, Brazil, Singapore, and India.

Anonymity 

Where practicable you have the option of dealing with us anonymously or by using a pseudonym. However, if you deal with us in this manner, we may not be able to provide all our products and services to you or interact with you in other ways set out in this policy. For example, we will not be able to deliver products to you if you do not provide us with address details for the delivery.

Marketing, advertising, and customer insights  

As part of our business activities and to promote the products and services we can provide to you, we may use, and disclose to third parties, personal information that we have collected from you or trusted third parties (including our Related Companies), for the purposes of deriving insights about you, advertising (including online behavioural advertising and Websites/Applications personalisation) and other direct marketing and personalised communications.

We may engage third parties to assist us in ensuring that the marketing and advertising we provide is of interest to you.

Direct marketing includes Priceline Businesses or third parties:

• sending to you and/or contacting you directly in relation to promotions and information about our products and services;

• personalising the layout of our Website/Applications to display products and services of interest to you; and

• providing targeted advertising content to you (including through third party websites/apps).

We may also collect and use personal information about you from our Related Companies, such as purchase history and webpages visited on their websites and apps, to help personalise our Websites/Applications appearance for you and our direct marketing communications to you.

Generally, we will provide direct marketing and personalised communications to you where you have requested or consented to receiving such information. You can opt out of receiving direct marketing communications from us by:

• using the opt out link or unsubscribe details provided in commercial, direct marketing communication;

• email your request to unsubscribe@api.net.au;

• call customer service on 1300 88 44 11; or

• in the case of online advertising, by managing your preferences in digital platforms such as Google or Facebook.

• Opting out does not terminate your Sister Club membership; hence, you will continue to receive personalised online interactions and transactional, non-promotional communications from us, primarily consisting of administrative or service-related notifications pertinent to your account.

Accessing and correcting personal information 

You have the right under Australian privacy law to request access to, and correction of, personal information about you that we have, for a reasonable fee. Requests should be made following the instructions under the heading “How to contact us” below.

We may require you to verify your identity at the time you request access to, or correction of, your personal information so that we can ensure your personal information is disclosed only to you.

We will respond to any requests for access or correction within a reasonable time, but no later than 30 days after the date you make the request.

If we refuse to provide you with access to the personal information held about you, or if we refuse to correct that information, we will provide reasons for the refusal. If you object to the refusal, you may make a complaint by following the instructions under the heading “Questions and complaints” below.

Questions and complaints 

If you have a question about this policy or a complaint, about how we have handled your personal information, you can direct this to Priceline’s Privacy Officer using the contact details listed under the heading “How to contact us” below.

We will promptly investigate any complaint you make to us and respond to you. If you are not satisfied with our response, you may refer the matter to the Office of the Australian Information Commissioner at:

Website:  www.oaic.gov.au

Phone: 1300 363 992

Further information about the application of privacy law to the private sector generally can be found by contacting the Office of the Australian Information Commissioner (details above).

How to contact us 

If you wish to contact us, for example, to access or correct your personal information, you may contact us in writing or by email at:

Priceline Proprietary Limited

ABN 18 005 968 310

Level 8

637 Flinders St

Docklands

Victoria

AUSTRALIA, 3008

E-mail:  privacy@api.net.au

Updates to Privacy Policy 

We may amend this Privacy Policy at any time and from time to time. If we do so, we will post the amended Privacy Policy on our Websites and Applications so that you will always be aware of how we manage your personal information.

V1.5 – November 2024