This Privacy Policy is intended to cover H.J. Heinz Company Australia Limited (Kraft Heinz) and where applicable includes its directors, employees, associated entities and affiliates in Australia. References to “we”, “us” or “our” are references to Kraft Heinz.

We are regulated (as relevant) by the Australian Privacy Principles, contained within the Privacy Act 1988 (Cth) (Privacy Act) and the Spam Act 2003 (Cth).

"Personal Information" means any information from which your identity is apparent or can be reasonably ascertained.

We may collect, use, store and transfer different kinds of your Personal Information, which could include:

• Identity and contact Information such as first name, last name, marital status, date of birth, gender, home address, email address and telephone numbers;
• Financial Information such as bank account and payment card details;
• Transaction Information which may include details of purchases;
• Technical Information such as an internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website;
• Profile and Usage Information such as your website username and password, purchases or orders made by you, information about your interests, preferences, feedback and survey responses and how you use our website, products and services;
• Marketing and Communications Information such as your preferences in relation to receiving marketing from us and third parties and for the ways we communicate with you;
• Social Media Information such as likes, comments and other interactions with our social media accounts.

We collect minimal amounts of sensitive information (which could include information about your race, ethnicity, religious or philosophical beliefs, sexual orientation, political opinions, or biometric data). We will only collect sensitive information (for example, information regarding your health) which is provided to us by you (or is provided to us with your consent) and which is reasonably necessary to fulfil our legal obligations, which include the mandatory reporting provisions of The Australian Consumer Law contained in Schedule 2 of the Competition and Consumer Act 2010 (Cth).

We use various methods to collect your personal information, including:

• Directly from you – where you give us Personal Information by filling in forms or by communicating with us. This includes Personal Information you provide when you:
  • create an account on our website;
  • request marketing material to be sent to you;
  • enter a competition, promotion or survey; or
  • provide feedback or raise a concern or complaint.
  When you contact us by phone, email or social media we may keep a record of that communication.
• By automated means – when you interact with our website, we may automatically collect technical information such as your IP address or information about browsing actions and patterns. We collect this Personal Information by using cookies and other similar technologies. We may also receive information about you if you visit other websites employing our cookies.
• From third parties and publicly available sources. In some instances, we may collect your Personal Information from various third parties that may include:
  • analytics providers such as Google; and
  • providers of technical, payment and delivery services.

COOKIES

“Cookies” are a standard mechanism for storing small pieces of data on a web client (i.e. the web browser on your computer). Any web server (including this one) may:

• store one or more cookies in your browser; or
• request your browser to transmit the data to the web server.

This website may store cookies on your web client in order to better serve you upon your subsequent visits to this website.

By using cookies, websites can track information about visitors’ usage of the site and provide customised content. Note that some browsers can be configured to allow cookies to be accessed by servers other than the originating server.

Please note that most web browsers can also be configured to notify the user when a cookie is received, allowing you to either accept or reject it. For further information about working with cookies, visit your browser manufacturer’s website or read the Wikipedia entry (http://en.wikipedia.org/wiki/HTTP_cookie).

GOOGLE ANALYTICS

Google Analytics is a web analytics service provided by a third party company (“Google”). Google Analytics installs cookies to analyze how the Site is being used. Google Analytics uses cookies to define user sessions, as well as to provide a number of key features in the Google Analytics reports. Google Analytics sets or updates cookies only to collect data required for the reports. Additionally, Google Analytics uses only first-party cookies. This means that all cookies set by Google Analytics for your domain send data only to the servers for your domain. This effectively makes Google Analytics cookies the personal property of your website domain, and the data cannot be altered or retrieved by any service on another domain.

The information generated by those cookies about your use of our websites and your current IP address will be transmitted by your browser to Google and will be stored by Google on servers in the United States of America and other countries. Google will use this information on our behalf for the purpose of evaluating your use of this website, compiling reports on website activity and providing other services relating to website activity and internet usage for us. The IP address collected through Google Analytics will not be associated with any other data held by Google. You may choose to disable or block the Google cookies by selecting the appropriate settings on your browser. You may download and install the Google Analytics Opt-out Browser Add-on available on the Google website.

All the information we collect from your device is anonymous and cannot be collated to identify you personally. Most internet browsers are set up to accept cookies. If you do not wish to receive cookies, you may be able to change the settings of your browser allowing you to either accept or reject them.

We collect, use and disclose your Personal Information for a range of purposes. These purposes depend largely upon your relationship with us. Most commonly, we will use your Personal Information for the following purposes:

• where necessary to establish and perform your contract with us, such as where you buy products directly from us;
• to notify you of products and services that may assist you, including any special offers available;
• to deal with any queries;
• to comply with our mandatory legal obligations, which can arise in a variety of ways such as in connection with health and safety, transfer of a business, regulatory investigations, legal proceedings or disclosure to a law enforcement agency;
• to improve the quality and level of our products and services;

We may, where necessary for our business, contract our various services associated with our functions and activities. This may involve the disclosure and sharing of your Personal Information (subject to this Privacy Policy and the provisions of the Privacy Act 1988 (Cth)) to other persons or organisations that we engage on our behalf or to other companies within our group of companies.

Please be assured that our service providers and subcontractors are contractually obliged to comply with the Privacy Act and to ensure that your Personal Information is handled in a manner consistent with our obligations under this Privacy Policy.

The types of persons and organisations to which we may disclose your Personal Information include the following:

• organisations with whom we have arrangements or agreements for the purpose of promoting our products or services and any agents used by us in administering such arrangements or agreements;
• our agents, contractors and external advisers who carry out our functions and activities or who assist us to carry out our functions and activities from time to time; and
• other parties to whom we are authorised or required by law to disclose information such as law enforcement agencies, regulatory bodies and other government agencies.

We do not generally receive any Personal Information without requesting it.

If we do receive your Personal Information without requesting it (unsolicited), we will treat such information in the same way as if we had asked for it, that is, in accordance with this Privacy Policy and the Privacy Act.

If within a reasonable time, we determine that the unsolicited Personal Information received by us is not reasonably necessary for one or more of our functions or activities or where it is it collected by unlawful and unfair means or without your consent, we will destroy or de-identify your Personal Information as soon as is practicable, but only if it is lawful and reasonable to do so and if the information is not contained in a government record.

We take reasonable steps to protect your Personal Information from misuse, interference and loss and from unauthorised access, modification or disclosure. We do this by means of various physical and electronic security measures, including restricting physical access to Our offices and implementing several technological and security policies and procedures.

We may use servers outside Australia (for example New Zealand, USA or UK) to route through and store your Personal Information. A number of policies and procedures are in place to ensure the safety and secure storage of your Personal Information handled and stored by Us.

We are required by law to retain various types of records for different periods, depending on their contents.

We will therefore keep Personal Information for as long as we reasonably consider we may need to in connection with those obligations.

Where we no longer require your Personal Information for the purpose for which this information was collected, we will take all steps reasonable in the circumstances to destroy the information.