We value your trust and take the protection of your personal information very seriously. This document outlines the way in which we collect, hold, secure, use and share your personal information. We handle all personal information provided in accordance with the Privacy Act 1988.   
What is covered by this Privacy Policy?
This Privacy Policy outlines our personal information management practices, including how we collect, hold, secure, use and share your personal information. 
Specifically:
• the kinds of personal information we collect and hold
• how we collect and hold it
• the purposes for which we collect, hold and use it
• how we secure it
• how, and to whom, we share your personal information, including overseas, and why
• your right to access and correct it
• how you may contact us if you wish to make a complaint or enquire about privacy matters.

What is personal information? 
As defined by the Privacy Act 1988 (Cth), “personal information” means information or an opinion about an identified individual, or an individual who is reasonably identifiable:
(a) whether the information or opinion is true or not; and
(b) whether the information or opinion is recorded in a material form or not. Any time we use the term “personal information” in this policy, we are referring to this definition of the term. 

What kinds of personal information do we collect and hold and how do we collect it?
We always want to provide you with the highest level of service, so we collect and hold personal information necessary for our business activities and to enable us to provide the information, goods or services you might be looking for. If we do not collect the information, we may not be able to provide these things. We collect your personal information directly from you when you activate or use our services, interact with us, either in person, over the telephone or electronically (e.g. via websites, apps, social media posts, chats, telephone, emails and/or SMS) or as otherwise required by law. 
For example:
• your contact details including your name, email addresses, telephone numbers, residential and delivery addresses;
• an electronic copy of the written communication or voice recording of the conversation.
Below are some examples of personal information we may collect from you and how we collect that information: 
When you shop with us, including online, or browse our sites or apps:
• your contact details
• information about your orders and purchases, including what, how, and when you buy from us, how you paid for purchases (including payment card details and transaction details);
• we may ask for your ID, such as your driver’s licence, if you purchase alcohol or other forms of identification so that you can use certain services we provide;
• information about your online browsing behaviour on our internet sites and apps, including promotions you activated, as well as items you have added to your carts;
• information collected and held via our secure financial systems about the payment method you use for your purchases from us;
• like many websites, tracking technologies, such as “cookies”, are used to obtain certain types of information such as application activities, current location of your device, type and version of your browser, your device ID and other device metrics when you visit our websites, apps or our trusted partners’ websites or apps (see Cookies Statement for details);
• information we collect via our apps on mobile devices or smart devices (e.g. smart watches), for example the current location of your device, type and version of your browser and, your device ID and other device metrics, as allowed by your device permissions. 
Other sources:
From time to time we may also collect personal information about you from other sources to help us supplement our records, improve the personalisation of our service to you, manage our services, and detect fraud. For example, we may collect personal information from:
• State Governments for the purpose of exclusion from alcohol venues;
• information service providers to improve data quality, e.g. we validate addresses with Australia Post to improve your delivery experience; or
• financial services organisations for fraud prevention. 

Do I have to provide my name?
We may need your real name and a valid ID where we are required to ask by law. 

Do you collect my sensitive information?
Some of our products and services may require us to collect your “sensitive information” (which is defined in the Privacy Act and is a subset of ‘personal information’) from you or from other sources. Sensitive information is only obtained with your consent or in certain limited permitted situations. 

How do you secure my personal information?
Your personal information is important to us. We design our systems with your security and privacy in mind.
Any personal information we hold is generally stored electronically in computers or cloud systems operated by us or by our service providers. We implement a range of information security measures and encryption protocols when we handle your personal information to protect it from unauthorised access, loss, misuse or wrongful alteration.
We may collect information from your current device using cookies or other technologies, including your online browsers or apps to protect your account security.
We use security measures such as physical and technical security access controls or other safeguards, information security technologies, policies, procedures and training programs to ensure the security of your personal information.
We protect your payment card details with encryption and hashing methods. Do not include your full card details when you communicate with us via email, SMS or chat messages. If we have to make a reference to your payment card number, we will only refer to the last four digits in any form of written communications. 

For what purposes do you collect, hold and use my personal information?
We primarily collect, hold and use your personal information to supply, promote and sell goods and services that you have requested, or which may be of interest to you, so that we can improve and personalise your experiences. This may also include the products and services of our suppliers and trusted partners. We also collect, hold, and use your personal information to meet legal requirements that we are required to follow. We may use your personal information for purposes which are incidental to the sale and promotion of our goods and services, or for other purposes which are within your reasonable expectation or permitted by law. In addition, your personal information may be used for the following purposes:
• Personalisation: To identify your preferences, to recommend features, products, and services that may be of interest to you, and to personalise your experience with us.
• Communication: To send you offers and other communications that may be of interest to you.
• Investigation: To assist in responding to your complaints or enquiries and to undertake investigations.
• Fraud detection and security: To verify your identity and to detect fraud activities. We may conduct auditing and monitoring of transactions and financial engagement.
• Improve our services and customer experience: To analyse performance, improve our systems and improve the usability, functionality and effectiveness of our services.
• Analysis: To analyse your personal information in an anonymised and combined way when we communicate with you about your preferences and interaction with us; for example weekly personalised specials.
• Legal Requirements: To comply with legal requirements including licensing and reporting obligations, we must collect and hold your personal information. 

Who do you share my personal information with and why?
Your personal information is important to us and we are very focused on making sure it stays safe.
We use data, including personal information in some cases, to understand the preferences and shopping patterns of our customers and to produce other insights.
In most cases, we employ techniques such as grouping, combining and anonymising, so that we don’t need to use your personal information to understand those preferences or patterns, or to produce insights.
We may also share anonymised preferences and insights with our suppliers, partners and service providers to assist with the marketing of products and services, without revealing your personal information.
There are limited circumstances when we do need to share or use your personal information, such as:
• when you make a written request to share your information with a third party;
• to related companies;
• for fraud detection and security protection;
• when legally required, including assisting with police investigations and where required by law enforcement agencies; and
• with third parties, such as partners, suppliers, or service providers, when we need their assistance in our day-to-day business operations or so we can work with them to provide services to you.
There are also limited circumstances in which we may share your personal information with third parties, such as:
• financial services organisations or specialised service providers for fraud detection (when we process your payments);
• those helping us to improve data quality, such as Australia Post (when you provide your address to us);
• expert data partners (in encrypted form) to provide us with insights (when you shop with us). 

Marketing communications
We may send you commercial messages and tailored advertising. We may send you these messages via various channels and media (including by email, SMS, phone and mail, or via advertising on certain websites and social media), but only where you have not opted out of receiving such messages from us. You can opt out of commercial messages by using the relevant unsubscribe facility or contacting us. The appropriate unsubscribe facility may depend on the subject of the message or the channel used to send the message. 

Do you share personal information overseas?
Some of our service providers, including data storage and technology service providers, may be located or use locations outside of Australia. Where we share personal information overseas, we take steps to ensure that our service providers are obliged to protect this personal information in accordance with Australian legal requirements and that they are only permitted to use personal information for the purpose for which it is shared.
We may share your personal information overseas for reasons including:
• where we have made a business decision to engage with a trusted service provider to assist us with certain functions, including data storage, combining and analysing data and processing data;
• for disclosures between our related companies;
• when our business which collected your personal information is in a different country to your location;
• where you are involved with public liability issues, we may share your personal information with our overseas insurer or other supplier of relevant services in the course of managing those issues. 

How can I access my personal information?
You have a right to request access to the personal information we hold about you. You can access or correct your personal information on your online profile via your online account at any time. However, before we provide you with access to your personal information we may require verification of proof of identity. There is no charge to submit a request to correct or access your personal information, however, we may charge a reasonable fee for giving access to your personal information if your request requires substantial effort on our part.
If you would like a copy of the personal information held by us about you, please contact us. 

How can I correct my personal information?
If you believe that any of your personal information is inaccurate, out of date, incomplete, irrelevant or misleading, please contact us. It is your right to have your personal information corrected. How can I make a complaint about the management of my personal information?
If you would like to complain about a breach of the Australian Privacy Principles, you may contact us. We may ask you to put your complaint in writing and to provide relevant details. We may discuss your complaint with our personnel and our service providers and others as appropriate. We will respond to your complaint in a reasonable period of time (usually within 30 days). If you disagree with our decision, you may refer your complaint to the Office of the Australian Information Commissioner (OAIC). 

What other privacy terms may apply?
There may be additional privacy notices and terms relevant to you depending on the nature of your dealings with us and on our particular businesses. There are additional privacy terms in our loyalty program and club membership terms and for use of our online sites, for example. This policy does not apply to the personal information of our team members (employees and contractors) in their capacity as such. How will I know if you make changes to this privacy policy?
This Privacy Policy is current from November 2022. We may change it periodically.  We value your trust and take the protection of your personal information very seriously. This document outlines the way in which we collect, hold, secure, use and share your personal information. We handle all personal information provided in accordance with the Privacy Act 1988.   

What is covered by this Privacy Policy?
This Privacy Policy outlines our personal information management practices, including how we collect, hold, secure, use and share your personal information. 
Specifically:
• the kinds of personal information we collect and hold
• how we collect and hold it
• the purposes for which we collect, hold and use it
• how we secure it
• how, and to whom, we share your personal information, including overseas, and why
• your right to access and correct it
• how you may contact us if you wish to make a complaint or enquire about privacy matters.

What is personal information? 
As defined by the Privacy Act 1988 (Cth), “personal information” means information or an opinion about an identified individual, or an individual who is reasonably identifiable:
(a) whether the information or opinion is true or not; and
(b) whether the information or opinion is recorded in a material form or not. Any time we use the term “personal information” in this policy, we are referring to this definition of the term. 

What kinds of personal information do we collect and hold and how do we collect it?
We always want to provide you with the highest level of service, so we collect and hold personal information necessary for our business activities and to enable us to provide the information, goods or services you might be looking for. If we do not collect the information, we may not be able to provide these things. We collect your personal information directly from you when you activate or use our services, interact with us, either in person, over the telephone or electronically (e.g. via websites, apps, social media posts, chats, telephone, emails and/or SMS) or as otherwise required by law. 
For example:
• your contact details including your name, email addresses, telephone numbers, residential and delivery addresses;
• an electronic copy of the written communication or voice recording of the conversation.
Below are some examples of personal information we may collect from you and how we collect that information: 
When you shop with us, including online, or browse our sites or apps:
• your contact details
• information about your orders and purchases, including what, how, and when you buy from us, how you paid for purchases (including payment card details and transaction details);
• we may ask for your ID, such as your driver’s licence, if you purchase alcohol or other forms of identification so that you can use certain services we provide;
• information about your online browsing behaviour on our internet sites and apps, including promotions you activated, as well as items you have added to your carts;
• information collected and held via our secure financial systems about the payment method you use for your purchases from us;
• like many websites, tracking technologies, such as “cookies”, are used to obtain certain types of information such as application activities, current location of your device, type and version of your browser, your device ID and other device metrics when you visit our websites, apps or our trusted partners’ websites or apps (see Cookies Statement for details);
• information we collect via our apps on mobile devices or smart devices (e.g. smart watches), for example the current location of your device, type and version of your browser and, your device ID and other device metrics, as allowed by your device permissions. 
Other sources:
From time to time we may also collect personal information about you from other sources to help us supplement our records, improve the personalisation of our service to you, manage our services, and detect fraud. For example, we may collect personal information from:
• State Governments for the purpose of exclusion from alcohol venues;
• information service providers to improve data quality, e.g. we validate addresses with Australia Post to improve your delivery experience; or
• financial services organisations for fraud prevention. 

Do I have to provide my name?
We may need your real name and a valid ID where we are required to ask by law. 

Do you collect my sensitive information?
Some of our products and services may require us to collect your “sensitive information” (which is defined in the Privacy Act and is a subset of ‘personal information’) from you or from other sources. Sensitive information is only obtained with your consent or in certain limited permitted situations. 

How do you secure my personal information?
Your personal information is important to us. We design our systems with your security and privacy in mind.
Any personal information we hold is generally stored electronically in computers or cloud systems operated by us or by our service providers. We implement a range of information security measures and encryption protocols when we handle your personal information to protect it from unauthorised access, loss, misuse or wrongful alteration.
We may collect information from your current device using cookies or other technologies, including your online browsers or apps to protect your account security.
We use security measures such as physical and technical security access controls or other safeguards, information security technologies, policies, procedures and training programs to ensure the security of your personal information.
We protect your payment card details with encryption and hashing methods. Do not include your full card details when you communicate with us via email, SMS or chat messages. If we have to make a reference to your payment card number, we will only refer to the last four digits in any form of written communications. 

For what purposes do you collect, hold and use my personal information?
We primarily collect, hold and use your personal information to supply, promote and sell goods and services that you have requested, or which may be of interest to you, so that we can improve and personalise your experiences. This may also include the products and services of our suppliers and trusted partners. We also collect, hold, and use your personal information to meet legal requirements that we are required to follow. We may use your personal information for purposes which are incidental to the sale and promotion of our goods and services, or for other purposes which are within your reasonable expectation or permitted by law. In addition, your personal information may be used for the following purposes:
• Personalisation: To identify your preferences, to recommend features, products, and services that may be of interest to you, and to personalise your experience with us.
• Communication: To send you offers and other communications that may be of interest to you.
• Investigation: To assist in responding to your complaints or enquiries and to undertake investigations.
• Fraud detection and security: To verify your identity and to detect fraud activities. We may conduct auditing and monitoring of transactions and financial engagement.
• Improve our services and customer experience: To analyse performance, improve our systems and improve the usability, functionality and effectiveness of our services.
• Analysis: To analyse your personal information in an anonymised and combined way when we communicate with you about your preferences and interaction with us; for example weekly personalised specials.
• Legal Requirements: To comply with legal requirements including licensing and reporting obligations, we must collect and hold your personal information. 

Who do you share my personal information with and why?
Your personal information is important to us and we are very focused on making sure it stays safe.
We use data, including personal information in some cases, to understand the preferences and shopping patterns of our customers and to produce other insights.
In most cases, we employ techniques such as grouping, combining and anonymising, so that we don’t need to use your personal information to understand those preferences or patterns, or to produce insights.
We may also share anonymised preferences and insights with our suppliers, partners and service providers to assist with the marketing of products and services, without revealing your personal information.
There are limited circumstances when we do need to share or use your personal information, such as:
• when you make a written request to share your information with a third party;
• to related companies;
• for fraud detection and security protection;
• when legally required, including assisting with police investigations and where required by law enforcement agencies; and
• with third parties, such as partners, suppliers, or service providers, when we need their assistance in our day-to-day business operations or so we can work with them to provide services to you.
There are also limited circumstances in which we may share your personal information with third parties, such as:
• financial services organisations or specialised service providers for fraud detection (when we process your payments);
• those helping us to improve data quality, such as Australia Post (when you provide your address to us);
• expert data partners (in encrypted form) to provide us with insights (when you shop with us). 

Marketing communications
We may send you commercial messages and tailored advertising. We may send you these messages via various channels and media (including by email, SMS, phone and mail, or via advertising on certain websites and social media), but only where you have not opted out of receiving such messages from us. You can opt out of commercial messages by using the relevant unsubscribe facility or contacting us. The appropriate unsubscribe facility may depend on the subject of the message or the channel used to send the message. 

Do you share personal information overseas?
Some of our service providers, including data storage and technology service providers, may be located or use locations outside of Australia. Where we share personal information overseas, we take steps to ensure that our service providers are obliged to protect this personal information in accordance with Australian legal requirements and that they are only permitted to use personal information for the purpose for which it is shared.
We may share your personal information overseas for reasons including:
• where we have made a business decision to engage with a trusted service provider to assist us with certain functions, including data storage, combining and analysing data and processing data;
• for disclosures between our related companies;
• when our business which collected your personal information is in a different country to your location;
• where you are involved with public liability issues, we may share your personal information with our overseas insurer or other supplier of relevant services in the course of managing those issues. 

How can I access my personal information?
You have a right to request access to the personal information we hold about you. You can access or correct your personal information on your online profile via your online account at any time. However, before we provide you with access to your personal information we may require verification of proof of identity. There is no charge to submit a request to correct or access your personal information, however, we may charge a reasonable fee for giving access to your personal information if your request requires substantial effort on our part.
If you would like a copy of the personal information held by us about you, please contact us. 

How can I correct my personal information?
If you believe that any of your personal information is inaccurate, out of date, incomplete, irrelevant or misleading, please contact us. It is your right to have your personal information corrected. How can I make a complaint about the management of my personal information?
If you would like to complain about a breach of the Australian Privacy Principles, you may contact us. We may ask you to put your complaint in writing and to provide relevant details. We may discuss your complaint with our personnel and our service providers and others as appropriate. We will respond to your complaint in a reasonable period of time (usually within 30 days). If you disagree with our decision, you may refer your complaint to the Office of the Australian Information Commissioner (OAIC). 

What other privacy terms may apply?
There may be additional privacy notices and terms relevant to you depending on the nature of your dealings with us and on our particular businesses. There are additional privacy terms in our loyalty program and club membership terms and for use of our online sites, for example. This policy does not apply to the personal information of our team members (employees and contractors) in their capacity as such. How will I know if you make changes to this privacy policy?
This Privacy Policy is current from July 2023. We may change it periodically.