This Privacy Policy explains how Catherine Lynne Thompson p/k/a “Cat Thompson” (ABN 76 520 314 957) (referred to in this policy as the “Artist”) uses, collects, stores and discloses information supplied to them in connection with the products or services of the Artist, whether that be through their website located at www.catthompson.com or social media pages (the “Sites”), or by contacting the Artist in person, by phone, or over email (the foregoing are referred to in this policy collectively as the “Services”). 

This Privacy Policy details how the Artist complies with the Privacy Act 1988 (Cth) (“Privacy Act”), the Australian Privacy Principles (“APPs”), and, to the extent that it applies, the EU General Data Protection Regulation 2016/679 (“GDPR”), in relation to the collection, storage, use, and disclosure of your information and data. 

The Artist may update this Privacy Policy from time to time in their sole discretion. Any variations become effective on posting the updated Privacy Policy on the Sites, and the Artist shall have no obligation to provide you with individual notice of such changes. Your continued use of the Services following the publication of any amended Privacy Policy will signify your acceptance of that amended Privacy Policy, except where the Artist is otherwise obliged by law to seek your direct consent. 

Please read this Privacy Policy carefully before using the Services. If you do not agree with any part of this Privacy Policy, please do not use the Services, including the Sites. 

INFORMATION WE COLLECT 

This Privacy Policy covers all information collected via your use of the Services. The information the Artist may collect from you can be broken down into the following types: 

“Personal Information” means information that can be used to personally identify you such as your name, address, email address, phone number, profile picture, and payment details. The Artist will not knowingly collect or process the Personal Information of anyone under the age of 18 without the express consent of their parent or guardian. 

“Sensitive Information” is a special type of Personal Information that relates to health information, political beliefs, ethnicity, membership of a professional or trade association, sexual preferences, philosophical beliefs, or criminal record. The Artist will not collect Sensitive Information except with your consent, and then only if collection of such information is necessary for a particular activity or function. 

“Usage Information” means anonymous aggregate data that may be automatically collected through your use of the Services. This includes information that identifies your device, your operating system, your IP address, and dates and times that you access and use the Services. This information is used to resolve any technical issues that may arise, or for statistical analysis to help the Artist to improve the Services. 

The GDPR recognises that Usage Information, whilst for the most part anonymous, can be cumulatively used to directly or indirectly identify you. Usage Information that can be used to identify you in any way, together with your Personal Information, will collectively be referred to in this Privacy Policy as “Personal Data”. 

HOW WE COLLECT YOUR INFORMATION 

Personal Information may be collected directly from you when you: 

• when you purchase the Artist’s products or services; 
• subscribe to the Artist’s mailing lists or other direct marketing communications; 
• contact the Artist via the Sites, phone or email; 
• complete a survey or questionnaire provided by the Artist; 
• enter a context or giveaway organised by the Artist; or 
• access, browse, use, or otherwise interact with the Sites. 

It is your choice to provide Personal Information. Wherever it is lawful and practicable, you have the option not to identify yourself when interacting with the Services. Please be aware that it may be necessary for the Artist to collect your Personal Information to enable them to provide the Services to you. As such, if you do not wish to provide your Personal Information, this may limit the Artist’s ability to provide the Services to you. 

There are some circumstances where the Artist may collect Personal Data about you from sources other than you directly, including where: 

• you have consented for a third party to share information with the Artist; 
• where the Artist is authorised by law to collect the information from a third party; 
• where it is unreasonable or impracticable to collect the information from you personally. 

If the Artist collects your Personal Data from third parties in circumstances where you may not be aware that the Artist has collected such Personal Data, the Artist will take reasonable steps to notify you of the collection and circumstances surrounding the collection. 

COOKIES 

The Artist may from time to time collect anonymous Usage Information from the Services, by utilising cookies, pixel tags and other tracking technologies (collectively “Cookies”). Cookies are small packets of data that are downloaded onto your device when you access a website. Cookies hold specific information that helps a website ‘remember’ your actions and preferences over time. These are the types of Cookies that the Artist may use to operate the Sites: 

• Strictly Necessary Cookies – these Cookies are essential to ensure that the Sites work correctly, and record information that allows you to move around the Sites and navigate their features; 
• Performance Cookies – these Cookies collect information about how you use the Sites, such as how often you access the Sites and if you encounter any errors; 
• Functionality Cookies – these Cookies allow the Sites to remember the choices you make to provide a more personalised experience; 
• Targeting/Advertising Cookies – these Cookies deliver targeted advertising to you based on your interests and use of the Sites. 

Cookies can stay on your device temporarily (“Session Cookies”) or until you manually delete them (“Persistent Cookies”). You can adjust your browser settings at any time to block Cookies, however please note that doing so may limit the Artist’s ability to provide the Services to you in a fully operational form. 

To request a full list of the individual Cookies and tracking technologies used on the Services, please email the Privacy Officer (per the details at the end of this Privacy Policy). 

THIRD PARTY SITES 

The Services may contain plug-ins and links to third party sites to enhance your user experience (“Third Party Sites”). The Artist does not have access to, or control over, the technologies that third parties (including the Third Party Sites) may use to collect information about you. Please refer directly to the privacy policies and statements of the operator of any Third Party Sites to obtain information regarding their data collection, use, and disclosure policies. The Artist disclaims all liability in connection with the services of any Third Party Sites integrated or otherwise linked to the Services, and encourages you to reach out to them directly should you have any questions in connection with their services. For a full list of Third Party Sites integrated or otherwise linked to the Services, please email the Privacy Officer (per the details at the end of this Privacy Policy). 

HOW WE USE YOUR INFORMATION 

You agree that the Artist may use your Personal Data for legitimate purposes including, but not limited to, the following: 

• to confirm your identity; 
• to provide their products and/or services to you; 
• to respond to requests submitted by you; 
• to maintain and improve the functionality of the Sites; 
• to prevent, detect and investigate potential illegal activities, security breaches and fraud; 
• to comply with legal and regulatory requirements; 
• to contact you via email or other instant message platforms to provide you with periodical promotional messages about new products or other information which you may find interesting, only where you have opted in to receiving such communication and until you ‘opt out’. 

For the avoidance of doubt, the Artist will only use your Personal Data for purposes that you would reasonably expect them to use your Personal Data for in connection with providing the Services to you, or where they are required by law to collect your Personal Data. The Artist will not sell, rent, or license your email address or any of your Personal Data. 

The Artist will retain your Personal Data for the period necessary to fulfil the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law. How long the Artist retains your Personal Data depends on the type of data and the legitimate purpose for which the data is processed and/or retained. 

‘Opt Out’ 

The Artist recognises your right under the Spam Act 2003 (Cth) and the GDPR to opt out from direct marketing, and as such these consents can be modified at any time by emailing the Privacy Officer or clicking unsubscribe on any direct marketing communications. 

Please note certain non-marketing related correspondence from the Artist, including messages relating to payment, will be automatically sent to you by virtue of your use of the Services and you may not have the option to unsubscribe from receiving this correspondence. 

WHO WE DISCLOSE YOUR INFORMATION TO 

You agree and consent to the Artist disclosing your Personal Data to: 

• the Artist’s directors, officers, employees, consultants, contractors and agents; 
• entities owned and/or controlled by the Artist; 
• the Artist’s assigns and licensees, including their record labels, distributors, and publishers; 
• the Artist’s management and agencies; 
• external counsel for the purpose of obtaining professional advice; 
• service providers with whom the Artist entered into an agreement with to help provide the Services, including e-commerce platforms, marketing agencies, financial service providers, and technical support; 
• Third Party Sites as integrated into the Services; 
• government and regulatory authorities; 
• any third party with your express approval; and 
• where the Artist is required to disclose such information by law or to otherwise prevent harm. 

The Artist will take reasonable steps to ensure that these third parties are bound by Australian privacy laws. 

You can withdraw your consent for the Artist to share your Personal Data with third parties at any time by emailing the Privacy Officer (per the details at the end of this Privacy Policy), but please note that withdrawal of such consents may affect your ability to access and use the Services. 

YOUR RIGHTS TO YOUR INFORMATION 

You have a general right to access any Personal Information that is held about you by the Artist, unless a valid exception applies. You can request this at any time by contacting the Privacy Officer. Please note that the Artist cannot modify your Personal Information. You can modify your own information at any time by emailing the Privacy Officer (per the details at the end of this Privacy Policy). 

You acknowledge that it is your responsibility to maintain the truth, accuracy, and completeness of your information and your failure to do so may inhibit the Artist’s ability to provide the Services to you. You acknowledge and agree that you remain solely responsible for maintaining the truth, accuracy, and completeness of your information at all times, and the Artist shall have no liability to you or any third party arising from your failure to do the same. 

In accordance with the GDPR, the Artist acknowledges the additional rights of EU subjects to: 

• have their data erased that is no longer being used for a legitimate purpose; 
• request a copy of all Personal Data held about them in a readable format, along with supplementary information to verify that such Personal Data is being processed lawfully; and 
• request restricted processing of their Personal Data whilst any complaints or concerns are being resolved. 

To erase, request, or restrict processing of your Personal Data, please email the Privacy Officer (per the details at the end of this Privacy Policy). 

SECURITY 

The Artist will use their best endeavours to protect your Personal Data through technical security measures i.e. firewalls, encryption that limit the risk of loss, disclosure, or unauthorised access. No security measures are, however, 100% secure so the Artist cannot guarantee the security of your information or data at any time. To the extent permitted by law, the Artist accepts no liability for any breach of security, or direct hacking of our security measures, or any unintentional disclosure, loss or misuse of any information or data, or for the actions of any third parties that may obtain any information or data. 

Notwithstanding the above, the Artist acknowledges their obligation to report any data breach that is likely to risk the rights and freedoms of natural persons to the Australian Information Commissioner and, where a data breach involves the information of EU subjects, report to the European Data Protection Supervisor. The Artist will also inform you, where possible, if your data has been breached in the circumstance where it poses a risk of serious harm or your rights and freedoms. 

The Artist will also use their best endeavours to train any personnel who may have access to your Personal Data about this Privacy Policy and the Artist’s obligations under the Privacy Act, APPs, and GDPR. For more information on the Artist’s internal policies, email the Privacy Officer (per the details at the end of this Privacy Policy). 

OVERSEAS DISCLOSURE 

The Artist may, in the course of providing the services to you, transfer your Personal Data to overseas countries that are deemed by the EU Commission as having an ‘adequate’ level of Personal Data protection. Where the Artist transfers data to a third party in a country where no adequacy decision has been made, the Artist will take reasonable steps to ensure person or entity handling your data in those countries are bound under contract to meet the requirements of the Privacy Act, APPs, and GDPR (as applicable). 

CONTACT 

Thank you for taking the time to read this Privacy Policy. If you have any questions regarding this Privacy Policy, you can contact the Privacy Officer at: 

Catherine Lynne Thompson 
Att:  Privacy Officer 
Mailing Address:  PO Box 231 Byron Bay, New South Wales, Australia 2481 
Email:  info.catthompson@gmail.com 

If you are not satisfied with the Artist’s handling of your Personal Data, or have any other concern over this Privacy Policy, then you may lodge a formal complaint with the Office of the Australian Information Commissioner (for more information, please see www.oaic.gov.au) or with the European Data Protection Supervisor (for more information, please see https://edps.europa.eu).