FREQUENTLY ASKED QUESTIONS
How does this policy apply to the Club’s sub-clubs and its related entities?
The Club operates several businesses which trade under different names and brands, including but not limited to LCC Venues, LCC Ice Rink, Pinnacle Fitness Club and the Laneway. These trading names and brands may change, and additional trading names and brands may be introduced, from time to time without notice to you.
The Club also operates a number of clubs and sub-clubs that form part of the Club, including Thurgoona Country Golf Club Resort. For the purposes of the Privacy Act, a sub-club’s collection, use, disclosure or storage of your personal information is the Club’s collection, use, disclosure or storage of your personal information. If a sub-club (being part of the Club) collects, uses, discloses or stores your personal information, it will comply with this policy when doing so.
The Club may have one or more related entities, also known as “related bodies corporate”. These related entities are separate legal entities to the Club but are related to the Club in some way (e.g. the Club owns the related entity, or the related entity owns the Club). The Privacy Act permits related entities to share personal information in certain circumstances.
If an entity related to the Club collects, uses, discloses or stores your personal information, it will comply with this policy when doing so (unless that entity has its own privacy policy). Mercure Sydney Liverpool has its own privacy policy available here: https://www.accorhotels.com/security-certificate/index.en.shtml.
Why does the Club collect health information?
The Club’s primary concern is the safety and wellbeing of its staff, members and the broader community which it serves.
In limited circumstances, the Club may need collect personal information from you about you or your child’s health in order to safely provide specific services to you or your child. For example, we may need to collect information about any relevant medical conditions you may have in order to assess whether you can safely participate in certain activities offered at the Pinnacle Fitness Club. Similarly, the Club may collect information about any allergies or other special dietary requirements that you have if you RSVP to attend a catered function at the Club.
The Club will only ever collect your health information from you directly (or if you are under 15 years of age, from your parent or legal guardian) and with your (or your parent or guardian’s) express consent. The Club recognises that health information is sensitive information and will only handle your health information in accordance with the Club’s policies, the Privacy Act and the Health Records an Information Privacy Act 2002 (NSW).
Is there surveillance at the Club?
All venues operated by the Club are subject to video surveillance for security reasons, including to monitor the safety of members, guests and employees and to protect the Club’s assets. The recordings may be used in disciplinary proceedings and/or to investigate incidents and may be disclosed to our legal representatives, our insurers and law enforcements agencies.
Some of the Club’s CCTV cameras also use facial recognition technology. This technology is only used to identify individuals who are suspended, banned or self-excluded from our premises (and where necessary, to add an individual to our database of suspended, banned and self-excluded individuals), as explained below.
Will my face be subject to facial recognition technology at the Club?
When you are at the Club’s premises, your face will be analysed by the Club’s facial recognition technology. Designated security cameras located throughout the Club’s premises use facial recognition technology to collect and analyse the “face prints” of individuals.
A “face print” is a set of biometric characteristics (such as information about the relative location, size and shape of an individual’s facial features) which is used to uniquely identify an individual’s face and is expressed as a mathematical algorithm. When you are at the Club’s premises, the Club’s designated security cameras will capture an image of your face, analyse that image and then create a “face print” of your face based on that image.
Your “face print” will be compared against a database maintained by the Club that contains the “face prints” of individuals who have been suspended, banned or self-excluded from the Club’s premises.
If your “face print” matches the “face print” of an individual who has been suspended, banned or self-excluded from the Club’s premises, the Club’s staff will be alerted and steps will be taken to manually verify your identity and if necessary, to remove you from the Club’s premises or the gaming area of the Club’s premises (whichever the case may be).
If your “face print” does not match the “face print” of an individual who has been suspended, banned or self-excluded from part or all the Club’s premises, your “face print” will be deleted immediately (within seconds). For the purposes of enabling the “face print” matching referred to above, if an individual has been suspended, banned or self-excluded from the Club’s premises, the Club will collect a copy of that individual’s “face print” from a photo of that individual held by the Club (e.g. from the photo on the individual’s membership card or an image captured by our CCTV cameras) and will hold a copy of that “face print” in a separate secure database for so long as the individual is suspended, banned or self-excluded from all or part of the Club’s premises.
Why does the Club use facial recognition software?
Practically, it is very difficult for the Club’s staff and security to remember the faces of every individual who has been excluded from the Club's premises and to identify those persons from the many people who enter the Club’s premises on a daily basis. Whilst we still rely on staff and security to identify excluded individuals, people can enter despite our best endeavours.
To reduce safety risks related to excluded individuals entering the Club, the Club has implemented, the Club has implemented facial recognition technology at the Club’s premises to enhance the Club’s security procedures and assist the Club to identify and remove persons who have been suspended, banned or self-excluded from all of part of the Club’s premises. The Club does not use your “face print” for any other purposes.
The collection of your “face print” is reasonably necessary for the activities and functions of the Club and ensuring the safety of everyone at the Club. The Club will not store your “face print” unless you have been suspended, banned or self-excluded from all or part of the Club’s premises.
Do I have to use the electronic ID scanner to enter the Club’s premises?
No. You are not obliged to scan your identification to enter the Club’s premises. If you prefer, you can ask our staff to manually enter your name, address and signature (as required by the Registered Clubs Act) into the terminal and present your identification to staff who will confirm your details.
What information is collected from the electronic ID scanners?
If you scan your driver’s licence with one of our electronic ID scanners, the scanner will extract your full name, address, signature and photograph and the expiry date from your licence.
If you chose to scan your passport, our electronic ID scanners will take a complete copy of your passport as our software cannot extract the relevant information from a passport in the same way that it can from a driver’s licence.
Our electronic ID scanners store data in a secure and password protected database.
Why does the Club use ID scanners?
Under the Registered Clubs Act, we are required to maintain a register of the name, address and signature of temporary members and guests over the age of 18 who enter the Club’s premises. This information must be retained by us for at least three years.
We are also required to collect and retain some personal information for at least seven years in order to comply with our obligations under AML/CTF Act and its associated rules and regulations.
ID scanners are a secure way for the Club to collect information about persons entering the Club’s premises.
ID scanners are also environmentally friendly in that they have helped the Club reduce its paper usage and storage of certain hardcopy records.
The collection of personal and sensitive information of the individuals who choose to scan their identification is reasonably necessary for the activities and functions of the Club.
Yes, we collect the ID numbers of anyone who applies for membership with the Club. We are also required under regulation 107 of the Gaming Machines Regulation 2019 (NSW) to record certain information from a person’s ID when a person tries to redeem a gaming machine ticket which is for more than $5,000 or if the ticket is two or more days old, including non-members.
Why does the Club collect information about my religion?
As a Catholic club, our constitution requires that at least 25% of our members are Catholic and only Catholic members are entitled to vote at meetings and be appointed as directors of the Club. We collect information about whether or not you are Catholic in order to determine your voting rights and eligibility to serve on our board and to comply with the terms of our constitution.
How do we hold and protect your personal information?
Personal information that is held by us is stored electronically and/or in hardcopy. We take reasonable steps to ensure that your personal information is safe and secure from unauthorised access, use or disclosure.
We utilise a range of technical security measure such as secure authentication, password controls, encryption, firewalls and anti-virus technology to prevent unauthorised access to your information. Hardcopy data is stored in secure areas where access is recorded and limited to those who need access to perform the necessary functions of the Club.
Video surveillance is stored on our digital recorders, which are maintained in a restricted access area and password protected. Your personal information is securely destroyed or de-identified when it is no longer needed or is out of date.
What happens if my personal information is involved in a data breach?
The Club has various security measures in place to protect your personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure.
In the event that the Club’s security measures are compromised and your information is the subject of a data breach, the Club will comply with its obligations for responding to data breaches outlined in the Privacy Act. Upon becoming aware of a data breach, the Club will take urgent steps to contain the breach, mitigate any risk of harm and determine who may have been affected by the breach.
The Club will then assess the breach, including any potential for harm, and determine whether the breach is likely to result in serious harm to any person whose data was involved.
If the Club has reasonable grounds to believe that the breach is likely to result in serious harm to you, the Club will notify you of the breach as soon as possible. The Club will also notify the Office of the Australian Information Commissioner (‘OAIC’) of the breach.
Following a breach, the Club will conduct a review of its security measures and implement any additional measures it considers necessary to enhance the security of your information.
Are we likely to disclose personal information overseas?
The Club may use third party service providers who are based overseas. For example, we occasionally use secure cloud servers that may be located in other countries. We will always require that any third-party software and storage providers who are based overseas deal with your personal information in a way which is consistent with the Privacy Act.
If you agree to information being put on our websites or social media pages, then this could be accessed by people in other countries.
Why does the Club have a digital membership card?
If you are a member of the Club, you have the option of having a digital membership card linked in your mobile phone’s wallet. The Club offers this service for your convenience, so you do not have to worry about forgetting your card.
Your digital membership card is linked to your membership account and displays your name, membership number and your reward level. If you set up a digital membership card, we may collect information about your device and your location when you use your card.
The Pinnacle Rewards Card
The Club’s financial members can apply for a Pinnacle Rewards card which allows them to convert rewards points earned at the Club into funds which you can use to make payments via BPAY and at EFTPOS terminals in Australia.
In order to make this service available to you, we have partnered with a third-party financial services provider (Cuscal Ltd) and their authorised representative (Next Payments).
If you apply for a Pinnacle Rewards card, you will enter into a separate contract with Cuscal and Next Payments and not with the Club. We will provide you with a copy of the relevant terms and condition for the Pinnacle Rewards program when you make your application. Those terms are also available on our website at https://liverpoolcatholic.gslsolutions.com.au/. We strongly encourage you to read Cuscal and Next Payment’s privacy policies to understand how they will collect, hold and use your personal information.
We have no control over and are not responsible for your dealings with Cuscal and Next Payments, who will collect and handle your personal information pursuant to the terms of their own privacy policies.
Our involvement is limited to providing your completed application (or cancellation) form to Next Payments and providing Next Payments with information concerning your points balance. We may collect information about whether you have a card and how many rewards points you convert onto your card but otherwise do not collect any information concerning your eftpos card, linked bank accounts and any payments you make using the any points you have converted into money.
Using the Club’s websites and social media pages
The websites and social media pages operated by or in connection with us may collect personal information for the purposes outlined in this policy. Social media used by the Club may include but is not limited to Facebook, Instagram, Linkedin, Tic Tok and You Tube.
Any information collected by us as a result of your use of those websites and social media pages will be handled in accordance with this policy. Those websites and pages may also use cookies and contain hyperlinks to other websites and social media pages, including those operated by third parties. Any hyperlinks are provided for reference only. We do not have control over websites and pages operated by third parties and are not responsible for the content available on such websites or pages or the privacy practices of those third parties.
There will also be instances when dealing with the Club’s websites where you will be redirected to a third party’s website or platform. For example, you will be redirected to a third-party payment platform if you wish to make an online payment. Likewise, if you wish to make a reservation to dine at the Club via our website, you will be directed to a third-party platform to book your table and confirm any dietary or other special requirements which you may have.
Generally, we do not have control over these third-party providers and how they collect and handle any personal information that you provide to them. We also typically have limited access to the information they collect and hold. The Club does not accept any liability for the action of any such third-party providers. We strongly encourage you to read a third party’s privacy policy as it will likely contain provisions which are specific to the third-party’s activities and functions. For instance, a third-party payment platform provider will likely collect your billing and financial details and may disclose your financial information with your bank to verify your identity, to verify the information you have provided, to process your transaction and to advise us whether your payment has been successful.
What does this policy mean?
By entering, visiting or dealing with the Club, you consent to the terms of this policy.
From time to time, your additional consent will be sought for the collection, use or disclosure of your personal information for purposes other than as set out in this policy.
If you do not agree to this policy or do not wish to receive direct marketing information from or in connection with the Club, please contact our Privacy Officer, whose details can be found at the end of this policy.
How do I access, update or correct the personal information held by the Club about me?
You have a general right to access any personal information we hold about you. You can request access to the personal information we hold about you by contacting our Privacy Officer. We will not charge you for making the request. However, we may need to charge you for our time to answer your request. We will advise you in advance if there are to be any charges associated with complying with your request.
We will respond to your request within a reasonable timeframe (usually not more than 30 days). When you request access, we may need further information from you to verify your identity.
There are a number of reasons why we may be unable to give you access to your personal information held by the Club. If we are not able to provide access, we will provide you with written reasons.
If you believe any of the personal information that we hold about you is incorrect or out of date, you can ask us to correct it and we will take reasonable steps to ensure that it is accurate, up-to-date, relevant and not misleading. To assist us to update your information, we may need you to provide us with evidence of your new details. If we refuse to correct your personal information, we will give you written reasons.
How do I make a complaint about privacy related to the Club?
If you believe we have breached the Privacy Act or any of the Australian Privacy Principles, or if you have any issues about the Club’s collection, use, disclosure or storage of your personal information, please contact our Privacy Officer.
When contacting our Privacy Officer, please give us enough details to be able to identify you, understand your issue or complaint so we are able to respond appropriately.
We will respond to you within a reasonable timeframe (usually not more than 30 days).
If you are unhappy with how we handle your issue or complaint, you are entitled to make a privacy complaint to the Office of the Australian Information Commissioner (OAIC).
How do I contact the Privacy Officer at the Club?
You can contact the Privacy Officer by:
Phone: 02 8784 4878
Facsimile: 02 9821 3758
Email: privacy@liverpoolcatholic.com.au
Post: PO Box 305, Liverpool BC NSW 1871
How do I contact the Office of the Australian Information Commissioner (OAIC)?
Please visit the Office of the Australian Information Commissioner’s (OAIC) website at https://www.oaic.gov.au for contact details.