Background

This is the privacy policy of the MLA Group, which consists of Meat & Livestock Australia Limited ABN 39 081 678 364 (MLA) and its subsidiaries, Integrity Systems Company Limited ABN 34 134 745 038 (ISC) and MLA Donor Company Limited ABN 49 083 304 867 (MDC). 

MLA Group respects the privacy of individuals. This policy sets out how MLA Group collects, stores, uses and discloses personal information.

If you are an individual in the EU or the United Kingdom (“UK”) or you are otherwise interacting with an MLA office in the EU or the UK, this notice sets out how we collect and process your personal data and our legal basis for doing so. For the purpose of applicable data protection laws, including GDPR, the data controller is Meat & Livestock Australia Ltd, The Vineyards Business Centre, 36 Gloucester Avenue, Camden Town, London, NW1 7BB, United Kingdom (MLA). Throughout this policy, the references to ‘personal information’ can be read as ‘personal data’ for the purposes of the GDPR.  

Where sections of this policy are specific to Australia or the UK/EU, we will make that clear.

Types of personal information collected

The personal information the MLA Group collects depends on the nature of your interaction with us. The personal information collected can include your name, contact details such as your phone number, address, email address, Australian Business Number (“ABN”), business name and general information about your livestock and business operations. It may also include credit card details if you are purchasing a product, or information from your résumé if you have responded to a job application.

You do not have to provide your personal information to MLA Group but, if you do not provide the information requested, MLA Group may not be able to manage your membership or provide you with its products and services.

Personal information collected in the normal course of business of the National Livestock Identification System (NLIS), Livestock Production Assurance (LPA) and Livestock Data Link (LDL) by ISC is collected, held, used and disclosed pursuant to this privacy policy, however, may also be subject to additional terms contained in the System Terms of Use.

These system terms of use are available here:

• NLIS Terms of Use
• LPA Terms of Use
• LDL Terms of Use

In the event of any inconsistency between this privacy policy and any of the System Terms of Use, the relevant System Terms of Use will apply to the extent of the inconsistency.

Method of collection of personal information

We collect your personal information directly from you when you:

1. create a myMLA, NLIS, MSA, LPA, Sheep Genetics or LDL account;
2. interact with us in person, over the phone or online;
3. submit a completed form;
4. participate in a questionnaire or survey;
5. attend an event;
6. subscribe to a mailing list; or
7. apply for a position with us.

Collection from third parties

We may also collect your personal information from third parties. We collect your personal information from these third parties so that we can meet our membership and legal obligations.

Cookies, Pixels & Tags

This website uses cookies and similar technologies, which are small text files (often including a unique identifier), that are sent to your browser from a website's computers and stored on your computer's hard drive or on your tablet or mobile device. Most websites you visit will use cookies, pixels or tags in order to improve your user experience by enabling that website to “remember” you, either for the duration of your visit (using a “session cookie”) or for repeat visits (using a “persistent cookie”).

You can delete cookies by changing your privacy preferences in your internet browser. Most web browsers automatically accept cookies, but you can usually modify your browser settings to decline cookies if you prefer. Please note that some parts of the website will not function correctly if you disable cookies.

Our website uses Google Analytics to help us better understand visitor traffic, so we can improve our services.  

Purposes for holding and using personal information

MLA Group uses the personal information that it collects for the purposes for which it was provided to MLA Group, to carry out MLA Group’s business purposes (which are detailed generally on MLA’s or ISC’s websites or are otherwise obvious at the time MLA Group collects it), to fulfil MLA Group’s legal obligations, other related purposes or as permitted or required by law. Where MLA, MDC or ISC documents request personal information, MLA Group will state the general purposes for its use and to whom it may be disclosed, and the main consequences, if any, if the information is not provided. MLA Group’s general purposes may include:

1. providing products and services that you have requested and responding to your enquiries. We need to process your data in this way in order to perform our contractual obligations to you in relation to products and services you have requested. In relation to your enquiries, it is in our legitimate interest to use your personal data to respond to you;
2. administering MLA Group’s programs and dealing with stakeholders. It is in our legitimate interest to use your information to administer our programs;
3. keeping MLA's or ISC’s members, levy payers and relevant members of the public informed of MLA’s or ISC’s business and issues relating to the red meat and livestock industry. It is in our legitimate interest to contact you with news about the industry;
4. conducting specific projects in which you have chosen to participate. We need to process your information in this way in order to perform our contractual obligations to you in relation to the specific project;
5. administering competitions. We need to process your information in this way in order to perform our contractual obligations to you in relation to your entry into any competitions;
6. administering events. We need to process your information in this way in order to perform our contractual obligations to you in relation to your participation in a relevant event. It is also in our legitimate interest to process your information in order to register your acceptance for, and your attendance at, an event;
7. including your details in publicly available databases on the MLA or ISC website. It is in MLA's legitimate business interests to maintain these databases;
8. managing your membership with MLA Group and reviewing your Levies Notice in relation to MLA’s annual general meeting;
9. where you have provided consent, sending marketing material that MLA Group considers will be useful. For further information, please refer to the Direct Marketing section of this policy;
10. complying with legal requirements. We will process your information where necessary to comply with a legal obligation to which we are subject;
11. administering the NLIS, LPA , MSA and LDL databases. It is in our legitimate interest to use your information to administer our databases;
12. analysing how our products and services (including any websites) are used to understand the effectiveness of our communications. It is in our legitimate interest to use your information for those purposes;
13. personalising the service or communication we provide to you and tailor your experience on our website. It is in our legitimate interest to use your information to personalise service and communications to you;
14. investigating, detecting and protecting MLA Group and third parties against, negligence, breach of contract, fraud, theft and other illegal activities; and
15. responding to and managing enquiries, complaints, feedback and claims. It is in our legitimate interest to use your information to respond to and manage enquiries, complaints, feedback and claims.

Disclosure of personal information

Depending on your interaction with the MLA Group, your personal information may be disclosed to:

1. MLA Group's related entities, international offices, and representatives for the purpose of MLA Group’s business only;
2. as required by law, the Department of Primary Industries in your state or territory;
3. users searching the Red Meat Exporters Database or the Sheep Genetics Database on our websites. Your information is only disclosed through this search if you have provided explicit consent for this disclosure;
4. individuals who make a request in accordance with the Corporations Act 2001 (Cth) (“Act”), as MLA Group is required to disclose its member register upon request (provided the purpose is in line with the Act and not prohibited);
5. AUS-MEAT for the purpose of audit;
6. third party service providers for the purpose of MLA Group’s business only, including specialist advisers to MLA Group who have been engaged to provide MLA Group with legal, administrative, financial, insurance, research, information technology, marketing or other services; and
7. any other person authorised, implicitly or expressly by you when the personal information was provided or collected by MLA Group

All searches on the NLIS, MSA and eNVD databases are made via the PIC Register, which is a series of databases managed and maintained by each individual state and territory.

Overseas Disclosure (where the Privacy Act applies to the personal information)

MLA Group and its related entities may disclose your personal information to third-party service providers operating outside Australia who work with MLA Group or one of our suppliers, agents, or partners.

Before disclosing your personal information to an overseas third party, MLA Group will first take reasonable steps to ensure that the overseas recipient:

• does not breach the APPs in relation to your personal information; or
• the recipient of the information is subject to a law, or binding scheme, that has the effect of protecting your personal information in a way that is substantially similar to the way in which the APPs protect the information.

Some of MLA Group's related entities, international offices and representatives to whom it may disclose your personal information are located overseas, in regions such as the European Union and countries such as the United States, the United Kingdom, Japan, Korea, China, Indonesia, the Philippines, Singapore, the United Arab Emirates, Saudi Arabia, India, Malaysia, Thailand and Vietnam.

Transfers and storage of personal data outside the EEA (where the GDPR applies)

The personal data that we collect may be transferred to, and stored at, a destination outside the European Economic Area (EEA), including countries which have different data protection standards from those which apply in the EEA. The countries to which your personal data may be transferred, and in which it may be stored, include Australia, the United States, the United Kingdom, Japan, Korea, China, Indonesia, the Philippines, Singapore, the United Arab Emirates, Saudi Arabia, India, Malaysia, Thailand and Vietnam. Your personal data may be processed by staff outside the EEA who work for us or for one of our suppliers engaged in the processing of your personal details. We will take all reasonable and necessary steps to ensure your personal data is treated securely and in accordance with this Privacy Notice and applicable data protection laws and will not transfer personal data outside the EEA unless necessary to conclude or for performance of a contract with you, or in your interests, or with your consent.

Security of personal information

MLA Group takes reasonable steps to protect personal information it holds from misuse, loss and interference and from unauthorised access, modification or disclosure.

MLA Group will take reasonable steps to destroy or permanently de-identify (anonymise) personal information it holds if it is no longer needed for MLA Group's business purposes and it is permissible by law to do so.

Sensitive information

Sensitive information is information about you that reveals your racial or ethnic origin, political opinions, religious or philosophical beliefs or affiliations, membership of a professional or trade association, membership of a trade union, sexual orientation, criminal record or information about you which is health information or genetic information or biometric information that can be used to identify you.

MLA Group will only collect your sensitive information where you have consented, or where required by law. If MLA Group holds any sensitive information, that information will only be used and disclosed by MLA Group for the purpose for which it was provided or other purposes permitted by law. If MLA Group asks for sensitive information, it will explain the reason for this request.

Direct Marketing 

Providing information to you is very important to us. As part of this service, we may use your personal information to identify a product or service that you may be interested in. We may with your consent, use the contact details you have provided to contact you from time to time whether by phone, email, SMS or post to tell you about products or services that we believe may be of interest to you.

You can opt-out of receiving direct marketing communications from us at any time by contacting us directly or by using the unsubscribe facility in the electronic communication you receive.

Access to personal information (where Privacy Act applies)

A person may request access to personal information that MLA Group holds about them by contacting MLA using the contact details below.

The MLA Group will process such requests within a reasonable time and may charge a fee for providing access to cover the costs of verifying the application and retrieving the information requested.

If MLA Group denies an access request, it will provide reasons for doing so.

Correction of personal information (where Privacy Act applies)

MLA Group will take reasonable steps to ensure the personal information it holds is accurate, complete and up to date. MLA Group should be promptly notified if there are any changes to an individual’s personal information by contacting MLA Group using the contact details below.

A person may ask MLA Group at any time to correct personal information held by it about them. On request, MLA Group will take reasonable steps to correct the information so that it is accurate, complete and up to date, or will provide reasons for not doing so.

Access to personal data (only where GDPR applies)

Under applicable data protection laws (to the extent they apply to our website, and to you), you have the right to:

• Access. You have the right to request a copy of the personal information we are processing about you, which we will provide back to you in electronic form. For your own privacy and security, in our discretion we may require you to prove your identity before providing the requested information. If you require multiple copies of your personal data, we may charge a reasonable administration fee.
• Rectification. You have the right to have incomplete or inaccurate personal information that we process about you corrected. Note that you can always make certain adjustments to certain personal information directly through your online account.
• Deletion. You have the right to request that we delete personal information that we process about you, except we are not obligated to do so if we need to retain such data in order to comply with a legal obligation or to establish, exercise or defend legal claims.
• Restriction. You have the right to restrict our processing of your personal information where you believe such data to be inaccurate, our processing is unlawful or that we no longer need to process such data for a particular purpose, but where we are not able to delete the data due to a legal or other obligation or because you do not wish for us to delete it.
• Portability. You have the right to obtain personal information we hold about you, in a structured, electronic format, and to transmit such data to another data controller, where this is (a) personal information which you have provided to us, and (b) if we are processing that data on the basis of your consent (such as for direct marketing communications) or to perform a contract with you.
• Objection. Where the legal justification for our processing of your personal information is our legitimate interest, you have the right to object to such processing on grounds relating to your particular situation. We will abide by your request unless we have compelling legitimate grounds for the processing which override your interests and rights, or if we need to continue to process the data for the establishment, exercise or defence of a legal claim.
• Withdrawing Consent. If you have consented to our processing of your personal information, you have the right to withdraw your consent at any time, free of charge. This includes cases where you wish to opt out from marketing messages that you receive from us. 

You can make any of these requests in relation to your personal data by sending the request by mail to eu.privacy@mla.com.au

How to make a complaint (where Privacy Act applies)

If you wish to make a complaint about our handling of your personal information, please contact our Privacy Officer using the contact details below.

We will investigate all complaints and respond to you as soon as practicable. The MLA Group will contact you if it requires any further information from you and will notify you in writing of the outcome of the investigation. If you are not satisfied with MLA Group's determination, you can contact MLA Group to discuss your concerns or contact the Office of the Australian Privacy Commissioner via www.oaic.gov.au. 

How to make a complaint (where GDPR applies)

You have the right to lodge a complaint with the local data protection authority if you believe that we have not complied with applicable data protection laws. If you are based in, or the issue relates to, the UK, the Information Commissioner’s Office can be contacted as follows:

Telephone: +44 0303 123 1113

Email: casework@ico.org.uk

Website: www.ico.org.uk

Web-form: www.ico.org.uk/concerns/

Address: Water Lane, Wycliffe House, Wilmslow, Cheshire, SK9 5AF

If you are based in, or the issue you would like to complain about took place, elsewhere in the EEA, please click here for a list of local data protection authorities in the other EEA countries.

Changes to this policy

MLA Group may amend this policy from time to time, and the amended policy will be published on MLA’s or ISC’s website. Please review MLA's and ISC’s websites periodically for changes to this policy.

Contact us

If you have any questions or concerns about this policy or MLA Group's privacy practices, please contact MLA Group:

• Australia by calling 1800 023 100 or emailing privacy@mla.com.au.
• UK/EU by calling +44 207 2849 784 (United Kingdom) or emailing eu.privacy@mla.com.au