The below “Country Addenda” supplement and form part of the Privacy Notice.
For consistency, capitalized terms have the meanings assigned to them here unless otherwise noted.
Please note that this page may be updated as necessary to address evolving operations and regulations.
This Country Addendum, which supplements and forms part of Carrot’s Privacy Notice, applies to you if you are a resident or citizen of Australia and describes how we collect, use, disclose, and store your Personal Information in accordance with the Australia Privacy Act of 1988 (“Privacy Act”) and its 13 Australian Privacy Principles (APPs).
In most circumstances, it is impractical for people to communicate with us anonymously. We need to identify you to assist you effectively. However, in circumstances where it is lawful and practicable to do so, we will provide you with the option of not identifying yourself, or using a pseudonym, when entering into communications with us.
We collect Personal Information about you when you voluntarily submit information to us when you use our Service. This can include information you provide to us when you register for an account, send us messages, subscribe to our mailing lists, newsletters or other forms of marketing communications related to the Service, participate in a survey, or use some other feature of our Service.
Please see here for more.
We also collect information about you through automated means, as detailed here.
Where we receive Personal Information about you which we have not requested (whether directly from you or from a third party), we will consider, within a reasonable period, whether we could have collected that Personal Information from you had we requested it.
Where we determine that we could have collected the Personal Information had it been requested, we will use, disclose, and store that Personal Information in the manner set out in our Privacy Notice.
Where we determine that we could not have collected the Personal Information had it been requested, we will destroy or de-identify that Personal Information as soon as practicable, provided it is lawful and reasonable to do so.
For a detailed description of how and why we use and disclose Personal Information (including information classified as “sensitive”), please see:
In order to provide Services, Carrot will store and process your Personal Information in the United States.
To the extent that this is considered an “international data transfer” under the Privacy Act:
For more information on how we store, protect, and retain your information, please see here.
Where we collect your Personal Information, it will usually be identified by a common identifier such as your name, address or contact details. Subject to certain exceptions under the Privacy Act, we will not disclose identifiers assigned by Government agencies or its agents, such as tax file numbers, or use those identifiers to identify your Personal Information.
In addition to the rights outlined here, you have the following data subject rights:
Access
Subject to any exceptions in the Privacy Act, if you have provided us with Personal Information, you have a right to request access to it. In the event that a request for access is made, we will review our records to determine what Personal Information relating to you we hold and endeavor to respond to your request within a reasonable period after the request is made, but in any event, within 30 days. Once we have notified you of the nature of the Personal Information relating to you which we hold, we will give you access to your Personal Information in the manner requested by you, if it is reasonable and practicable to do so. We do not levy a charge in respect of the making of a request for access to Personal Information held by us. However, we may charge you for the reasonable costs incurred by us in providing you with access to the Personal Information held by us. The Privacy Act provides instances where a holder of Personal Information may refuse to provide an individual with access to their Personal Information. If we refuse to give you access to your Personal Information, we will give you a written notice that sets out our reasons for the refusal and the mechanisms available to complain about our refusal.
Correction
Carrot takes reasonable steps to keep your Personal Information as accurate, complete, and up-to-date as possible. We make an effort to ensure this data is of high quality, but this relies on the accuracy and frequency of data provided by you. You can assist us by notifying us if your circumstances change, such as if your name changes. If we hold Personal Information about you and you request that we correct the information, we will take reasonable steps to rectify the situation free of charge if we are satisfied that the information we currently hold is inaccurate, out-of-date, incomplete, irrelevant, or misleading. If we refuse to correct your Personal Information, we will give you a written notice setting out our reasons for the refusal and the mechanisms available to complain about the refusal.
You may exercise these rights by contacting data-requests@get-carrot.com. PLEASE NOTE: ALL REQUESTS ARE SUBJECT TO VERIFICATION OF YOUR IDENTITY. WE WILL RESPOND TO REQUESTS WITHIN THE TIME PERIOD REQUIRED BY APPLICABLE LAW.
If you wish to make a complaint about a breach of your privacy by Carrot, you may contact us at legal@get-carrot.com. All complaints will be investigated by an appropriately qualified representative of Carrot. We will endeavor to resolve your complaint as quickly as possible and, in any event, within 30 days. We will notify you of the outcome of the investigation, including how we propose to resolve your complaint and what, if any, corrective measures we will implement.
Please see here for pertinent details regarding updates to our Privacy Notice (including, as applicable, updates to this Addendum). If you have questions about our Privacy Notice, or this Addendum, please contact us at legal@get-carrot.com.
This Country Addendum, which supplements and forms part of Carrot’s Privacy Notice, applies to you if you are a resident or citizen of New Zealand and describes how we collect, use, disclose, and store your Personal Information in accordance with the Privacy Act 2020 (“Privacy Act”).
Please click on the below links, respectively, to find out how and why we collect, use, and disclose your information:
Please note that, If you choose not to provide your Personal Information to us, we may not be able to provide you with access to our Service.
In order to provide services, Carrot will store and process your Personal Information in the United States.
To the extent that the Privacy Act considers this an “international data transfer,” we will comply with applicable requirements for transferring Personal Information outside of New Zealand.
For more information on how we store, protect, and retain your information, please see here.
In addition to the rights outlined here, you have the following data subject rights:
Access
Under the Privacy Act, individuals have the right to access information that an organization holds about them.
Correction
Where a person establishes that the Personal Information we hold about them is not accurate, complete, or up-to-date, or is misleading, we will correct our records as necessary. Depending on the nature and complexity of any such request, we may charge an administration fee for providing access to Personal Information.
You may exercise these rights by contacting us at data-requests@get-carrot.com. PLEASE NOTE: ALL REQUESTS ARE SUBJECT TO VERIFICATION OF YOUR IDENTITY. WE WILL RESPOND TO REQUESTS WITHIN THE TIME PERIOD REQUIRED BY APPLICABLE LAW.
Breach Notification
If we become aware of a data breach that we consider constitutes a notifiable privacy breach under the Privacy Act, we will notify the Office of the Privacy Commissioner and any affected individuals.
Complaints
If you wish to make a complaint about a breach of your privacy by Carrot, you may contact us at legal@get-carrot.com. All complaints will be investigated by an appropriately qualified representative of Carrot. We will endeavor to resolve your complaint as quickly as possible and, in any event, within 30 days. We will notify you of the outcome of the investigation, including how we propose to resolve your complaint and what, if any, corrective measures we will implement.
Please see here for pertinent details regarding updates to our Privacy Notice (including, as applicable, updates to this Addendum). If you have questions about our Privacy Notice, or this Addendum, please contact us at legal@get-carrot.com.
