UBT | PRIVACY POLICY

We collect, Personal Data about you for the following reasons: (1) the collection is necessary for us to provide our services; (2) it is in our legitimate interest to collect this data for the purposes of providing the services; (3) the collection is necessary for us to comply with our legal obligations or applicable law; or (4) we have consent, where applicable or required under law.

We will generally collect your Personal Data from you directly. There are however, circumstances in which we collect Personal Data from third party individuals, business entities and governmental agencies, such as signatories to the GAP Global Limited Amended and Restated Members Agreement (GAP Global Members), courts, public and law enforcement agencies, and credit bureaus, regardless of whether such individual, business entity or governmental agency compiled the information itself or received it from other sources.

Where we collect Personal Data from a third party, we will handle that information in accordance with this Privacy Policy and any obligations we have to that third party.

If you provide to us Personal Data about another person, we are relying on you having addressed all relevant consents, notifications and other requirements to enable us to process the Personal Data for our purpose of collection.

We may collect Personal Data about prospective personnel, by conducting reference and background checks in relation to their application for employment with us from time to time, including searches for any criminal records, employment and education verifications, personal credit history based on reports from any credit bureau and searches of any public records.

We will only collect, use and disclose Sensitive Data about you where you have provided your explicit consent to the collection of that information, or where we are required or authorised by law to do so, for example where we conduct criminal records searches in relation to prospective personnel where this is necessary to carry out the obligations and to exercise specific rights in the field of employment and social security and social protection law as permitted by local data protection laws or where necessary for reasons of substantial public interests as permitted by local data protection laws. Such Sensitive Data may in certain circumstances include biometric data such as biometric facial scans. In providing any consents to the collection or handling of Personal Data (including Sensitive Data), you consent to us collecting, holding, using and disclosing the information you provide in accordance with the terms of those consents and this Privacy Policy.

If you do not provide us with your Personal Data when requested, this may limit the assistance we are able to provide to you, including assistance we are contracted to provide on behalf of a third party. For example, we may not be able to provide the product and/or service you may have requested and may not be able to handle enquiries in connection with those products and/or services, or process your job application.

Our website uses a technology called “cookies” and web server logs to collect information about how the website is used including, where available, your IP address, browser type and the geographical location of your computer. We also use Google Analytics to collect details of how you use our site, as well as anonymous data that you enter into our forms. We do this to help us analyse how visitors use our site (including behaviour patterns and the tracking of visits across multiple devices), administer our site and manage your account. Google Analytics doesn’t collect information that identifies a visitor to our site. All the information that is collected is anonymous and is only used to improve how our site works. We do not allow Google to make any attempt to establish the identities of any users of our site.

For details about how we use cookies, please see our Cookies Policy.

We collect, hold, use and disclose Personal Data about individuals for a variety of business purposes.

These include, without limitation, to:

• monitor and evaluate the performance and security of our website and any other platform or application we may offer, including to:
  • administer our site
  • improve our site to ensure that content is presented in the most effective manner
  • allow you to participate in interactive features of our services when you choose to do so
  • analyse how visitors use our site (including behaviour patterns and the tracking of visits across multiple devices)
  • improve your online experience
• facilitate the provision of our products and/or services to our clients and member businesses who have engaged us;
• facilitate the provision of such other products and/or services that we or others may offer from time to time and provide information about their availability, features and benefits;
• work with and procure goods and/or services from our suppliers and service providers;
• facilitate recruitment and selection of prospective personnel;
• facilitate conferences, training and education programs, and event management;
• provide and manage charitable assistance;
• issue newsletters and provide information on church services or other sponsored events;
• conduct audit, accounting, financial and economic analysis of our business operations;
• respond to enquiries or investigate and resolve complaints;
• protect our legal rights, investigate suspected fraud or other misconduct, or assist law enforcement agencies; and
• comply with our legal and regulatory obligations.

We may also use and disclose Personal Data we collect for other purposes that are permitted, required or authorised by applicable law, such as:

• purposes which you would reasonably expect and which are related (and, in the case of Sensitive Data, directly related) to the primary purpose of collection of Personal Data; and
• any other purposes for which you have given your consent.

We will only use or disclose your Personal Data for the purposes of direct marketing (e.g. in relation to products and/or services we may offer from time to time) where we have your consent or we are otherwise permitted by law to do so.

You are free to opt out from receiving marketing communications from us, by:

• following the “opt out” process indicated in a marketing communication you have received;
• emailing us at [email protected] any time requesting that your name and email address be removed from our marketing lists; or
• following such other process that is made available for this purpose from time to time.

In order to perform activities in connection with the purposes described in this Privacy Policy, we may make Personal Data available to other persons or entities, or disclose it to them, including:

• GAP Global Members;
• our suppliers and service providers, including those to whom we outsource certain of our information technology functions (e.g. cloud service providers). We authorise our suppliers and service providers to use or disclose your Personal Data only as necessary to provide us with supplies or perform services on our behalf, or to comply with legal requirements. We require suppliers and service providers by contract to safeguard the privacy and security of Personal Data they process on our behalf;
• any corporate purchaser or prospect to the extent permitted by law as part of any merger, acquisition, sale of our assets, or transition of service to another provider, as well as in the event of insolvency, bankruptcy, or receivership in which Personal Data would be transferred as an asset of ours;
• other related bodies corporate;
• government, regulatory, judicial or law enforcement authorities;
• accountants, insurers, auditors, lawyers and our professional advisers; and
• any other third parties notified to you at or around the time we collect your Personal Data (together, the Required Recipients).

We disclose this Personal Data for the following reasons: (1) the disclosure is necessary for us to provide our services; (2) it is in our legitimate interest to disclose this data for the purposes of providing our services; (3); the disclosure is necessary for us to comply with our legal obligations or applicable law; or (4) we have consent, where applicable or required under law.

We may disclose Personal Data to GAP Global Members and Required Recipients who are located in Australia, Argentina, the Caribbean, North America, Europe, New Zealand, the United Kingdom and the United States, Canada.

Where we transfer your Personal Data outside the EEA or the United Kingdom, we have rules and steps put in place to make sure your personal data is kept safe and protected. Usually this means we’ll have standard contractual clauses approved by the European Commission in our contracts with parties outside the EEA, or we will rely on European Commission adequacy decisions.

We hold Personal Data both electronically and in paper form.

We maintain administrative, technical and physical safeguards designed to protect Personal Data from misuse and loss, and unauthorised access, modification and disclosure.

We will process your Personal Data for as long as is necessary for the purpose(s) for which it is collected and processed. Unless the law requires otherwise or we need the Personal Data to establish, exercise or defend a legal claim, we take reasonable steps to destroy or permanently de-identify Personal Data if it is no longer required.

If you wish to make an enquiry or complaint to us regarding privacy matters, you should contact us in writing using the contact details at the end of this Privacy Policy. We will endeavour to respond to your enquiry or complaint promptly. Please include sufficient details so that we can understand the nature of your enquiry. We may need to request personal data in order to verify your identity.

You also have the right to lodge a complaint with the competent data protection supervisory authority.