Privacy Policy

Creative Skills Retail Council (CSRC) – Privacy Policy
Last updated: October 2025

 
1. Overview
Creative Skills Retail Council Pty Limited (ABN 46 688 640 146) (“CSRC”, “we”, “our”, or “us”) respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store, and disclose personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

 
2. Legal Structure and Purpose
CSRC is a special-purpose proprietary limited not-for-profit company governed by its Constitution and operating as a social-enterprise peak body.
We exist to promote commerce, industry, and social impact for community benefit.
Any surplus income is reinvested to support workforce capability, research, business education, and community impact initiatives.

 
3. Information We Collect
We may collect personal information such as:

Name, business name, position title, and contact details;
Email, phone number, and postal address;
Membership type and transaction details;
Participation in training, surveys, or events;
Information voluntarily provided to us (e.g. feedback, testimonials).
Payment information (credit-card or banking details) is handled securely by third-party payment processors; CSRC does not store full payment details.
We also collect technical data through cookies and analytics (e.g. IP address, browser type, user preferences).

 
4. How We Collect Information
We collect personal information when you:

Apply for or renew membership;
Register for training, webinars, or events;
Purchase from the CSRC Shop for Good;
Subscribe to newsletters or updates; or
Communicate with us directly or through partners.
We may also receive data from trusted partners (e.g. ARMA, learning or technology providers) where required to deliver a program or service.

 
5. How We Use Your Information
We use personal information to:

Manage memberships and renewals;
Deliver training, events, and communications;
Process payments and issue invoices;
Provide updates, newsletters, and opportunities relevant to your role;
Comply with grant or regulatory reporting obligations; and
Improve the quality and relevance of our programs and services.
De-identified data may be used for sector research, policy analysis, or impact reporting consistent with CSRC’s not-for-profit objectives.

Lawful basis: CSRC collects and uses personal information only where reasonably necessary for its legitimate functions and activities as a not-for-profit professional association, or where required by law.

 
6. Disclosure and Sharing
We may share limited information with trusted third parties for operational purposes, including:

Technology and learning partners (e.g. ARMA, LMS, CRM, email platforms);
Payment and accounting providers for secure transactions;
Government or funding bodies where legally required; and
Event or research partners assisting with surveys or program delivery.
All partners are contractually required to maintain privacy and security standards consistent with Australian law.
CSRC does not sell, rent, or trade personal information.

 
7. Data Storage and Security
Information is stored securely on servers located in Australia or jurisdictions with equivalent privacy safeguards.
Access is restricted to authorised personnel only.
All online transactions use SSL encryption and multi-factor security protocols where applicable.

 
8. Access, Correction and Deletion
You may request access to or correction of your personal information by contacting CSRC in writing.
Requests will be processed promptly in accordance with the Privacy Act.
You may also request deletion of data, subject to any legal, contractual, or audit obligations requiring retention.

 
9. Email Communications
By joining CSRC or subscribing to updates, you consent to receive communications about programs, research, and industry news.
You can unsubscribe at any time from marketing communications via the link in each email or by contacting us.
Operational messages (such as invoices, renewals, or service updates) are not considered marketing communications.

 
10. Cookies and Analytics
The CSRC website uses cookies and analytics tools to understand usage patterns and improve performance.
You may disable cookies in your browser; however, some features may not function as intended.

 
11. Data Breach Response
If a data breach involving personal information occurs, CSRC will act in accordance with the Notifiable Data Breaches Scheme, including notifying affected individuals and the Office of the Australian Information Commissioner (OAIC) where required.

 
12. Policy Updates
CSRC may update this Privacy Policy periodically to reflect legal or operational changes.
The most current version will always be available on our website.
Continued use of our services constitutes acceptance of any updates.

 
13. Contact
Privacy Officer
Creative Skills Retail Council Pty Limited
Email: [email protected]
Website: www.mycsrc.org and sub-domains (e.g. shop.mycsrc.org)