Canberra Racing Club Inc. Privacy Policy

Purpose and Scope
1. Canberra Racing Club Inc. (CRC, we, our, us) is committed to managing personal information in accordance with the Privacy Act 1988 (Cth) (Privacy Act) and the Australian Privacy Principles (APPs).
2. The Privacy Policy sets out how CRC collects, holds, uses, discloses and secures personal information. It applies to:
  1. members, patrons, visitors and event attendees;
  2. employees, contractors, volunteers and applicants;
  3. service providers, suppliers and sponsors; and
  4. users of our websites, apps, and WiFi services.
3. By providing personal information to CRC, you acknowledge and consent to its handling in accordance with the Privacy Policy
What Information We Collect
1. CRC may collect a broad range of personal information, including:
  1. identity details: name, address, date of birth, contact details, photographic ID;
  2. membership and racing details: membership numbers, ticketing history, attendance records, horse ownership or syndicate information;
  3. financial details: bank account and payment card details, billing history;
  4. sensitive information: health and medical details (e.g. injury reports, accessibility needs), criminal history (where permitted), and self-exclusion information under responsible gambling schemes;
  5. employment and recruitment details: applications, CVs, background checks, referee reports;
  6. online and device information: IP addresses, cookies, browsing history on CRC sites, login data, and device identifiers;
  7. CCTV and surveillance data: images and recordings collected at CRC venues for safety, regulatory, and security purposes;
  8. marketing and engagement data: preferences, survey responses, competition entries, social media engagement; and
  9. any other personal information you provide to us in the course of interacting with CRC.
2. Sensitive information is collected only with your consent or where required or authorised by law (e.g. gambling regulation, workplace health and safety obligations).
How We Collect Information
1. Personal information may be collected:
  1. directly from you when you apply for membership, purchase tickets, enter competitions, use WiFi, sign up for communications, sponsor events or otherwise interact with CRC;
  2. from third parties including wagering operators, sponsors, event partners, regulators, referees, public databases, and service providers; and
  3. automatically through surveillance systems (e.g. CCTV), access control, WiFi and internet services, cookies and analytics tools.|
Purposes of Collection and Use
1. CRC collects and uses personal information for purposes including:
  1. managing membership, ticketing, events and associated services;
  2. complying with legal and regulatory obligations under racing, wagering and liquor legislation;
  3. processing payments, financial reporting, and fraud prevention;
  4. marketing CRC events, promotions, products and services (subject to opt-out rights);
  5. engaging with corporate partners, sponsors, and community organisations;
  6. venue safety, crowd management, responsible service of alcohol, and responsible gambling programs;
  7. employment, volunteer management, and recruitment processes;
  8. protecting CRC’s lawful interests, investigating misconduct, or responding to legal claims; and
  9. any purpose disclosed at the time of collection or otherwise permitted by law.
USE OF CRC EQUIPMENT
1. CRC traces and monitors all internet sites and content access which is accessed via CRC’s equipment.
Disclosure of Personal Information
1. CRC may disclose personal information to:
  1. CRC’s service providers and contractors (IT, ticketing, marketing, payment processing, catering, security, cloud hosting);
  2. regulators, government bodies and law enforcement agencies (e.g. ACT Gambling & Racing Commission, Australian Transaction Reports and Analysis Centre, Australian Federal Police) where required;
  3. CRC’s insurers, auditors, accountants, legal and financial advisors;
  4. CRC’s sponsors and corporate partners (only for agreed purposes and subject to your consent, where required);
  5. racing bodies and industry stakeholders for compliance and governance purposes; and
  6. overseas service providers, including cloud and data hosting providers.
Overseas Disclosures
1. CRC may transfer personal information outside Australia, including to data storage, email hosting, and software providers.
2. CRC will take reasonable steps to ensure such recipients comply with the APPs or are subject to substantially similar privacy protections.
3. Where compliance cannot reasonably be enforced, overseas recipients may not be subject to the Privacy Act and CRC is not responsible for their privacy practices.
Direct Marketing
1. CRC may use your personal information to send you promotional material about events, products, services, or offers from CRC and its partners.
2. You may opt-out of marketing communications at any time by following the unsubscribe instructions or contacting CRC directly.
3. CRC does not sell personal information to third parties for direct marketing.
WiFi, CCTV and Online Services
1. Use of CRC’s WiFi is subject to its Terms of Wifi. CRC may monitor usage to ensure compliance, maintain security, and improve services.
2. CCTV is in operation at CRC venues for safety, security, asset protection, and regulatory compliance.
3. CRC’s websites and apps may use cookies, analytics and third-party tools to collect information about usage. You may disable cookies, but functionality may be affected.
Photography and Filming
1. Any photographic or digital material taken on behalf of the CRC at its venues in respect of races or any promotional events or persons, remain the property of the CRC and may be used at its discretion.
2. CRC may use images of race day patrons for promotional purposes.
Data Security and Retention
1. CRC implements reasonable physical, administrative and technical safeguards to protect personal information against misuse, interference, loss, unauthorised access, modification or disclosure.
2. CRC retains personal information only for as long as necessary to fulfil its purposes, or as required by law (e.g. under racing, liquor, employment or taxation legislation).
3. Where personal information is no longer required, CRC will take reasonable steps to securely destroy or de-identify it.
Access and Correction
1. You may request access to personal information CRC holds about you, subject to limited exceptions in the Privacy Act.
2. You may request correction of personal information if it is inaccurate, out-of-date, incomplete, irrelevant or misleading.
3. Requests should be directed to the Privacy Officer (see clause 13). CRC will respond within a reasonable time and may charge reasonable costs for access.
Data Breaches
1. CRC has a Data Breach Response Plan consistent with the Notifiable Data Breaches (NDB) Scheme under the Privacy Act.
2. Where a data breach is likely to result in serious harm, CRC will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by law.
Complaints
1. If CRC has breached your privacy rights, you may lodge a complaint with our Privacy Officer (see section 13).
2. CRC will investigate and respond within a reasonable period.
3. If you are not satisfied with our response, you may escalate the complaint to the OAIC.
Links to Other Websites
1. CRC’s website may contain links to third-party websites. These links are provided for convenience only. CRC does not control, endorse, or make any representations about third-party websites, and the Privacy Policy does not apply to them.
2. CRC is not responsible for the privacy practices, content, security, or activities of third-party websites.
Updates to this Policy
1. CRC may review and update this Privacy Policy periodically to reflect changes in law, regulation, or CRC’s operations. Updates will be published on our website and available at our venues.
Contact Us

For queries, requests, or complaints, please contact:

Privacy Officer
Canberra Racing Club Inc.
PO Box 275,
Mitchell, ACT 2911
Email: privacy@thoroughbredpark.com.au
Phone: (02) 6204 0000