JB Hi-Fi

Comprehensive scope statement covering multiple stakeholder types, detailed section overview with bulleted list, specific contact information including Privacy Officer details, current version tracking, and policy availability in alternative formats upon request.

Detailed list of primary collection purposes with explicit AI usage disclosure and marketing consent mechanisms, though secondary use disclosure is somewhat vague with 'reasonably expected' standard.

Privacy Officer designated with contact details, policy version tracking, and complaint handling procedures with timeframes, but lacks specific review frequency commitments and change notification mechanisms.

Extensive enumeration of specific personal information types collected, detailed collection methods both direct and automated, clear legal basis for collection requirements, and specific consent mechanisms with opt-out provisions.

Comprehensive disclosure of third-party categories and named recipients including Riskified, Marketplace Partners, and specific advertising platforms, with clear purposes stated and contractual obligations referenced for service providers.

General security commitment with mention of technical and organisational measures and state-of-the-art encryption, but lacks specific security certifications, detailed breach notification procedures, or comprehensive audit practices.

Specific countries named (USA, Singapore, UK, Netherlands, Israel, New Zealand) with clear adequacy warning about less protective laws, detailed service provider categories, and specific third-party platforms identified.

Clear access and correction rights with specific $25 fee, deletion rights for accounts and transaction records, detailed marketing opt-out mechanisms, 30-day response timeframe, and explicit OAIC escalation pathway.

Good disclosure of AI usage including chatbots, fraud detection, and personalisation with specific third-party provider Riskified named, though lacks explicit opt-out mechanisms for automated decision-making beyond marketing.

No relevant claims found in policy - no age verification, parental consent mechanisms, age thresholds, or child-specific protections disclosed.