Target Australia

Comprehensive scope statement covering multiple stakeholder groups, clear definitions section, specific privacy officer contact details, current version availability commitment, and well-structured introductory section with data handling principles.

Clear primary collection purposes and marketing activities disclosed, comprehensive analytics and research purposes outlined, but lacks explicit commitment to purpose limitation beyond general Privacy Act compliance statement.

Clear policy update notification process, current version availability commitment, specific privacy officer contact details, complaint handling process with OAIC escalation, and data handling principles outlined, but lacks specific review frequency timeframes.

Highly detailed enumeration of personal information types collected, comprehensive disclosure of collection methods including automated technologies, specific mention of sensitive health information in employment context, and clear third-party collection sources.

Extensive list of third-party categories with many named entities (Google, Meta, Flybuys, etc.), clear purposes for sharing, contractual obligations for overseas recipients, and specific disclosure of advertising network partnerships.

Generic security commitment with minimal specifics beyond 'secured servers in controlled facilities' and overseas recipient requirements. Lacks encryption details, certifications, breach notification procedures, or audit practices.

Specific countries and regions named for data transfers, clear purposes disclosed, contractual safeguards for overseas recipients specified, and detailed disclosure of third-party platform transfers including Google Analytics integration.

Access and correction rights clearly stated with specific contact details, marketing opt-out mechanism provided, complaint process includes OAIC escalation, but response timeframes are vague ('reasonable time') rather than specific.

Good disclosure of profiling activities, data analysis for personalisation, and automated insights generation with some opt-out options for Google services, but lacks transparency about decision logic and human review rights.

No relevant claims found in policy.

No specific findings.