An important update about Malthouse's email marketing service provider
Last update: Tuesday 2 August
Malthouse uses Wordfly, an email marketing service provider, to communicate via email with its audiences. Wordfly is used by many arts, cultural and not-for-profit organisations in Australia and around the world.
No customer financial information is electronically stored within Wordfly.
On July 10 2022, Malthouse was advised that Wordfly had been the target of a cyber attack, which subsequently resulted in a global network outage. WordFly immediately retained outside digital forensic experts to understand what had happened, the potential impact, and to assist with restoring access to WordFly.
What does this mean for your Malthouse account?
On 2 August 2022, Wordfly determined with the aid of digital forensic experts that Malthouse's user data has not been compromised in any way as a result of this incident.
Subscribers to Malthouse's mailing list do not need to take any action. We will post any additional updates on our website and directly email customers when possible.
For further information, you can contact our team on email@example.com. We apologise for the interruption to our usual communications over the past week, and thank you for your patience while we respond to customer enquiries.
Malthouse Theatre is committed to protecting our customers’ privacy. We understand and appreciate that visitors and users of this web site are concerned about their privacy, and the confidentiality and security of any information that may be provided to us.
Malthouse Theatre is bound by the Australian Privacy Principles contained in the Privacy Amendment (Enhancing Privacy Protection) Act 2012 and the Victorian Information Privacy Act 2000, as well as other applicable laws protecting privacy.
YOUR PERSONAL INFORMATION
Your name and contact details will not be added to a marketing list, nor will we disclose these details to third parties without your consent, unless required by law. If you opt-in to become a Malthouse Theatre e-News subscriber, you are giving us permission to send you information about upcoming performances and other products and services offered by Malthouse Theatre and its partners. If you opt in to have your information passed onto ‘The producer of this production’ you are giving permission for your data to be passed on to the promoter of the event.
As a Malthouse Theatre patron or visitor, your details may be retained and used for the following purposes:
- contacting patrons in the event of a performance cancellation
- notifying changes of performance details
- replacement of lost tickets
- contact tracing
- distribution of tickets (e.g. box office collections)
- to obtain transaction authorisation and ensure lawful use of credit cards
- to market upcoming performances
- to market web services
- to make recommendations to patrons about other services that Malthouse Theatre offer that may be of interest
- for such further and other lawful uses in connection with Malthouse activities consistent with this Privacy Statement.
ONLINE COLLECTION AND USAGE
Malthouse Theatre will handle personal information collected online consistently with the way that it handles personal information collected offline. We will only use personal information collected online to provide you with our products and services (e.g. to process your online purchases), to contact you in the case of an event cancellation or a change of venue, and for Malthouse Theatre marketing or research purposes where you have specifically agreed for us to do so. Other matters specific to Malthouse Theatre handling of personal information online are set out below.
SECURITY AND STORAGE
While Malthouse Theatre endeavours to provide a secure Internet environment, users should note that there are inherent risks associated with transmission of information via the Internet.
We will take all reasonable steps to protect the personal information which we hold from misuse, loss, unauthorised access modification or disclosure. We will take reasonable steps to destroy or permanently de-identify personal information it if is no longer needed for any purpose as per relevant legislation. Malthouse Theatre will not store personal information overseas for any purpose.
The Department of Human Services Victoria requires Malthouse Theatre to keep records of each person who attends the premise for more than 15 minutes, for contact tracing purposes. We must record the first name and contact phone number, as well as the date and time a person attended the premises. Records will be kept electronically or physically and must be retained for 28 days. They are stored confidentially. After a period of 28 days these records will be destroyed.
Malthouse Theatre will not usually collect ‘sensitive information’ about customers. In the rare cases where the collection of sensitive information may be required in order to carry out our business or provide the required level of customer service, we undertake to keep that information secure, and not to use it for any secondary purpose without explicit consent.
Malthouse Theatre may record information such as proof of concession status for ticket purchase. We will take all reasonable steps to ensure that pension or concession numbers kept on a customer’s file are secure and used only for the purpose of verifying ticket concession status.
OPTION OF ANONYMITY
Malthouse Theatre does provide individuals with the option of not identifying themselves when entering into a transaction, when requested and where practicable.
ONLINE TRANSACTION SECURITY
Personal and financial information provided when you purchase your tickets is protected at all stages of the transaction. When information is deemed sensitive it is protected using SSL (Secure Socket Layers) encryption. This means that all transactions are transmitted and received using secure, highly encrypted mechanisms. Encryption of information between the customer and Malthouse Theatre is provided by an industry-approved cryptographic algorithm.
THIRD PARTY USAGE AND LINKS TO OTHER WEBSITES
Malthouse Theatre guarantees not to give personal information to any third party except for authorised use on our behalf. Examples of authorised use on our behalf include our ticketing agency (currently Ticketmaster) for ticketing purposes and our mailing house for mailing purposes.
Where tickets are purchased to a production at a venue other than The Malthouse, your information may be provided to the presenting venue. In such instances, all contact preferences recorded by Malthouse Theatre will be stipulated and adhered to by presenting venues.
The Malthouse Theatre website sometimes contains links to other third party websites. These links are generally provided as a customer service and are for your convenience and information. When you access a non-Malthouse Theatre website, please understand that Malthouse Theatre is not responsible for the privacy practices of that site or for the content or products available through that site.
DATA ACCESS AND CORRECTION
While this is subject to a number of exceptions we will generally provide an individual with access to personal information held about that individual, upon request, as required under the relevant legislation.
If personal information held by us is shown not to be accurate, complete and up to date, we will take reasonable steps to correct those deficiencies. Where an applicant disagrees about whether the information is accurate, complete or up to date we will, on request, take reasonable steps to append to that information a statement that the disagreement exists. Commercially sensitive information may be withheld where it relates to a decision-making process.
If on any occasion access is denied, we will provide reasons for refusal. We will provide a mediation process for any access requests which are refused.
If you wish to access the personal information that we hold about you, please set out your request in writing, including your phone number, email address, and forward this to:
The Privacy Officer
113 Sturt St
Southbank VIC 3006
In the interests of protecting the privacy of individuals about whom we hold personal information, we will require that you verify your identity by enclosing a certified copy of a form of identification such as a current driver’s licence or passport with your written request (this will be returned to you after your identity has been verified).