This document sets out the principles that the St Vincent de Paul Society National Council of Australia Incorporated (ABN 50 748 098 845) (the Society or we, us, our) adopts in relation to the protection and handling of personal information.
As a major Australian charity, the Society is committed to protecting your personal information, and does so in accordance with the Australian Privacy Principles, which are set out in Schedule 1 of the Privacy Act 1988 (Cth), and any other applicable state or territory legislation.
NOTE: This Policy does not apply to the personal information of employees of the Society – if you are an employee, please contact our human resources team for more information about your privacy.
Personal information means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not, and whether the information or opinion is recorded in a material form or not.
Sensitive information is a type of personal information and includes health information, genetics, race, political opinion or membership, religion, philosophical beliefs, union membership, sexual preference and criminal record.
Health information includes information about physical or mental health or a disability an individual has had at any time, an individual’s express wishes about future provision of health services to him or her, any health service that has been or is to be provided to an individual, any personal information collected to provide or in providing a health service, information collected in connection with a donation or intended donation of body parts, organs or body substances, genetic information that is or could be predictive of health at any time of the individual or a relative of the individual and healthcare identifiers.
In certain circumstances, we may collect personal information about you, for example when you contact us, apply for a job or volunteer position, make a donation, use our services or join our mailing list. The type of information we collect may include (but is not limited to):
Where we collect sensitive information from you, including health information, we will do so only with your consent, where you provide such information voluntarily or where otherwise authorised by law. You may withdraw your consent for the Society to retain this information at any time.
From time to time, we may also receive unsolicited information, being information that we have not taken active steps to collect. Examples include misdirected mail, unsolicited employment applications and promotional flyers containing personal information.
When we receive such information, we will decide within a reasonable period whether we could have collected it pursuant to the requirements in the APP. If we determine that we could not have collected the information, we will destroy or de-identify it as soon as practicable. Alternatively, if we determine that we could not have collected the information and wish to retain it, we will deal with this information in accordance with our obligations under the APP.
The primary purposes for which we collect, use and disclose personal information are to:
We may also collect, use and disclose personal information in connection with lawful information requests from courts, government agencies and lawyers and in connection with suspected fraud, misconduct or unlawful activity.
The Society handles personal information electronically and in hard copy form, both at our own premises and with the assistance of our service providers. In either case, a range of measures are implemented to protect the security of that personal information. We also take reasonable steps to destroy or permanently de-identify personal information where it is no longer needed for a permitted purpose.
The Association directly handles personal information electronically and in hard copy form, with data secured either at National Council premises or remotely.
The Association may contract third parties to conduct its primary purpose and in doing so, they may collect personal information through software or external software and save personal information at physical premises or off site. In all instances, a range of measures are implemented to protect the security of that personal information. The Association takes reasonable steps to destroy or de-identify personal information where it is no longer needed for a permitted purpose.
Measures include retaining electronic records in a database that requires a two-factor authentication process to logon. Hard copies of personal information are stored securely.
If an individual has any queries or concerns about the personal information that may be stored or they wish to access or correct any of the personal information that may be held about them, they can make a request using the details below.
The Association will always need to verify an individual’s identity before a response can be prepared.
When making an access or correction request, individuals are asked to provide details of the particular information being sought, to assist in locating the information.
The Association will deal with complaints relating to privacy issues in accordance with National Council’s Complaints Management Policy.
The Society takes privacy concerns very seriously. Where an individual expresses any concerns that National Council or the Association has interfered with their privacy, the Association will respond to let them know who will be handling their complaint and when they can expect a further response (generally within 30 days after a complaint has been received and acknowledged).
Contact: Privacy Officer
Post: PO Box 243, Deakin West ACT 2600
Domestic: (02) 6202 1200
International: +61 2 6202 1200
For information about privacy generally, or if an individual has any concerns about how the Association has resolved a complaint regarding their personal information to their satisfaction, individuals can contact the Office of the Australian Information Commissioner:
Post: GPO Box 5218, Sydney NSW 2001
Privacy Hotline: 1300 363 992
National Council will publish and update this Policy on its website (www.vinnies.org.au) and will make available a copy of the policy on request.