Privacy and Security

Ability WA ABN 79 057 702 959 (including our sub-brands Goodwill Engineering and Ability Containers for Change) respects and values the privacy of all information we handle about our Clients, Members, Donors and Volunteers by complying with the Privacy Amendment (Enhancing Privacy Protection) Act and its principles. We collect and securely store personal and sensitive information for the primary purpose of providing services for people with disability and their families/carers, including our duty of care obligations.

We will seek and obtain prior consent if any personal or sensitive information is disclosed for any other reason than the primary purpose for which it was collected.

Ability WA treats all confidential information we hold (even where it is not specifically covered by the Privacy Amendment Act) with the same level of care and security that applies to our obligations for personal and sensitive information we hold under the Privacy Amendment Act. Examples include the commercial information we collect and hold from our business customers and suppliers and donors.

Australian Privacy Principles

Ability WA is committed to ensuring that all personal/sensitive information we hold is handled in accordance with the 13 National Privacy Principles of the Privacy Amendment (Enhancing Privacy Protection) Act 2012.

The Australian Privacy Principles (APPs) are the base line privacy standards which Ability Centre complies with in relation to personal and sensitive information we hold.

Open & Transparent Management of Personal Information

Ability WA will only collect Personal Information where the information is necessary for Ability WA to perform one or more of its functions or activities. In this context, ‘collect’ means gather, acquire or obtain by any means, information in circumstances where the individual is identifiable or identified.

Ability WA collects Personal Information primarily to provide information and services to our Clients, donors and suppliers. Ability WA also collects and uses Personal Information for secondary purposes including:

• Information on products and services
• Accounting purposes
• Business planning and product/service development
• Raising much needed funds for the organisation.

Personal Information is defined as information or an opinion about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion. Common examples of Personal Information we collect and hold includes a Client’s full name, date of birth and home address.

Personal Information may be stored electronically, in hard-copy documents, spoken words and/or photographs.

How we collect your Personal Information

We collect your Personal Information when you provide it to Ability WA in a number of ways including but not limited to:

• through a call to our switchboard or an extension number
• a referral from a GP or other health professional
• by participating in one of Ability WA’s community fundraising and/or information events
• when you respond to our fundraising campaigns.

We may also collect your Personal Information in other ways, for example through the purchase of commercial lists, and from publicly available sources such as the telephone directory.

Personal Information

Ability WA will not provide your Personal Information to any other individuals or organisations without your prior consent except where required by law to do so or where that information is provided on a confidential basis to contractors who provide services, for example database management, printing and mailing for Ability Centre. In these cases, we ensure that our contractors are also bound by the National Privacy Principles to keep your Personal Information confidential.

Ability WA is very thankful to people who are willing to share their personal stories with others through media stories and in our newsletters. We will only use your Personal Information for publicity purposes or as stories in newsletters with your express written permission.

Ability WA will sometimes use third party service providers to conduct surveys and facilitate information collection and event registration.  Some of these service providers conduct all or part of their business overseas and so your Personal Information may be transferred overseas as a result. Ability WA conducts a due diligence process before entering into an agreement with these service providers and will take all reasonable steps to ensure that your information is not used in a manner inconsistent with the National Privacy Principles.

Use and Disclosure

Where Ability WA holds Personal Information about an individual, it will provide the individual with access to the information on request, in a form or manner suitable to the individual’s reasonable needs, except to the extent that:

1. providing access would pose a serious and imminent threat to the life or health of any individual; or

2. providing access would have an unreasonable impact upon the privacy of other individuals; or

3. the request for access is frivolous or vexatious; or

4. the information relates to existing legal dispute resolution proceedings between Ability WA and the individual, and the information would not be accessible by the process of discovery in those proceedings; or

5. providing access would reveal the intentions of Ability WA in relation to negotiations with the individual in such a way as to prejudice those negotiations; or

6. providing access would be unlawful; or

7. denying access is specifically authorised by law; or

8. providing access would be likely to prejudice an investigation of possible unlawful activity; or

9. providing access would be likely to prejudice:

        1. the prevention, detection, investigation, prosecution or punishment of

• criminal offences; or
• breaches of a law imposing a penalty or sanction.

        2. the enforcement of laws relating to the confiscation of the proceeds of crime;

        3. the protection of the public revenue;

        4. the prevention, detection, investigation or remedying of Seriously Improper Conduct; or

        5. preparation for, or conduct of, proceedings before any court, or tribunal, or implementation of its orders by or on behalf of an enforcement agency; or;

        6. an enforcement agency performing a lawful national security function asks Ability WA not to provide access on the basis that providing access would be likely to cause damage to the national security of Australia.

Where providing access would reveal evaluative information generated within Ability WA in connection with a commercially sensitive decision-making process, Ability WA may give the individual an explanation for the decision rather than direct access to the information.

If Ability WA has given an individual such an explanation and the individual believes that direct access to the evaluative information is necessary to provide a reasonable explanation of the reasons for the decision, Ability WA will, at the request of the individual, undertake a review of the decision. The review will be undertaken by personnel other than the original decision maker.

Wherever direct access by the individual is impractical or inappropriate, Ability WA and the individual should consider whether the use of mutually agreed intermediaries would allow sufficient access to meet the needs of both parties.

If Ability WA levies charges for providing access to Personal Information, those charges

1. will not be excessive; and

2. will not apply to lodging a request for access.

Ability WA will correct its records containing Personal Information as soon as is practicably possible, at the request of the individual concerned in accordance with the Privacy Act.

Ability WA will provide reasons for denial of access or correction.

Individuals wishing to lodge a request to access and/or correct their Personal Information should do so by contacting Ability WA on 1300 106 106.

Data Quality

Ability WA will take reasonable steps to make sure the Personal Information it collects, uses or discloses is accurate, complete and up-to-date as far as is practicable.

Opting out or modifying your information

If you want to change any information that you have previously given us, or if you want to opt out of future communications please contact us directly on 1300 106 106.

Data Security

Ability WA holds all Personal Information in secure databases, soft-copy lists, and in web hosted environments that are fire-walled. Ability WA creates hard copies from time to time for the purposes of marketing.

The purpose of such security is to protect all Personal Information from misuse, loss, unauthorised access, modification and/or disclosure.

Openness

Ability WA will have clearly expressed policies on its management of Personal Information and these will continue to be readily available.

Ability WA will take reasonable steps to let individuals know, generally, what sort of Personal Information it holds, for what purposes and how it collects, uses and discloses that information.

Identifiers

Ability WA will not use Government identifiers (e.g. Medicare numbers) as internal Client identifiers.

Anonymity

Wherever it is lawful and practicable, individuals will have the option of not identifying themselves when dealing with Ability WA.

Transferring Personal Information overseas

The Privacy Amendment Act has strict guidelines for the transfer of Personal Information outside of Australia. Ability WA generally does not send information overseas. If there is a situation where this may happen, we will not transfer your Personal Information overseas unless we have taken reasonable steps to ensure that the information which is being transferred will not be held, used or disclosed by the recipient of the information inconsistently with the Privacy Act. Transfer of information overseas would normally only occur for data processing purposes, for example third party payment facilitators may process their data off-shore.

Sensitive Information

Ability WA will not collect sensitive information about an individual unless: -

1. the individual has consented; or

2. the collection is required by law; or

3. the collection is necessary to prevent or lessen a serious and imminent threat to the life or health of any individual, where the individual whom the information concerns:

        1. is physically or legally incapable of giving consent to the collection; or

        2. physically cannot communicate consent to the collection

4. if the information is collected in the course of the activities of a non-profit organisation - the following conditions are satisfied :

        1. the information relates solely to members of the organisation or to individuals who have regular contact with it in connection with its activities;

        2. at or before the time of collecting the information, the organisation undertakes to the individual whom the information concerns that the organisation will not disclose the information without the individual's consent.

        3. the collection is necessary  for the establishment, exercise or defence of a legal or equitable claim.

Ability WA will collect health information about an individual only if:

1. the information is necessary to provide a health service to the individual

2. the information is collected:

        1. as required by law (other than this Act); or

        2. in accordance with rules established by competent health or medical bodies that deal with obligation of professional confidentiality which bind the organisation.

        3. the collection is necessary for :

           1. research relevant to public health or public safety;

           2. the compilation or analysis of statistics relevant to public health or public safety;

           3. the management, funding or monitoring of a health service; and

           4. the collection of information does not identify the individual or from which the individual's identity cannot reasonably be ascertained; or

           5. it is impracticable for the organisation to seek the individual's consent to the collection.

Website usage information and cookies

Cookies are used to provide Ability WA with information on the number of visitors and traffic patterns on our websites. This data is anonymous and does not allow Ability WA to identify users. Most web browsers are set to accept cookies. If a person does not wish to receive any cookies, the person may set their browser to refuse them. In some instances this may mean that the person will not be able to take full advantage of our web services.

Online Payment Security

Donations through Ability WA’s website are administered by our partner Every Day Hero. If you would like to see a copy of their privacy policy please click on the following link http://www.everydayhero.com.au/home/privacy_policy

Privacy Policy

For a copy of our Privacy Policy or any further information you may require, please contact Ability WA on 1300 106 106.

Complaints about Breaches of Privacy

If you believe that your personal and sensitive information has not been treated with privacy, please contact Ability WA on 1300 106 106.

Ability WA welcomes complaints as it provides feedback on our services and enables us to make service improvements. We will strive to resolve your complaint internally. If we are unable to resolve your complaint satisfactorily, you may request the Federal Privacy Commissioner to have your complaint investigated. For more information about how you may lodge a complaint with the Federal Privacy Commissioner, please contact the Commissioner's hotline service on 1300 363 992.