Privacy Statement

Procedures Version 0.1
Date of Approval 10 November 2017
Approved By Finance Audit and Risk Management (FARM) Committee

1. RESPONSIBILITIES 

Travellers Aid Australia acknowledges its responsibilities to respect the importance of privacy and  confidentiality as an individual right. Travellers Aid collects and stores personal information and  or sensitive information from its clients, staff, customers, board, volunteers, students and the  broader community to provide appropriate and responsive service delivery. This Privacy  Statement has been developed to pursue the highest standard in the protection and preservation  of privacy and confidentiality. 

2. DEFINITIONS 

2.1. What is Personal Information? 

2.1.1. Personal information is information or an opinion, whether it is true or not, about an  individual whose identify is apparent, or can be reasonably ascertained, from that  information or opinion. 

2.1.2. For the purposes of this Privacy Statement, a reference to personal information  should be read as including sensitive and health information, unless otherwise  specified. 

2.2. What Is Sensitive Information? 

2.2.1. Sensitive information is a subset of personal information which is afforded a higher  level of protection under the Australian Privacy Principles (APPs). This includes  information which relates to an individual’s race or ethnic origin, political opinions  or memberships of a political association, philosophical beliefs, religious beliefs or  affiliations, membership of a professional or trade association or union, sexual  preferences or practices, criminal record or health information about an individual. 

2.2.2. Our collection, use and disclosure of personal information, including sensitive  information, will comply with the APPs.

2.3. What is Health Information? 

Health information is personal information that is also information or an opinion about the  physical, mental or psychological health of an individual, a disability of an individual, an  individual’s expressed wishes for the future provision of their healthcare, or a health service  provided to an individual. 

2.4. Travellers Aid Privacy Statement 

This Privacy Statement, and Travellers Aid’s internal privacy procedures, have been  prepared on the basis that Travellers Aid is a Health Service Provider as defined in the  Health Records Act 2001. 

3. PROCEDURES 

3.1. Overview 

3.1.1. Travellers Aid complies with the Australian Privacy Principles (APPs), Information  Privacy Principles (IPPs) and Health Privacy Principles (HPPs). 

3.1.2. Travellers Aid is committed to protecting personal information in accordance with  these laws. 

3.1.3. This Privacy Statement sets out how we manage your personal information,  including sensitive and health information. It describes the types of information we  collect and hold and why we do so, how to access and correct information, and  how to make a privacy complaint. 

3.2. What Personal Information Do We Collect and Hold? We may collect the following types of personal information: 

3.2.1. Name, address, age or birth date, gender, race, telephone number, email address,  details of next of kin/responsible person, physical abilities, health information,  details of health care professionals, social circumstances information, details of  your profession, occupation or job title. 

3.2.2. Details of services you have received from us or which you have enquired about,  together with any additional information necessary to deliver those services and to  respond to your enquiries, for example details of your medication and care needs. 

3.2.3. Any additional information relating to you that you provide to us directly or  indirectly through use of our website. 

3.2.4. Information you provide to us through our service centres, customer surveys or  visits by our representatives from time to time. 

3.2.5. We may also collect some information that is not personal information because it  does not identify you or anyone else. For example, we may collect anonymous  answers to surveys. 

3.2.6. For job applicants, employees or volunteers, we may collect details about  employment history, qualifications, resumes, references, banking details, fitness  for work or other such documents. 

3.3. How Do We Collect Your Personal Information? 

We collect your personal information directly from you unless it is unreasonable or  impracticable to do so. When collecting personal information from you, we may collect in  ways including: 

3.3.1. During conversations between you and our representatives. 

3.3.2. When you complete an application. 

3.3.3. We may also collect personal information from third parties who provide services  to you, health care professionals and organisations such as law enforcement  agencies and other government departments and agencies. 

3.3.4. Travellers Aid will only collect sensitive information and health information about  you with your consent.

3.4. Information Given in Confidence to Travellers Aid 

3.4.1. On occasion Travellers Aid may receive personal information about an individual,  from someone other than the individual, with the request that the information be  kept confidential. 

3.4.2. Travellers Aid will only collect health information about an individual with their  consent. Should the individual consent to Travellers Aid receiving confidential  information about the individual from a person other than the individual, in these  circumstances Travellers Aid will: 

3.4.2.1. Confirm that the information is to be kept confidential; 

3.4.2.2. Record the information only if it is relevant to the provision of health  services to, or the care of, the individual; 

3.4.2.3. Take reasonable steps to ensure that the information is accurate and not  misleading; and 

3.4.2.4. Take reasonable steps to record that the information is given in  confidence and is to remain confidential; 

3.4.3. Travellers Aid will take reasonable steps to ensure that the person giving the  information to Travellers Aid in confidence is aware of the Privacy Statement. 3.5. What Happens If We Can’t Collect Your Personal Information? If you do not provide us with the personal information described above, some or all of the  following may happen: 

3.5.1. We may not be able to provide the requested services or functions to you, either to  the same standard or at all. 

3.5.2. We may not be able to provide you with information about functions and services  that you may want, including information about special activities or promotions. 3.6. For What Purposes, Do We Collect, Hold, Use and Disclose Your  Personal Information? 

We collect, hold, use and disclose your personal information for the following purposes: 3.6.1. To provide quality functions and services to you. 

3.6.2. To provide best possible quality of customer service. 

3.6.3. To answer enquiries and provide information or advice about existing and new  functions or services. 

3.6.4. To send communications requested by you. 

3.6.5. To update our records and keep your contact details up to date. 

3.6.6. To comply with relevant laws and legislation. 

3.6.7. To meet government funding requirements. 

3.6.8. Your personal information will not be shared, sold, rented or disclosed other than  as described in our Privacy Policy, Privacy Procedures and Privacy Statement  documents. 

3.7. To Whom May We Disclose Your Information 

For the purposes of providing quality services to you, there will be times when Travellers  Aid will need to disclose your personal information to third parties, this may include: 3.7.1. Contractors or service providers for the purposes of operation of our organisation,  

fulfilling requests by you and to otherwise provide functions and services to you. 3.7.2. Health care providers and your representatives including your guardian and/or  family. 

3.7.3. The use and disclosure of personal information that meets the criteria of “Permitted  General Situation” and/or “Permitted Health Situation” (as a condition of govern ment contractual agreement). A written note of the use/disclosure is to occur.  (Refer to Section 5–References for further detail on relevant legislative measures). 

3.7.4. Suppliers and other third parties with whom we have commercial relationships, for  business, marketing, and related purposes. 

3.7.5. Any organisation for any authorised purpose with your express consent.

3.7.6. The law also allows some uses without consent, such as law enforcement  purposes and to protect safety. 

3.7.7. Travellers Aid is conscious of its obligations regarding use and disclose of  personal information. Travellers Aid will only use and disclose personal  

information in a manner which is consistent with its legislative obligations. 

3.8. Data Retention 

3.8.1. Travellers Aid will take reasonable steps to protect the health information it holds  from misuse and loss and from unauthorised access, modification or disclosure. 3.8.2. Travellers Aid will not delete health information relating to an individual even it if is  later found or claimed to be inaccurate unless: 

3.8.2.1. The deletion is permitted, authorised or required by the regulations or  any other law; or 

3.8.2.2. The deletion is not contrary to the regulations or any law and occurs, on  the later date of: 

3.8.2.2.1. In the case of health information collected while the  

individual was a child, after the individual attains the age of  

25 years; or 

3.8.2.2.2. In any case, more than 7 years after the last occasion on  

which a health service provided to the individual by the  

provider. 

3.9. Direct Marketing Materials 

3.9.1. Travellers Aid may, from time to time, use your personal information to provide you  with current information about our services, offers you may find of interest, 

changes to our organisation, or new services being offered by Travellers Aid, or  any company with whom we are associated. 

3.9.2. These communications may be sent in various forms, generally by mail, in  accordance with applicable marketing laws. You may at any time opt-out of  receiving such information by advising us in writing or telephoning. 

3.9.3. We do not provide your personal information to other organisations for the  purposes of direct marketing. 

3.10. Updating Your Personal Information 

It is important to Travellers Aid that the personal information we hold about you is accurate  and up to date. During the course of our relationship with you we may ask you to inform us  if any of your personal information has changed. While we take care to ensure that your  personal information that we collect, use and disclose is correct and up to date, we may ask  that you: 

3.10.1. Advise Travellers Aid if you know of any errors in your personal information. 3.10.2. Keep Travellers Aid informed of any changes to your personal information. 3.11. How Can You Access and Correct Your Personal Information? 3.11.1. You may request access to any personal information Travellers Aid holds about  you at any time by contacting us. 

3.11.2. Where we hold information that you are entitled to access, we will try to provide  you with suitable means of accessing it (e.g. by mailing or emailing it to you). We  may charge you a fee to cover our administrative and other reasonable costs in  providing the information to you. We will not charge for simply making the request  and will not charge for making any corrections to your personal information. 

3.11.3. There may be instances where we are not required to provide you with access to  your personal information. For example, if it interferes with the privacy of others, if  the information relates to existing or anticipated legal proceedings, if your request  is vexatious, if the information is subject to confidentiality, or another permissible  exception applies. An explanation will be provided to you in writing if we deny you  access to your personal information.

3.11.4. If you believe that personal information Travellers Aid holds about you is incorrect,  incomplete or inaccurate, then you may request us to correct it. 

3.11.5. If appropriate we will correct the personal information at the time of the request  otherwise, we will provide an initial response to you within seven days of receiving  your request. Where reasonable, and after our investigation, we will provide you  with details about whether we have corrected the personal information within 30  days. Travellers Aid may need to consult with other entities as part of our  

investigation. If we refuse to correct personal information we will provide you with  written reasons for not correcting the information. 

3.12. Making Information Available to Another Health Service Provider 3.12.1. You may: 

3.12.1.1. Request that Travellers Aid provide health information relating to you,  which is held by us, to another health service provider; 

3.12.1.2. Authorise another health service provider to request health information  relating to you which is held by us. 

3.12.2. In such circumstances Travellers Aid, upon payment of a prescribed fee (if  applicable) and subject to the terms of this Privacy Statement, will provide a copy  or written summary of that health information to that other health service provider  as soon as practicable. 

3.13. What Is The Process For Complaining About A Breach of Privacy? 3.13.1. If you believe that your privacy has been breached, please contact us and provide  details of the incident so that we can investigate it. Our procedure for investigating  and dealing with privacy breaches will be undertaken by the Chief Executive  Officer of Travellers Aid who will initiate the course of action to examine if a breach  has occurred. 

3.13.2. Where Travellers Aid’s Privacy Policy, Privacy Procedures or Privacy Statement is  inconsistent with Travellers Aid’s legislative obligations, the legislative obligations  will prevail. Where Travellers Aid’s Privacy Policy, Privacy Procedures or Privacy  Statement is silent on a matter, Travellers Aid will look to legislation for guidance  as to its obligations. 

3.14. Do We Disclose Your Personal Information To Anyone Outside  Australia or Victoria? 

3.14.1. Travellers Aid does not itself store or process any of your personal information  outside of Victoria. 

3.14.2. Your health information will only be transferred outside Victoria if: 

3.14.2.1. You consent; 

3.14.2.2. The transfer is for your benefit and it is impracticable to obtain your  consent to the transfer and if it were practicable to obtain your consent,  

you would likely give your consent to the transfer; 

3.14.2.3. The transfer is authorised or required by any other law. 

3.14.3. Our cloud storage providers and IT servers are located within Victoria. 3.14.4. Some of our third-party providers, for example cloud storage providers, may store  data outside of Victoria. However, all of these providers are contractually  required to comply with the HPPs, IPPs and APPs. 

3.14.5. If we transfer health information outside of Victoria, we will take reasonable steps  to ensure that the recipient of the information does not hold, use or disclose the  information inconsistently with the HPPs and APPs. 

3.15. Using Government Related Identifiers 

3.15.1. If Travellers Aid collects government identifiers, such as Medicare, Veterans  Affairs, Centrelink details we do not use or disclose this information other than  authorised by law. 

3.15.2. Travellers Aid will never use a government identifier in order to identify you.

3.16. Support Without Identifying You 

3.16.1. In most circumstances, it will be necessary for TAA to identify you in order to  successfully provide services and functions to benefit you. 

3.16.2. However, where it is lawful and practicable to do so, TAA will offer you the  opportunity of using our services without providing us with personal information, for  example if you make general enquiries about current events, services offered,  promotions etc. 

3.17. Security 

3.17.1. Travellers Aid takes reasonable steps to protect your personal information by  storing it in a secure environment and that it remains private and confidential within  our organisation at all times. 

3.17.2. We may store your information in electronic and paper form and will take  reasonable steps to protect any personal information from misuse, loss and  unauthorised access, modification or disclosure. 

3.18. Further Information 

You may request further information about the way we manage your personal information  by contacting us. 

4. RELATED DOCUMENTS 

⬧ Travellers Aid Privacy Policy 

⬧ Travellers Aid Privacy Procedures 

⬧ Travellers Aid Privacy Work Instructions 

⬧ Travellers Aid Information Technology Policy 

⬧ Travellers Aid Information Technology Procedures. 

5. REFERENCES 

⬧ Privacy Act 1988 (Commonwealth) 

⬧ Privacy and Data Protection Act 2014 (Victoria) 

⬧ Health Records Act 2001 (Victoria) 

⬧ Office of the Australian Information Commissioner APP Guidelines 

⬧ Justice Connect Privacy Compliance Manual 

⬧ Justice Connect Privacy Guide – Not-For-Profit Law Guide 

⬧ Website: www.oiac.gov.au 

⬧ Website: www.legislation.vic.gov.au 

⬧ Website: www.comlaw.gov.au 

⬧ Website: www.nfplaw.org.au 

⬧ Website: www.cpdp.vic.gov.au 

6. AUTHORISATION 

Chief Executive Officer 
Travellers Aid Australia