1. Our commitment to privacy
Your privacy is a top priority for us.
When dealing with your personal information we observe our obligations under the Privacy Act 1988 (Cth) and comply with the Australian Privacy Principles, as well other relevant State legislation.
This policy sets out how we will collect, use, store, disclose and de-identify your personal information.
2. The types of information we collect
The types of personal information we collect include:
• contact details (name, address, telephone numbers, email, etc);
• employment history;
• complaint details;
• donation history; and
• credit card and/or bank account details.
The types of sensitive information we collect include records of communication between us, which may include from time to time, information you provide us or we collect from others. This includes, but is not limited to, the following types of information:
• professional and practice information;
• health information;
• racial or ethnic origin;
• personal financial information;
• personal credit card data; and
• any idiosyncratic or personal formation we obtain from you or others about you.
3. Why we collect private information about you
Arthritis & Osteoporosis New South Wales (AONSW) is a not-for-profit organisation that aims to support and provide assistance to all people affected by arthritis, osteoporosis and other musculoskeletal conditions. AONSW aims to improve the quality of life for those living with arthritis osteoporosis and other musculoskeletal conditions by embarking on projects to:
• Provide support, advice and information for people with arthritis or other musculoskeletal conditions and their families;
• Enable people to develop self-management skills;
• Promote community awareness of the issues associated with arthritis and other musculoskeletal conditions;
• Work with health professionals to improve management of arthritis and early diagnosis;
• Provide seminars and community programs for the community and health professionals; and
• Support research into the causes and treatment of arthritis and other musculoskeletal conditions.
We collect information about people so as to allow us to communicate with them, introduce them to our organisation and inform them of the work we do.
We do not use the information in any way other than in the furtherance of our objects and purposes.
We might also use your information for the following purposes:
• for the immediate reason for which you have provided it to us (for example, to enable us to process your request, payment, registration, subscription, etc);
• to maintain contact with you about our work, to report to you about our work, or to encourage you to learn about what we do; and
• any other purpose directly related to our work and for which you have provided consent (where it is reasonably required by law).
We don’t rent, sell or exchange your information. The types of organisations to whom we normally disclose your personal information to include our offsite mailing house.
We take reasonable steps to ensure that these organisations are bound by confidentiality and privacy obligations when handling your personal information.
If you don’t want your personal information disclosed to another organisation, please let us know either at the time we collect your information or any later time.
Sometimes we may be legally required to disclose your information, for example, to government departments.
We may also sometimes share non-personal, non-sensitive and de-identified information with research organisations.
4. How we collect your information
We may collect information from you either directly or from third parties. Information we collect from third parties may be by formal or informal means.
Where we collect information from third parties and it is not personal information that is contained in a Commonwealth record, we will take reasonable steps to destroy or de-identify the information as required by law.
We collect personal information about supporters, donors, volunteers, employees, contractors and visitors to our events. We collect your information in the following ways:
• face to face contact;
• electronically including through our website and online surveys;
• via social media messages or conversation;
• during phone calls;
• voice or image recordings;
• whilst delivering and administering services at our facilities; and
• from forms, coupons and other correspondence (both in writing and electronically).
5. How we use your information
We only use your personal and sensitive information for the reason we collect it as set out above and for the purpose(s) for which it was collected, or as otherwise permitted by law.
We will not disclose the above information that we collect to affiliates or third parties without your consent.
6. Accessing and correcting your personal information
You can access your information by asking us. Occasionally, we may need to refuse your request to access information, for example, where granting you access would infringe someone else’s privacy.
When you request access, we will ask you to provide some form of identification so that we can ensure that you are the person to whom the information relates.
In some cases, we may also ask you to pay a reasonable fee to cover the cost of access.
We will aim to respond to you within 28 days of receiving your request.
If we’re not able to help with your request, you will receive a written explanation as to why.
7. Complaints about a breach of your privacy
If you are concerned about how we have collected or managed your personal information we request you follow the procedure set out below.
1. Contact us on 02 9857 3300 or firstname.lastname@example.org and ask to speak to our Privacy Officer.
2. Download and complete the Complaints Form.
3. Submit your completed Complaints Form to email@example.com or send it to Privacy Officer, Arthritis & Osteoporosis NSW, Locked Bag 2216, North Ryde NSW 1670. In order to effectively address your complaint, we may request further information from you about your complaint and the reasons behind it.
4. After we receive all the information we need from you, allow us approximately 28 days to address your complaint.
If you’re not satisfied with how we have handled your complaint you can also contact the Office of the Australian Information Commissioner (OAIC) on http://www.oaic.gov.au/.
The OAIC is a government body independent of us. It has the power to investigate complaints about possible interference with your privacy.
8. Securing your information
We take reasonable steps to ensure the security of personal and sensitive information we hold and to protect it against loss, misuse or unauthorised access, destruction, use, modification or disclosure.
Our IT systems are password protected and comply with applicable security standards.
Only authorised personnel are permitted to access these details.
It is our policy to:
• permanently de-identify personal information where reasonable and possible; and
• destroy personal information once there is no longer a legal or business need for us to retain it.
It is your right to be dealt with anonymously, provided that is it lawful and practicable.
We will try to accommodate a request for anonymity wherever possible, however we note that in some circumstances, this may prevent us from practically and effectively communicating with you.
If this is the case we will notify you.
10. Health information
As part of our services, we may collect health information (such as your medical history to determine your eligibility to participate in certain initiatives).
When collecting health information from you, we will obtain your consent to such collection and explain how the information will be used and disclosed.
If health information is collected from a third party (such as from your doctor), we will inform you that this information has been collected and will explain how this information will be used and disclosed.
We will not use health information beyond the consent provided by you, unless your further consent is obtained or in accordance with one of the exceptions under the Privacy Act or in accordance with another applicable law.
If we use your health information for research or statistical purposes, it will be de-identified if practicable to do so.
11. Cookies and links to other websites
When you visit this website a record of your visit is logged. The following data is supplied by your browser:
• Your IP address and/or domain name;
• Your operating system (type of browser and platform);
• The date, time and length of your visit to the website; and
• The resources you accessed and the documents you downloaded.
This information is used to compile statistical information about the use of our website. It is not used for any other purpose. If you do not want ‘cookies’ to be used please adjust your browser settings to disable them.
Links to other websites
Our website may contain links to third party websites, and third party websites may also have links to our website.
We encourage you to read the privacy policies of any website you link to from our website.