Collection

We will, by fair and lawful means, collect only sufficient personal and sensitive information to carry out our business activities and functions. Collection of personal information from sources other than that of the person concerned will be with the consent of the individual.

Use and Disclosure

We will not use or disclose personal information other than for the primary purpose for which it was collected (and except when required by law) without the documented consent of the individual concerned. Any disclosures required by law will only be made after consultation with the Privacy Officer and will be appropriately recorded.

Data Quality

We will take reasonable steps to ensure that any personal information that we collect is accurate, complete and up to date.

Data Security

We will take reasonable steps to protect the personal information we hold from misuse and loss, unauthorised access, modification or disclosure. Furthermore, we will take reasonable steps to destroy or permanently de-identify personal information which we no longer require to carry out our business activities and functions.

Openness

We will make this policy document available to any person who asks for it. Upon request, we will let an individual know what personal information of theirs we hold and how we generally collect, hold, use and disclose that information.

Access and Correction

If any person gives us notice, we will provide the individual with access to their stored personal information, provided that the reason for the request is reasonable and conforms with the requirements specified under the Act. However, where there is information we have produced in connection with a commercially sensitive decision making process, we may give the person an explanation for the decision rather than direct access to the information. In the case of restricted access (as provided for in the Act), we will consider the use of mutually agreed intermediaries to allow sufficient access to meet the needs of both parties. We will not charge for access unless it involves a cost considered by us to be material. Based on verifiable data, we undertake to correct personal information so that it is accurate, complete and up to date. In the case of disagreement, we will, on request, attach the concerned person's statement claiming that the personal information is not accurate. We will always provide (and record) reasons for denial of access or refusal to correct personal information.

Unique Identifiers

We will not use the identifiers for persons used by government, other agencies or service providers.

Anonymity

Wherever it is lawful and practicable, we will give people the option of not identifying themselves when entering transactions with us.

Transborder Data Flows

We will only transfer personal information to another party only for the benefit of the individual. We will always endeavor to obtain the consent of the person concerned and will take reasonable steps to ensure that the information will not be held, used or disclosed by the recipient inconsistently with the Australian Privacy Principles.

Sensitive Information

We will not collect sensitive information about an individual unless the individual has consented to the collection of the information and the collection is reasonably necessary for one or more of our functions or activities.