RMHC GWS : RMHC GWS Privacy Policy

This Privacy Policy applies to all information collected by Ronald McDonald House Charities Greater Western Sydney (RMHC GWS).

RMHC GWS recognises the importance of protecting your privacy. We are bound by the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth) and the Health Privacy Principles in the Health Records and Information Privacy Act 2002 (NSW). This privacy policy tells you what information we collect and why, what we do with it, and how you can view, correct or change the personal information we hold about you.

How we collect your personal information
We will collect and hold your personal information (any information about you by which you are reasonably identifiable) in a fair and lawful manner. Where it is reasonably practical, we will collect your personal information directly from you.
We may collect your personal information through some of the following means:
a) When you sign up for our email list;
b) When you make an inquiry through the Website or otherwise contact us via telephone, facsimile, social media or in writing;
c) When administering our services; and
d) As otherwise required to manage our business.

What types of information do we collect?
The types of personal information we collect can include your name, postal address, contact details, device ID, page views, cookies, website traffic, billing details, working with children checks and employment information (if applicable).
We may also collect and hold sensitive health information about you if you obtain a service from us, including your medical history, past and future medical treatments and any other health information you provide to our staff. We only collect sensitive health information about you with your consent, or otherwise in accordance with the Privacy Act.
If you are engaged by us to carry out tutoring services, we may collect additional personal information about you, including relevant qualifications and police checks.
Where you do not wish to provide us with your personal information, we may not be able to provide you with the requested services.

Our purposes for handling your personal information
We collect, hold, use and disclose personal information to:
a) offer and provide you with our services;
b) invite donations;
c) manage and administer our services, including account keeping procedures;
d) manage and securely protect our facilities;
e) send you email updates (noting we will only send you the kinds of information you have requested);
f) comply with our legal and regulatory obligations;
g) consider your application for employment (if applicable); and
h) otherwise manage our business.

Disclosure of personal information
We won't disclose your personal information to any third parties except where considered relevant and reasonably necessary, for example, to process a donation, communicate with you, comply with our legal obligations and manage our business.
We will not use or disclose your personal information for any other purpose unless you have consented to that use or disclosure.

Protection of personal information
We will hold personal information as either secure physical records, electronically on our intranet system and/or in cloud storage that is controlled by us.
We maintain appropriate physical, procedural and technical security at our offices and information storage facilities so as to prevent any loss, misuse, unauthorised access, disclosure or modification of personal information. This also applies to disposal of personal information.
We further protect personal information by restricting access only to those within our organisation who need access to the personal information do their job.
We will destroy or de-identify personal information once it is no longer needed for a valid purpose or required to be kept by law.

Overseas transfer of personal information
As of the date of this Privacy Policy, we will not disclose your personal information to overseas recipients.
If in future we do propose to disclose personal information overseas, we will do so in compliance with the requirements of the Privacy Act. We will, where practicable, advise you of the countries in which any overseas recipients are likely to be located.
If you do not want us to disclose your information to overseas recipients, please let us know.
From time to time we may engage an overseas recipient to provide services to us, such as cloud-based storage solutions. The use of overseas service providers to store personal information will not involve a disclosure of personal information to that overseas provider.

Mandatory Data Breach Notifications
In some circumstances we may be required to notify you and the Office of the Australian Information Commissioner if there has been a data breach and:
(a) we suspect that the data breach relates to your personal information,
(b) there is a real risk of serious harm to you as a result of the breach; and
(c) we cannot take remedial steps to reduce the risk of serious harm.
If this occurs we will take all reasonable steps to notify you as soon as possible.

Contact us
You have the option to opt-in or opt-out of communications from us at any time. If you are receiving communications from us that you no longer wish to receive, please contact the RMHC GWS Fundraising Manager at supportinggws@rmhc.org.au or by phone on (02) 9806 7111.
You may also contact the RMHC GWS Fundraising Manager at supportinggws@rmhc.org.au or by phone on (02) 9806 7111 to request access to the personal information we hold about you and/or to make corrections to that information, at any time. We may require you to complete a form if you want personal information released to you.
If you have any questions about this Privacy Policy, please contact the RMHC GWS Fundraising Manager at supportinggws@rmhc.org.au or by phone on (02) 9806 7111.
If you wish to make a complaint, please contact the RMHC GWS Fundraising Manager at supportinggws@rmhc.org.au or by phone on (02) 9806 7111. We take all complaints seriously, and will respond to your complaint within a reasonable period. If you are dissatisfied with the handling of your complaint, you may contact the Office of the Australian Information Commissioner:

Office of the Australian Information Commissioner
GPO Box 5218
Sydney NSW 2001
Telephone: 1300 363 992
Email: enquiries@oaic.gov.au

We reserve the right to amend this Privacy Policy at any time.

The last update to this document was October 2019.