PRIVACY POLICY
This is the privacy policy of Yedza Care Pty Ltd ABN 46713945479. The purpose of this privacy policy is to provide information about how we deal with and manage personal information.
We are headquartered in Australia and for that reason this privacy policy is based on the requirements of the Privacy Act 1988 (Cth) (Privacy Act) and the Australian Privacy Principles (which exist within the Privacy Act).
This policy also ensures that we comply with the Convention on the Rights of Persons With Disabilities – Article 22 – Respect For Privacy, and, insofar as they relate to privacy, the National Standards for Disability Services.
Our obligations under the Privacy Act exist in respect of our dealings with “personal information” of “individuals”.
What is personal information?
Personal information is defined in the Privacy Act as: information or an opinion about an identified individual, or an individual who is reasonably identifiable: (a) whether the information or opinion is true or not; and (b) whether the information or opinion is recorded in a material form or not.
Why do we collect personal information?
We collect personal information where it is reasonably necessary for our functions or activities. Our functions and activities include:
Our primary services are:
Providing disability services to affected individuals including services relating to: accommodation and supported living respite services for people with disability community and social activities employing staff; and
Some common examples of personal information that we may collect include an individual’s name, contact details, and details of services that they obtain from us.
The Privacy Act recognises certain types of personal information as sensitive information. Examples of sensitive information about an individual include information about the individual’s:
- health;
- racial or ethnic origin;
- political opinions;
- religious beliefs or affiliations;
- sexual orientation or practices; and
- criminal record.
It is in the nature of the services we provide that we may collect sensitive information from our clients and other individuals with whom we deal. Any sensitive information which we do collect will either be collected with the consent of the relevant individual or as permitted by law.
How do we collect and keep personal information?
We receive personal information in different ways and through a number of different media including: via online sources (including email and other electronic communication channels, Facebook, Instagram, Twitter and other social media and technology platforms);
- by telephone;
- through face to face communications; and
- by hard copy correspondence and documentation.
We keep different types of records that include personal information. These include records stored electronically on databases, information stored in the cloud, and also hard copy files. The computer servers on which we store personal information are located in Australia and hosted by [insert]. Your personal information will be routed through, and stored on, those servers in the course of the services that we provide.
We take reasonable steps to protect personal information we hold from misuse, interference and loss, as well as unauthorised access, modification or disclosure.
When do we use or disclose or transfer personal information?
We may use or disclose personal information for other secondary purposes including the following:
where the individual has consented to the use or disclosure for the secondary purpose;
the use or disclosure is required or authorised under a particular law or a court or tribunal order; a permitted general or health situation exists as defined in the Privacy Act; or we reasonably believe that the use or disclosure of the personal information is reasonably necessary for one or more enforcement related activities conducted by, or on behalf of, an enforcement body.
We may disclose your personal information to third parties, such as our service providers (including IT services including cloud storage services, insurers, financial institutions, mailing houses), member organisations and other business partners, our professional advisers (including lawyers, accountants and auditors), and government, regulatory and law enforcement authorities.
We use the personal information that we collect for a variety of purposes related to the services that we provide. We only hold and process personal data when the law in your particular jurisdiction allows us to.
Security of your personal information.
We have put in place appropriate technical and organizational measures to help keep the personal information that we collect safe from unauthorized access or disclosure as required by law and in accordance with good industry practice.
We will react swiftly upon discovering or being advised of a security breach where your personal information is lost, stolen, accessed, used, disclosed, copied, modified, or disposed of by any unauthorised persons or in any unauthorised manner.
Retention of your personal information
We are legally obliged to retain our business records (some of which are, or contain, personal information) for up to 7 years. The end-point of that obligation as it applies to specific information depends on a range of factors, including when the record was created and/or updated. We will only retain your personal information for as long as is necessary for the purposes described in this policy or as long as we are legally required to do so, whichever is longer.
How can you access personal information relating to you that we hold?
You may request access to your personal information held by us by contacting our Privacy Officer (details below). We will provide access where we are required to do so under law. In other cases, we reserve our right not to provide access. We also reserve the right to recover our reasonable costs of providing you with access to your personal information held by us.
How to contact our Privacy Officer
Privacy Officer | Yedza Care Pty Ltd
137 Lower Washington Drive.
Bonnet Bay. NSW 2226, Australia
Email: Info@yedzacare.com.au