Privacy policy

Personal information

This Privacy Policy concerns any personal information or sensitive information of yours which is provided to us.

Personal information is any information about an identified individual or an individual who is reasonably identifiable, whether the information is true or not and whether the information is recorded in a material form or not.

Sensitive information is any personal information about your racial or ethnic origin, political opinions, membership of a political association, religious beliefs or affiliations, philosophical beliefs, membership of a professional or trade association, membership of a trade union, sexual orientation or practices, criminal record, health, genetics, biometrics or biometric templates.

We are a health service provider and may collect health information and related information about clients. We may also collect health information about actual or prospective participants in our events that involve physical activity to assess their suitability to participate. We will collect, use or disclose sensitive information about you only as allowed by law, for example where we have received your consent to do so or the collection is required by law.

Your consent

By using this website or otherwise providing us directly, or through others, with your personal information, you agree with the terms of this Privacy Policy and consent to the collection, use, and disclosure of that information in accordance with this Privacy Policy, the Privacy Act 1988 (Cth) as amended (including the Australian Privacy Principles) (the Act) and other applicable privacy laws.

Passive information collection

As you navigate through this website, certain information can be passively collected (that is, gathered without you actively providing the information) through various technologies, such as cookies, internet tags or web beacons and navigational data collection.

This website may use and combine such passively collected anonymous information to provide better services to website visitors, customise the website based on your preferences, compile and analyse statistics and trends and otherwise administer and improve the website for your use. Such information is not combined with personally identifiable information collected elsewhere on the website unless you have consented.

Anonymity and pseudonymity

You have the option of not identifying yourself, or of using a pseudonym, when dealing with us in relation to a particular matter unless:

We are required or authorised by or under an Australian law, or a court/tribunal order, to deal with individuals who have identified themselves, or
It is impracticable for us to deal with individuals who have not identified themselves or who have used a pseudonym.

How we collect your personal information

We collect personal information that is necessary for our business activities and in order to provide and develop our services. We may do this in a number of ways, including:

Directly from you, when you provide it to us or our agents or contractors
Where the personal information is about a child or a person who does not have the requisite capacity, from their parent, guardian or carer
From publicly available resources
By analysing our own records of your use of our services and website
From third parties where you are transferred or referred to us for services that we provide
From third parties such as health professionals and organisations such as hospitals, or
From the National Disability Insurance Agency (NDIA) and other government agencies.

We also may collect your personal information when legally required to do so under laws.

What personal information do we collect and why?

The type of personal information we collect may include your name, age, date of birth, address, postcode, demographic information, contact details, telephone numbers, email address, information on how you use our services and programs and your preferences regarding our services and programs, health information, financial information (e.g. payment details of clients or donors), family information (e.g. emergency contacts, carers or guardians) or information provided to us by prospective employees who do not later become employees. If we are not provided with the personal information that we request, we may not be able to meet your request or provide our services or programs to you.

The personal information you provide us may be used for a number of purposes connected with our operations, which include to:

Contact you
Verify your identity
Manage our relationship with you
Facilitate provision of our services and programs to you
Address or respond to any requests from you
Inform you of existing and proposed services and programs which we provide
Better understand your needs in the area of support
Develop and improve the quality and scope of the services and programs we provide, and seek your feedback
Process any gifts or donations you make to us, seek your feedback to help better understand your connection to CPA and how best to communicate with you and to help refine our fundraising activities
Manage your participation in our volunteering, fundraising or research activities and programs
Manage your membership or corporate partnership with us
Manage our obligations with funding bodies as part of our funding arrangements
Provide you with updates on our research and how your gifts or donations are helping
Maintain databases and registers of people with cerebral palsy (such as the Australian Cerebral Palsy Register (ACPR)), or
For information provided to us by prospective employees, inform them of the availability of employment opportunities with us or assess their suitability for employment opportunities with us.

Your personal information may be used so that we, our wholly owned subsidiaries, agents and contractors can provide you with information about our services and programs, such as by way of direct mail, telemarketing, by email, SMS, MMS or digital communications, or to request your feedback for promotional purposes. You always have the right to opt out of receiving such information. You may exercise that right by contacting us as set out below.

We may also use your personal information for purposes related to those described above which would reasonably be expected by you.

We will not use your information for purposes other than those described above unless we have your consent or as permitted by law (including for law enforcement or public health and safety reasons).

Sharing your personal information

We may disclose your personal information in certain circumstances, such as where we are required or authorised by law or where you have consented to us doing so. We also may disclose your personal information to:

Others in accordance with a request made by you
Our related companies and business partners
Persons engaged in providing us with professional, business, technology and corporate services, when reasonably required, such as event registration, database management, data analytics, printing, mailing, data storage, banking, payment processing, auditing, accounting, legal, business consulting, marketing, research and technology services
Researchers to investigate the cause and prevention of cerebral palsy, or

Service providers to plan for the present and future service provision needs of people with cerebral palsy.

When making such a disclosure we will take reasonable steps to ensure that the recipient is bound by privacy obligations.

Unless you consent, we otherwise will not disclose your personal information to third parties.

Does my personal information leave Australia?

We will only send your personal information outside Australia:

If we are authorised to do so by law
For any of the purposes set out in this Privacy Policy (but only to parties that are subject to obligations in relation to personal information no less onerous than those in this Privacy Policy), or
If you have consented to us doing so.

In the course of our ordinary business operations we use technology that makes use of cloud infrastructure or servers that are located in the United States, and United Kingdom. Client Records are stored in Australia.

Access and correction

You may request access to any of the personal information we hold about you by contacting us as specified below. We reserve the right to charge a reasonable fee for the costs of retrieval and supply of any requested information.

We will take all reasonable steps to ensure that the personal information we collect, use or disclose is accurate, complete and up to date. To ensure your personal information is accurate, please notify us of any errors or changes to your personal information and we will take appropriate steps to update or correct such information in our possession.

Storage and security

We take all reasonable precautions to safeguard your information from loss, misuse, unauthorised access, modification, disclosure or destruction. We may store your files in electronic or hard copy form (on our premises or stored offsite in secure facilities). We implement a range of physical and electronic security measures to protect the personal information that we hold, including, depending on the circumstances, electronic access controls (such as login and password protection), premises security and network firewalls.

You should keep in mind that no internet transmission is ever completely secure or error-free. In particular, emails sent to or from this website may not be secure.

Links to other websites

This website may contain links or references to other websites to which this Privacy Policy may not apply. You should check their own privacy policies before providing your personal information.

Notifiable Data Breaches scheme

In the event of any loss or unauthorised access or disclosure of your personal information that is likely to result in serious harm to you, we will:

Investigate, and
Notify you and the Australian Information Commissioner as soon as practicable, in accordance with the Act.

Complaints

If you have any questions or concerns about our collection, use or disclosure of personal information, or if you believe we have not complied with this Privacy Policy or the Act, please contact us as set out below. Our Privacy Officer will investigate the complaint and determine whether a breach has occurred and what action, if any, to take.

We will take any privacy complaint seriously and will aim to resolve any such complaint in a timely and efficient manner, and our target response time is 30 days.

We expect our procedures will deal fairly and promptly with your complaint. However, if you remain dissatisfied, you can also make a formal complaint with the Office of the Australian Information Commissioner (which is the regulator responsible for privacy in Australia):

Office of the Australian Information Commissioner (OAIC)
Complaints must be made in writing

Phone: 1300 363 992

Director of Compliance
Office of the Australian
Information Commissioner
GPO Box 5218
Sydney NSW 2001

www.oaic.gov.au

How to contact us

For questions about access and corrections to personal information about you that we hold:

clients and families of clients, please contact your Client Relationship Manager
donors, please contact Donor Enquiries on 1300 136 140, and
others, please contact 1300 888 378.

If you believe we have not complied with this Privacy Policy or the Act and would like to make a complaint, please go to our Feedback page.

If you wish to exercise your right to opt out of receiving our marketing materials, or you have any questions or concerns about this Privacy Policy or our information practices (including whether and what type of health information we hold about you), please contact us at:

The Privacy Officer
Cerebral Palsy Alliance
PO Box 171, Forestville NSW 2087
Email: privacy@cerebralpalsy.org.au
Phone: 1300 888 378 (+61 2 9975 8000)

Changes to this Privacy Policy

Our Privacy Policy may change from time to time as updated on this website. Before providing us with personal information, please check this Policy on our website for any changes.

This Privacy Policy was last updated on 23 November 2022.