Privacy policy

This Privacy Policy is published on the CPA Website to meet the obligations of the Privacy Act 1988 (Cth).

This Privacy Policy is designed to tell you what will happen to the information you provide through this website or through any other form of communication with Cerebral Palsy Alliance (ABN 45 000 062 288). This Privacy Policy also applies to our wholly owned subsidiaries, or our agents or contractors. Please be sure to read this entire Privacy Policy before using this website or submitting personal information to us or our agents or contractors.

Personal information

This Privacy Policy applies to any personal information or sensitive information of yours which is provided to us.

Personal information is any information about an identified individual or an individual who is reasonably identifiable, whether the information is true or not and whether the information is recorded in a material form or not.

Sensitive information is any personal information about an individual’s racial or ethnic origin, political opinions or memberships, religious or philosophical beliefs, membership of a professional or trade association or union, sexual orientation or practices, criminal record, or information about health, genetics, biometrics or biometric templates.

As a health service provider, we may collect health information and related information about our clients. We may also collect health information about actual or prospective participants in events that involve physical activity to assess their suitability to participate.

We will only collect, use or disclose sensitive information about you as permitted or required by law.

Your consent

By using this website or otherwise providing your personal information to us (whether directly or through third parties) you acknowledge that you have read and understood the terms of this Privacy Policy and consent to the collection, use, and disclosure of your personal information in accordance with this Privacy Policy, the Privacy Act 1988 (Cth) as amended (including the Australian Privacy Principles) (the Act) and any other applicable privacy laws.

Anonymity and pseudonymity

Where lawful and practicable, you may choose not to identify yourself, or to use a pseudonym when dealing with us in relation to a particular matter. However, we may require you to identify yourself where required or authorised by law, or where it is impracticable for us to deal with you anonymously or under a pseudonym.

How we collect your personal information

We collect personal information that is reasonably necessary for our business activities and to provide, develop and improve our services. We may collect personal information:

directly from you when you provide it to us or our agents or contractors;

from your parent, guardian, carer or authorised representative where you are a child or otherwise unable to provide information yourself;

from publicly available sources;

from our own records of your use of our services and website;

from third parties where you are transferred or referred to us for services that we provide, including health professionals, hospitals and other service providers;

from the National Disability Insurance Agency (NDIA) and other government agencies; and

where collection is required or authorised by law.

What personal information do we collect and why?

We collect personal information that is reasonably necessary for our functions and activities, including to deliver our services and programs.

The types of personal information we collect may include:

identity and contact information, such as your name, date of birth, address, telephone number and email address;

demographic information;

information about your use of our services and programs;

health information;

financial information, including payment and donation details;

information about family members, carers, guardians or emergency contacts;

information relevant to volunteering, research, fundraising, membership or partnership activities; and

information provided by job applicants or prospective employees.

If you do not provide the personal information we request, we may be unable to provide you with our services or programs, respond to your enquiries, or otherwise meet your requests.

We may collect, hold, use and disclose your personal information to:

verify your identity and communicate with you;

manage our relationship with you;

provide, administer and improve our services and programs;

respond to any enquiries, feedback and complaints;

conduct research and maintain relevant databases and registers, including the Australian Cerebral Palsy Register (where applicable);

process donations, gifts, fundraising activities and related communications;

manage volunteering, membership or corporate partnership arrangements;

comply with funding, reporting, legal and regulatory obligations;

provide updates about our services, programs, research activities and the impact of donations; and

assess employment applications and notify applicants of employment opportunities.

We may use your personal information to send you information about our services, programs, events, fundraising activities and other initiatives by mail, telephone, email, SMS or other electronic means where permitted by law. You may opt out of receiving these communications at any time by contacting us as set out below or using the unsubscribe facility included in the communication.

We may also use your personal information for other purposes that are related to the purposes described above and that you would reasonably expect. We will not otherwise use or disclose your personal information without your consent, unless required or authorised by law.

Sharing your personal information

We may disclose your personal information where you have consented, where required or authorised by law, or where reasonably necessary for the purposes described in this Privacy Policy.

We may disclose your personal information to:

persons or organisations at your direction or as authorised by you;

our related companies and business partners;

service providers and contractors who assist us in delivering our services, including providers of information technology, data analytics, data storage, banking, payment processing, auditing, accounting, legal, consulting, marketing, communications, fundraising, event management, printing and mailing services;

social media and digital advertising platforms (such as Google, Meta or similar providers) to help us deliver, personalise and measure our advertising, fundraising and community engagement campaigns and activities, including matching information we hold with information held by those platforms where permitted by law;

recruit service providers, including providers of candidate screening, interviewing, reference checking, qualification verification, background checking and other recruitment-related services;

researchers undertaking research into the causes, prevention and treatment of cerebral palsy; and

organisations and service providers involved in planning, funding or delivering services for people with cerebral palsy.

When making such a disclosure, we take reasonable steps to ensure they handle personal information in accordance with applicable privacy laws and appropriate confidentiality obligations.

Does your personal information leave Australia?

We may disclose or transfer personal information outside Australia where:

you have consented;

the disclosure is required or authorised by law; or

the disclosure is reasonably necessary for any of the purposes set out in this Privacy Policy, including where we engage service providers that store or process personal information on our behalf.

In the course of our operations, personal information may be stored or processed using cloud infrastructure or service providers located in Australia and overseas, including in jurisdictions such as the United States, Ireland and the United Kingdom.

We take reasonable steps to ensure the overseas recipients handle personal information in a manner consistent with the Act.

Client Records are stored in Australia.

Access and correction

You may request access to, or correction of, the personal information we hold about you by contacting us as specified below. We reserve the right to charge a reasonable fee for the costs of retrieval and supply of any requested information.

We will take all reasonable steps to ensure that the personal information we collect, use or disclose is accurate, complete and up to date. To ensure your personal information is accurate, please notify us of any errors or changes to your personal information and we will take appropriate steps to update or correct such information in our possession.

We will respond to requests for access or correction within a reasonable time. In some circumstances, we may refuse a request as permitted by law.

Storage and security

We take all reasonable precautions to safeguard the personal information we hold from loss, misuse, unauthorised access, modification, disclosure or destruction. We may store personal information in electronic or hard copy form. We maintain a range of physical, administrative and technical safeguards designed to protect the personal information including, depending on the circumstances, access controls, password protection, premises security and network firewalls.

While we take reasonable steps to protect personal information, no method of transmission over the internet is completely secure or error-free. In particular, communications sent to or from this website, including emails, may not be secure.

Links to other websites

This website may contain links or references to other websites to which this Privacy Policy may not apply. You should check their own privacy policies before providing your personal information.

Website analytics and cookies

As you navigate through this website, certain information may be collected automatically without you actively providing it. This may occur through the use of technologies such as cookies, internet tags (including web beacons), analytical tools, and the collection of navigational data.

Cookies are small text files stored on your device when you visit a website. We use cookies to:

remember your preferences and improve your browsing experience;

analyse website traffic, usage patterns and trends; and

support our marketing and communication activities.

Some cookies are essential for the operation of the website, while others are optional and used for analytics or to tailor the website to your preferences.

You can control or disable cookies through your browser settings. However, if you choose to disable cookies, some features or functionality of the website may not operate as intended. We may also use third-party service providers that use cookies and similar technologies to collect and process information about your use of the website. This information is generally aggregated and does not identify you personally.

Notifiable Data Breaches scheme

In the event of any loss or unauthorised access or disclosure of your personal information that is likely to result in serious harm to you, we will:

investigate, and

notify you and the Australian Information Commissioner as soon as practicable, in accordance with the Act.

Complaints

If you have any questions or concerns about our collection, use or disclosure of personal information, or if you believe we have not complied with this Privacy Policy or the Act, please contact us as set out below. Our Privacy Officer will investigate the complaint and determine whether a breach has occurred and what action, if any, to take.

We will take any privacy complaint seriously and will aim to resolve any such complaint in a timely and efficient manner, and our target response time is 30 days.

We expect our procedures will deal fairly and promptly with your complaint. However, if you remain dissatisfied, you can make a formal complaint with the Office of the Australian Information Commissioner (OAIC), which is the regulator responsible for privacy in Australia:

Complaints must be made in writing to:

Director of Compliance
Office of the Australian Information Commissioner
GPO Box 5218
Sydney NSW 2001

www.oaic.gov.au

Phone: 1300 363 992

How to contact us

For questions about access and corrections to personal information about you that we hold:

clients and families of clients, please contact your Client Relationship Manager

donors, please contact Donor Enquiries on 1300 136 140, and
others, please contact 1300 888 378.

If you believe we have not complied with this Privacy Policy or the Act and would like to make a complaint, please go to our Feedback page.

If you wish to exercise your right to opt out of receiving our marketing materials, or you have any questions or concerns about this Privacy Policy or our information practices (including whether and what type of health information we hold about you), please contact us at:

The Privacy Officer
Cerebral Palsy Alliance
PO Box 171, Forestville NSW 2087 
Email: privacy@cerebralpalsy.org.au
Phone: 1300 888 378 (+61 2 9975 8000)

Changes to this Privacy Policy

Our Privacy Policy may change from time to time as updated on this website. Before providing us with personal information, please check this Policy on our website for any changes.

Version 2.0 – 25/09/26