Privacy Policy
1. Overview
This Privacy Policy describes how Bandu Organisation Ltd ABN 71660574541 (Bandu) collects, holds, uses and discloses personal information consistent with the Privacy Act 1988 and the Australian Privacy Principles found in that Act.
We will review this policy regularly, and we may update it from time to time to ensure we are complying with any legislative changes.
2. What kinds of personal information do we collect?
The kinds of information we collect will depend on which of our services, programs or activities you interact with and/or how you use the functions offered or accessed via our website bandu.org.au.
The kinds of personal information that we collect and hold include:
(a) Name
(b) Gender
(c) Date of birth
(d) Contact details (for example, postal address, e-mail address, telephone number(s))
(e) Information about your family situation
(f) Occupation, employment history
(g) Educational level, qualifications, transcripts, reports, results,
(h) Cultural and community background and language groups
(i) Financial information (credit card details or bank account details)
(j) Profile information (for example, username and password, preferences and feedback)
(k) Details of your health fund membership or other insurer where relevant
(l) Information on your health history
3. How do we collect your personal information?
We may collect personal information from stakeholders who interact with Bandu, including Bandu participants and their families, employees, volunteers, corporate partners, supporters and donors. Generally, we will collect this information directly from you (or, for a child under the age of 18 who is not living independently, from your family members or guardian). For the purposes of our functions and activities, where it is not reasonable or practical to collect the information from you, we may collect your personal information from third parties including other organisations, corporate partners, educational institutions, agents, contractors, employees, insurers or others. We will take reasonable steps to make you aware of the facts and circumstances of a collection from a third party, or obtain your consent where appropriate.
If the subject of the information is a child under the age of 18 who is not living independently, we may obtain the consent of a parent or guardian.
We may collect this information in a variety of ways including the completing of forms, telephone, email, or SMS. You may also provide this information to us through our website, an iPad or tablet or a mobile phone. For example, we will collect your personal information
when you make a donation through our website, for the purposes of processing your donation and sending you further information about our organisation’s functions and general business activities.
4. How do we use your personal information and who do we share your personal information with?
The information we hold about you will be used for the purposes of:
● Carrying out our organisation’s functions and engaging in our general business activities, including providing participants with support in relation to accommodation, tertiary education, employment and community;
● Communicating with Bandu participants and their family members or guardians, current educational representatives, prospective employers, prospective educational institutions, volunteers, employees, corporate partners, supporters and donors;
● Sharing information as reasonably required for the purpose of arranging events with Bandu participants and their family members or guardians, corporate partners, supporters and donors;
● Processing donations;
● Managing our accounts;
● Onboarding or training our staff; and
● Resolving any concerns you may have about our services to you.
If you consent or we obtain consent from your parent or guardian where required, we may disclose personal information or photographs of Bandu participants, supporters, donors or community members for the purposes of education, research and training, such as by publishing your stories in our publications or on our website at bandu.org.au. Any personal information disclosed on our website may be accessible to those viewing our website overseas.
Due to legislative requirements or a court order (e.g. subpoena), we may be required to disclose information about you to regulators, law enforcement bodies or other parties without your prior knowledge or consent. Subject to any legal constraints, we will use reasonable steps to let you know of these requests.
As part of our commitment to improving the quality of our services, we may participate in research programs, professional development and other educational activities. We may use the information we hold about you to assist with this research and education. However, this information will not identify you unless we have received your agreement to do so.
5. How do we store and protect your personal information?
We will take appropriate steps to protect the security of the information we hold about you, including protection against unauthorised access, virus or other electronic intrusions, theft or loss. Your electronic records are stored in a Google Drive folder to which access is restricted. Our volunteers and employees are bound by strict requirements regarding protection of the privacy and confidentiality of your records.
We may store your records at our registered office or place of business and in electronic systems under our control. We may take reasonable steps to destroy or render non-identifiable records of your personal information if they are no longer needed for any
purpose for which it can be used or disclosed, or where retention is not required or authorised by or under law.
6. Online activities
6.1 Internet transmission of information
Encryption technology is used to ensure that information is protected when being transmitted over the Internet. Bandu cannot ensure the security of any information transmitted over the Internet and individuals send personal information at their own risk. However, once we receive a transmission, we take reasonable steps to ensure that personal information is secure on our systems and those of our agents and protected from loss, misuse and unauthorised access.
6.2 Cookies
We use “cookies” to enhance functionality and to keep track of visits to our website.
A cookie is a small data file that contains information about your visit to a website. Your computer provides this information during your first visit to a web server. The server records this information in a text file and stores this file on your hard drive. When you visit the same website again, the server looks for the cookie and structures itself based on the information provided. A cookie only identifies your computer to a web server when you visit the site.
If you visit our website to browse or download information, our web server will record the date and time of your visit to our site, the pages viewed and the information downloaded. We generally use this information for statistical purposes.
Most web browsers are initially set up to accept cookies. You can reset your browser to refuse all cookies or to warn you before accepting cookies. If you have set your browser to warn you before accepting cookies, you will receive the warning message with each cookie. You can refuse cookies by turning them off in your browser.
If your browser is configured to reject all cookies, you will be unable to use services on the website that require cookies in order to participate. You may still be able to use some information-only pages if you do not accept cookies.
7. Links to other sites
Our website contains links to other websites and this policy does not apply to these linked
websites. We encourage you to read the privacy policy of every website you visit.
8. How can you access and correct your personal information?
It is important that the information we hold about you remains accurate and up to date. Please let us know of any changes in your contact and other personal details. Our staff will confirm your current address and contact details with you from time to time for this purpose.
As a stakeholder who interacts with Bandu you have the rights of access to the personal information we hold about you, and you can also request an amendment to this personal information if you believe that it is inaccurate.
9. What if you have a complaint?
If you have an enquiry or a complaint about the way we handle your personal information, or to seek to access or correct the personal information we hold about you, please contact our Privacy Officer:
Name: Edward Morgan
Email: edwardmorgan@bandu.org.au
We will endeavour to resolve complaints quickly and informally, if you wish to proceed to a formal privacy complaint, we request that you make your complaint in writing to our Privacy Officer, by mail or email as above. We will investigate your complaint and endeavour to resolve it within a reasonable period, not usually exceeding 30 days.
If you consider that we have not dealt with your complaint adequately, you may complain to
the Office of the Australian Information Commissioner.
https://www.oaic.gov.au/about-us/contact-us/
Telephone: 1300 363 992.