- Purpose
Women’s Health Victoria (“WHV”, “we”, “us”, “our”) respects the privacy of your personal information and is committed to treating it in an appropriate manner.
Our privacy policy complies with the Australian Privacy Principles in the Privacy Act 1988 (Cth).
- Scope
Our policy explains:
- the types of personal information that we collect
- how we collect and hold personal information
- how we use the personal information we collect
- how we may disclose your personal information
- how we use direct marketing
- how you can access information we hold
- how to lodge a complaint
We reserve the right to modify this policy from time to time. Our website will be updated when this happens.
WHV may collect personal information from individuals who contact us.
- Types of information we collect and hold
For the purposes of this policy, ‘personal information’ is information or opinion that identifies an individual, or which could reasonably identify an individual.
At WHV, we collect personal information such as your name, address, telephone number, email address, age and date of birth.
WHV collects, holds, uses and discloses personal information for the purposes of providing its services and operations, and communicating with you.
Some examples of the specific purposes for which WHV collects, holds, uses and discloses personal information includes the following:
- running our health information services
- conducting research projects or activities
- fundraising or public awareness activities
- dealing with enquiries regarding prospective employment, volunteering or student placements with WHV
- engaging with members of WHV
- dealing with enquiries about WHV’s services
- improving WHV’s services or operations
- purchasing goods and/or services.
In providing health information services, we may also collect sensitive information from you such as health information. Sensitive information is a subset of personal information and includes information relevant to your personal situation, including information about your current health and services which you seek. Except as otherwise permitted or required by law, we will only collect sensitive information about you with your consent which may be written, verbal or implied where appropriate and lawful.
We may also collect information about you when you visit our website or social media sites. We may use third party tools to track visits to our sites and to provide analytical services concerning those visits. The information we collect from visits to our sites is generally de-identified, unless you specifically complete and submit a form that we make available online via our website. We generally do not use such information to identify specific individuals except where it relates to the purchase of goods or services.
However, due to the nature of the internet, such information may contain details which could identify a particular individual. Such information includes the IP address of the computer accessing our website, the Internet service provider used to access the Internet and our sites, the webpage directing the individual to our sites and the individual’s activity on our sites.
- How we collect and hold personal information
We collect personal information using lawful and fair means and only when relevant to our operations and activities.
We may collect personal information about an individual from a variety of sources using a variety of means, including:
- a form (either physical or online) or other document that is used in a contract or transaction between us and you or your employer that is completed and submitted to us
- through feedback provided to us in relation to the services provided
- through interaction between us and health providers and practitioners
- a telephone, email or in-person enquiry or discussion about us and/or the services we provide
- mail correspondence, emails and other electronic means
- through publicly available sources of information
- through interactions with our social media channels that we offer or monitor
- from job applicants and staff members
- direct contact in the course of us providing goods and/or services (including the administration of accounts established with us)
- from current and prospective suppliers of goods and/or services to us.
We generally collect personal information directly from you (for example if you send an email to WHV, call WHV or submit personal information to WHV), unless it is unreasonable or impracticable for us to do so. We generally only collect personal information when we specifically request that information.
From time to time, we may receive unsolicited personal information about an individual. In accordance with our statutory obligations, we will determine whether or not we could lawfully have collected such information had we solicited the information. If we determine that we could not lawfully have collected the information then we will take steps to destroy or de-identify that information, except to the extent we are required or authorised to keep the information by law or court order.
You can also choose to deal with us on an anonymous or pseudonymous basis in relation to a particular matter.
However, if you choose to not provide us with personal information when requested, then we may be unable to provide you with all the services and information that you seek from us or otherwise handle the particular matter to your satisfaction. Further, we may need to verify your identity as part of our response to a request to access and/or correct personal information that we hold about you, or as part of our complaints-handling process.
We strive to ensure the security of personal information we collect and hold. We take reasonable steps to protect your personal information from misuse, interference and loss, and from unauthorised access, modification and disclosure. We regularly review and update our physical and data security measures in light of current technologies.
In addition, our employees and contractors who provide services related to our information systems and who have access to personal information we collect and hold are required, as a condition of their employment or engagement, to respect the confidentiality and privacy of any personal information we hold.
We take reasonable steps to destroy or de-identify personal information that we no longer require or which is not required to be held by law.
- How we use the personal information we collect
As a general principle, and in accordance with our statutory obligations, personal information is only used for the primary purpose(s) for which the information was collected or any secondary purpose to which you have consented, or that is related to the primary purpose and you would reasonably expect us to use the collected information, or as otherwise permitted or required by law.
We will take reasonable steps to make you aware of the purpose(s) for which the personal information collected may be used at or before the time of collection, including by providing a collection notice.
We may use personal information collected about an individual for one or more of the following purposes:
- to provide our services to the individual
- to process transactions and administer accounts
- to address queries and to resolve complaints
- to make a referral to a health practitioner or service provider
- to provide feedback on progress or completion to employers where they have enrolled you in a workplace capacity building program
- to send information updates, marketing materials and newsletters to current and prospective customers and other individuals associated with us who have consented (either expressly or impliedly) to receive such information and materials, provided that they have not opted out from receiving such information
- to improve our services, our website, our other means of communicating with our current and prospective supporters, users of our services, and with people who have participated in our research activities.
We may also use personal information collected about an individual to assist us in complying with our regulatory and statutory obligations in relation to the research we undertake and the services we provide.
We may use the information we collect to mark, on a publicly accessible map online, the locations of service providers and health practitioners who have agreed to provide their address details to us.
We take reasonable steps to ensure that the personal information we collect, use and disclose is accurate, complete and up to date. However, the accuracy of the information we hold largely depends on the accuracy of the information supplied to us or which we collect. If at any time you discover that any information we hold about you is inaccurate, out-of-date, incomplete, irrelevant or misleading, please contact us to correct the information or update it yourself through your own secure log in to your information. We will respond to requests to correct information within a reasonable period of time.
If we refuse the correction request, we will provide written reasons and information about the complaint process should you not be satisfied with our reasons.
Where information about you is incorrect and the information has previously been disclosed to third parties, we will take reasonable steps to notify third parties of the correction.
- How we may disclose your personal information
We may disclose personal information that we collect from to third parties, but only on an as-needs basis. We will only do this in order to help fulfil the purpose(s) for which we collected the personal information, or any secondary purpose related to the primary purpose for which we may be permitted or required to disclose such information by law.
We may disclose personal information (including sensitive information) to any of the following third parties in any of the following situations:
- where we have been requested by an individual to make a referral to a health practitioner or service provider, we may disclose personal information about the individual to the health practitioner or service provider
- personal information about a health practitioner or service provider may be shared with a woman requesting a referral from us
- personal information may be disclosed to our agents or contractors (including, for example but without limitation, our agents and contractors in order to enable them to provide products and/or services to us under contract which may directly or indirectly benefit the individual from whom the information was collected)
- personal information may be disclosed to your employer, where your details have been originally provided by your employer for your participation in training program
- personal information may be disclosed to our professional advisers (including our legal advisers, accountants and auditors) to facilitate their provision of advice to us
- personal information may be disclosed to government, statutory and regulatory departments, agencies and authorities, for the purpose of our compliance with our statutory obligations or obligations we owe to a department or other agency under a funding or other agreement
- we may also disclose personal information (including sensitive information) to a third party in the following situations:
- where you have consented to the disclosure
- where we are required to disclose by law or court order, or other governmental order or process to disclose, where we believe in good faith that the law compels us to disclose the information
- as a result of any obligations we owe under any contract
- if it is reasonably necessary to do so in order to identify, contact or bring legal action against someone whom we suspect or know is causing harm
- in the event there are discussions or negotiations concerning a merger of us with another organisation.
Where we engage third parties to provide products and/or services to us or to users of our services on our behalf, those third parties may have access to personal information (including sensitive information) that we hold about individuals. We generally do not authorise those third parties to use any personal information we may disclose or allow the third parties to access to use or disclose such personal information for any purpose other than to facilitate the completion of their obligations they owe to us.
In addition, we may disclose de-identified statistics regarding the users of our services to reputable third parties and to the government primarily for the purpose of assisting us to improve our service offering and to meet our contractual obligations to the government.
We may use offshore-based services to assist us to collect personal information which is used to facilitate our provision of services. Where we disclose personal information to an overseas recipient, we will take reasonable steps to ensure that the overseas recipient does not breach the Australian Privacy Principles. By using our online forms to submit personal information to us, you agree to our use of such services to collect personal information from you.
Except as contemplated under our privacy policy, and unless otherwise permitted or required by law, we will always attempt to ensure that our disclosure of personal information to other parties is carried out in a manner that does not personally identify individuals, to the extent that it is practicable and lawful to do so.
- How we use direct marketing
We will comply with our statutory obligations regarding the use of your personal information for the purpose of direct marketing. We may directly market ourselves to you if we collected information directly from you in circumstances where you would reasonably expect us to use your information to market ourselves and where you have not opted out from receiving such communications.
Where we collect your personal information from a third party, we will not use that information to directly market to you unless you consent to receive such communications from us.
All direct marketing communications which we send will include an easy opt-out procedure if at any time you wish for us to stop sending you marketing communications.
- How you can access information we hold
Where we hold personal information about an individual, that individual is entitled at any time to access the personal information we hold about that individual.
Where we receive a request to access the personal information we hold about an individual, we will respond within a reasonable period of time. Unless it is unlawful or impracticable for us to do so, we will generally provide access to the requested information in the manner requested.
Please note that we are entitled, under the relevant law, to charge a reasonable administrative fee to cover our costs incurred in providing access to the personal information we hold about an individual.
We reserve the right to verify the identity of the person making an access request, to ensure that we are not inadvertently disclosing personal information to an individual not entitled to access such information.
We reserve the right to redact the information we make available in response to an access request, to protect the privacy of other individuals.
Where we refuse access, we will explain the reasons for refusal in writing (except to the extent it would not be reasonable to do so) and provide details in relation to the relevant complaint process.
- How to lodge a complaint
If you wish to complain about an alleged breach of the privacy of your personal information, the complaint should be made in writing to us and addressed to the attention of our privacy officer. The details of our privacy officer are set out below.
We will promptly acknowledge receipt of your complaint, and we will endeavour to deal with your complaint and to provide you with a response within a reasonable period of time following receipt of your complaint (generally within 30 business days of receipt).
Where a complaint requires a more detailed investigation, it may take longer to resolve. If this is the case, then we will provide you with progress reports.
We will verify your identity and seek (where appropriate) further information from you in connection with your complaint.
Where required by law, we will provide our determination on your complaint to you in writing.
Please note that we may refuse to investigate or to otherwise deal with a complaint if we consider your complaint to be vexatious or frivolous.
If you are not satisfied with the outcome of your complaint, you may write to us seeking an internal review of our decision. Such internal review will be completed by an officer not previously involved in your complaint.
If you still remain dissatisfied following the outcome of our internal review, you may escalate the complaint to the Office of the Australian Information Commissioner. You will find information on how to do this at https://www.oaic.gov.au/privacy/privacy-complaints
- Contact details
In relation to any query, concern or complaint about how we comply with our privacy obligations, please direct such communications to the following:
The Privacy Officer
Women’s Health Victoria
E: [email protected]
T: +61 3 9664 9300
