We are passionate about helping vulnerable people in our community and keen to collaborate with others who feel the same.
This policy sets out how Embrace People & Place will comply with the Australian Privacy Principles (APPs) contained in Schedule 1 of the Privacy Act 1988 (Cth) (the Privacy Act). In particular, this policy demonstrates our compliance with APP 1 – Open and transparent management of personal information.
The APPs are legally binding on Embrace People & Place and regulate the way in which the organisation can collect, store, use and disclose personal information and how to access and correct that information.
Detailed information on the APPs can be found on the Office of the Australian Information Commissioner’s (OAIC) website www.oaic.gov.au.
This Policy applies to all Embrace People & Place stakeholders, including children, young people, families and all Board members, staff and volunteers for Embrace People & Place, community members, donors and sponsors.
Personal information will only be collected if it is reasonably necessary for Embrace People & Place services, activities and functions.
Embrace People & Place collects personal information directly from people when they contact us, raise a general query or complaint with us, sign up to one of our mailing lists, or when we engage in charitable activities with them. The purposes for which we usually collect and use personal information depend on the nature of the interaction, service or program. It may include:
The types of personal information we may collect include names and contact details, and other information relevant to a particular interaction, service or program.
Embrace People & Place will not know a person’s email address unless it is provided to Embrace People & Place by that person and we will not forward additional information to that email address unless given permission to do so. We will also ask for consent to send information via direct mail, telemarketing, email, SMS and MMS messages. If our communication uses a mailing list, a person can opt out of these arrangements at any time by clicking on the ‘unsubscribe’ link.
If a person chooses not to provide personal information to Embrace People & Place for the purposes set out in this Privacy Policy, we may not be able to provide them with requested information, products or services, or to effectively conduct our relationship with them.
On occasion, Embrace People & Place collects information about individuals through case studies or reports submitted to us from partner organisations. Types of personal information received in those circumstances may include name, address, date of birth, gender, photographs, academic records, employment records, income streams, family composition, health, disability information, culture and language.
Embrace People & Place will only use identifying personal information if absolutely necessary for our service purposes and with permission from the individual. Embrace People & Place will prioritise de-identifying personal information provided in the above formats as much as possible while retaining the intention of the information, e.g., promoting services, and demonstrating impacts and outcomes. This will also be shown to the individual concerned to give permission.
Embrace People & Place collects and records personal information about individuals such as contractors and subcontractors and potential contractors and subcontractors and their representatives in relation to those service providers supplying goods and services to us.
Embrace People & Place collects personal information of our employees. Information includes name, contact details, tax file number, superannuation details, qualifications and work history. This information is provided to Embrace People & Place by the employee. Embrace People & Place also collects information from third parties that verifies employee personal information (e.g., via referee checks, Working with Children checks).
Embrace People & Place does not share personal information with others except in accordance with this Privacy Policy or as permitted by the Privacy Act (including the Australian Privacy Principles) or other applicable privacy laws.
Embrace People & Place does not sell personal information to anyone.
Embrace People & Place will take all reasonable steps to keep personal information safe and only accessed or used for authorised purposes. When Embrace People & Place no longer requires personal information it will be destroyed.
Embrace People & Place has computer and network security for electronic data stores and physical security safeguarding paper information.
Embrace People & Place will only disclose personal information with permission from the person. The only exception to this is in emergency situations (e.g., the need to pass information on to the Ambulance Service if someone is suddenly ill or injured)
Access to personal information held by Embrace People & Place will be provided to the person upon request and at no charge.
Embrace People & Place will take all reasonable steps to keep personal information up to date and accurate.
The Embrace People & Place website includes a form for users to subscribe to the organisation’s mailing list. By completing the form, users consent to receive emails from Embrace People & Place using email marketing platforms. The emails that Embrace People & Place issues through email marketing platforms will include an option to unsubscribe and comply with the Spam Act 2003.
Embrace People & Place uses online donation platforms such as GiveNow for fundraising purposes. When making a donation to Embrace People & Place through an online donation platform, the privacy policy of the platform will apply.
A data breach occurs when personal information held by Embrace People & Place is subject to unauthorised access or disclosure or is lost. A data breach may be caused by malicious action (by an external or insider party), human error, or a failure in information handling or security systems.
Embrace People & Place will notify data breaches to the Office of the Australian Information Commissioner (OAIC) and to the individuals about whom the personal information relates. Data breaches occur when all three of the following criteria are met:
The method Embrace People & Place will use to notify individuals will depend on the type of data breach and who it affects. We may notify each individual to whom the relevant information relates, notify only individuals at risk of serious harm, or publish a notification (e.g., on the Embrace People & Place website). Any notification will not identify specific individuals who accessed information unless it is relevant to the steps that Embrace People & Place recommends individuals take in response.
If you have any questions or concerns about this Privacy Policy or about the way in which your personal information has been handled by Embrace People & Place you can contact the organisation’s Chief Executive Officer via email at hello@embracepp.org.au.
Embrace People & Place will consider your questions, concerns or complaints to work out what steps can be taken to resolve them. This will be completed in 10 working days. If your complaint requires detailed consideration or investigation, we may ask you to give us more information about your complaint and the investigation will be completed within 28 working days. If Embrace People & Place cannot meet the indicated timeframes, you will be advised.
Refers to the organisations and Australian Government agencies that the Australian Privacy Principles (APP) apply to, including Embrace People & Place
A regulatory body with responsibilities and powers under the Privacy Act 1988, the Freedom of Information Act 1982 (FOI Act) and other related legislation. Its functions cover privacy, freedom of information (FOI), and government information management.
The specific function or activity for which Embrace People & Place collects personal information
In the context of a data breach, serious harm to an individual may include serious physical, psychological, emotional, financial, or reputational harm. For example, financial fraud including unauthorised credit card transactions or credit fraud; identity theft causing financial loss or emotional and psychological harm; family violence; and, physical harm or intimidation.
This policy was last updated on 26/03/2025.
