PRIVACY POLICY
Mercy Community is committed to the protection of personal and organisational information collected from the people we support, employees and any other individuals who have contact with Mercy Community in whatever forms it takes, and in accordance with all relevant legislation. Mercy Community will:
- ensure the personal information process is managed in an open and transparent way;
- protect the privacy of personal information including sensitive information of individuals;
- provide for the fair collection and handling of personal information;
- maintain the quality of personal information;
- ensure that personal information we collect is used and disclosed for relevant purposes only;
- regulate access to and correction of personal information; and
- ensure the confidentiality of personal information through appropriate storage and security.
What is personal information and why do we need it?
Personal Information
Information or an opinion, whether true or not, and whether recorded in a material form or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion.
Sensitive Information
Sensitive Information includes information or an opinion about an individual’s racial or ethnic origin, political opinions, membership of a political association, religious beliefs or affiliations, philosophical beliefs, membership of a professional or trade association, membership of a trade union, sexual preferences or practices, criminal record, biometric information, biometric templates, health information about an individual and genetic information.
Health Information
(a) Information or an opinion about:
(i) the health or disability (at any time) of an individual;
(ii) an individual’s expressed wishes about the future provision of health services to him or her; or
(iii) a health service provided, or to be provided, to an individual that is also personal information; or
(b) Other personal information collected to provide, or in providing, a health service;
(c) Other personal information about an individual collected in connection with the donation, or intended donation, by the individual of his or her body parts, organs or body substances; or
(d) Genetic information about an individual in a form that is, or could be, predictive of the health of the individual or a genetic relative of the individual.
Unsolicited Information
Unsolicited information is all personal information received from an individual that Mercy Community did not actively seek to collect.
Employee Record
A record of personal information relating to the employment of the employee. Examples of personal information relating to the employment of the employee are health information about the employee and personal information about all or any of the following:
- the engagement, training, disciplining or resignation of the employee;
- the termination of the employment of the employee;
- the terms and conditions of employment of the employee;
- the employee’s personal and emergency contact details;
- the employee’s performance or conduct;
- the employee’s hours of employment;
- the employee’s salary or wages;
- the employee’s membership of a professional or trade association;
- the employee’s annual, long service, personal, maternity, paternity or other leave; and
- the employee’s taxation, banking or superannuation affairs.
What do we do with your personal information?
Mercy Comunity will only collect personal information by lawful and fair means and will only collect personal information that is necessary for one or more of our organisation’s functions or activities.
If it is reasonable and practicable to do so, Mercy Community will collect personal information about an individual only from that individual.
In meeting our obligations with respect to the privacy of individuals, Mercy Community acknowledge that some people may require support to access and understand records.
Collection of information is limited to only the information that is necessary for our activities. Mercy Community recognises that the collection of information enhances the organisation’s ability to deliver core services. Given the nature of the services we provide, Mercy Community may collect personal and sensitive information about individuals from several sources. Mercy Community ensures that robust and accountable documentation is available regarding the collection of information, ensuring information that is sought and used is relevant to the organisation’s business and is appropriately managed.
How do we store your personal information?
Mercy Community is committed to keeping secure the personal information that is provided to us. Mercy Community takes all reasonable steps to ensure that the personal information held is protected from misuse, interference, loss, unauthorised access, modification or disclosure. We will not use or disclose sensitive information about an individual for the purposes of direct marketing, unless the individual has provided consent.
How can you correct/update your personal information?
If there are changes to your personal information, or you become aware that the information we have is not correct, speak to a staff member or contact us and ask us to change this.
Response to a data breach
A data breach occurs when personal information is lost or subjected to unauthorised access, modification, use or disclosure, or other misuse or interference. All staff are responsible for reporting any actual or suspected data breach to the Privacy Officer. We respond to any actual or suspected data breach in accordance with legislation.
You have a right to your personal information and you can access it by following the steps below:
1. Prepare a written request. There is a Mercy Community Form– Request for Personal Information you can use for this. To get a copy of this form, speak to a staff member or call our Privacy Officer on (07) 3866 4160. If you would prefer not to fill out a form, we will need the following information from you:
- Proof of who you are and how the information requested is relevant to you
- What information you are after
- When you need the information by
You can ask someone to help you with this if you like.
2. Send this request to the Mercy Community Privacy Officer, via:
Email: privacy@mercycommunity.org.au
Mail: ATTN: Privacy Officer
Mercy Community
PO Box 508
Lutwyche QLD 4030
