Privacy statement
Deadly Choices is operated by the Institute for Urban Indigenous Health.
1. Scope
This summary sets out the approach of the Institute for Urban Indigenous Health (IUIH) to promoting and respecting the privacy of our communities and complying with the Privacy Act 1988 (Cth) (‘the Privacy Act’).
IUIH’s full privacy policy – Trust, dignity and autonomy: promoting and respecting the privacy of our Mob.
2. What is personal information?
Personal information is any information or opinion, in any form, whether or not it is true, about an identified individual or an individual who is reasonably identifiable. This includes information such as your name, date of birth, address, and a photo where your face is clearly visible.
IUIH’s privacy policy describes how we protect the personal information we collect from our communities.
You can learn more about different types of personal information in our full privacy policy.
3. Principles
Our privacy culture promotes best practice in handling personal information that is aligned with our communities’ expectations and values, respects Aboriginal and Torres Strait Islander Ways of Seeing, Knowing, Doing, Belonging and Being, and is grounded in principles of Indigenous Data Sovereignty.
We value the trust our communities place in us to handle their personal information safely and respectfully and we aim to make information about privacy at IUIH easy to find and understand.
Our privacy culture is consistent with the Australian Privacy Principles and the Privacy Act and supports our ethical, relational and cultural obligations to our communities.
We have systems in place that support us to know what personal information we hold, where we hold it, and how we keep it safe and secure.
All our business units, clinics, programs, services, projects and other initiatives strive to take a ‘privacy by design’ approach, ensuring privacy and personal information handling is considered as part of all new developments and our privacy processes are regularly reviewed to ensure they are consistent with applicable legislation and our communities’ expectations and values.
We aim to ensure that everyone who works at IUIH understands their obligations in relation to protecting and respecting the privacy and handling the personal information of our Mob.
4. Collection of personal information
IUIH collects personal information when:
- people visit our websites and social media platforms
- community members attend health promotion events, community engagement events, training, conferences and other events organised by us
- during general business activities, such as responding to enquiries and feedback, funding and contract arrangements, procuring services, and other interactions with our business partners
- clients register for, are referred to, and attend our healthcare and wellbeing services
- we provide legal services to clients
- we provide education, traineeship and development programs for students and trainees
- people apply for jobs or volunteer opportunities with us, new employees and volunteers join us and existing employees and volunteers update us about their personal information.
5. Information security at IUIH
- All personal information we collect is stored in Australian-based data centres.
- We handle all personal information in accordance with the Australian Privacy Principles.
- We use a range of secure electronic storage systems for different types of personal information.
- We only allow certain staff to access certain personal information. Access to our systems for storing personal information is provided on a strictly ‘need to know’ basis.
- Some third party organisations we interact with, such as social media platforms and other online services, may collect and hold the personal information of community members and this information may be stored outside Australia.
6. Use and disclosure of personal information
- We only use and disclose personal information for the specific purpose/s for which it was collected.
- When we collect sensitive and health information, we generally ask permission first.
- If we use and disclose personal information without asking for permission first, this is always in accordance with relevant exceptions in the Privacy Act.
- In general, we don’t disclose personal information overseas unless there are exceptional circumstances or a third party organisation associated with us stores personal information overseas (for example, a social media platform).
7. Accessing and correcting personal information
- If someone asks, in most cases we will give access to the personal information we hold about that person and take reasonable steps to correct the information if it is incorrect.
8. Complaints about how IUIH handles personal information
- We accept complaints about how we handle personal information in any format and will respond within 30 days.
- Our full privacy policy contains information about how to complain to the Office of the Australian Information Commissioner if someone is not satisfied with how with have handled their complaint.
9. Contact us
IUIH’s Privacy Leader
Email: [email protected]
Telephone: 07 3828 3600
Post: 22 Cox Road, Windsor, QLD, 4030