Mates in Construction Privacy Policy

MATES in Construction Aust Ltd (ACN 166 347 539) and its members (MATES in Construction Qld, NSW, SA and WA Ltd ("we", "our", "us") are bound by the Australian Privacy Principles (APPs) and the Privacy Act 1988 (Cth) (Privacy Act). We have drafted this privacy policy to comply with the APPs.

Our privacy policy reflects the policies and procedures that we have in place to protect your personal information that we collect and hold.

 
1. Key terms used in our privacy policy

For guidance on the following key terms used in our Privacy Policy, please refer to the dictionary at section 16 below: "collect", "consent", "personal information" and "sensitive information".

 
2. Why do we collect personal information and what personal information do we collect?

1. We will only collect personal information if it is reasonably necessary to pursue our mission of reducing suicide and improving mental health and wellbeing in the Australian Construction Industry. In support of our main function, we also carry out the following related functions and activities:
   1. Train construction workers in suicide prevention.
   2. Maintain and support a peer support network of "Connectors' and "ASIST workers".
   3. Provide information and knowledge around good mental health practice.
   4. Provide case management support to individuals seeking to assist them in improving their mental health and wellbeing.
   5. Offer support on sites following a suicide or a significant and stressful event.
   6. Raise funds for our operations through partnerships, sponsorships, grants, gifts and fundraising activities.
   7. Statistical depersonalised reports to external funders and thirdparties.
   8. Fee for service work outside the construction industry.
   9. Public relations activities.
2. Your personal information that we collect will vary depending on the functions and activities that we engage in. Some examples of personal information that we may collect are:
   1. your contact details such as your physical address, telephone number and email address;
   2. details of your occupation, trade, worksite and your employer; and
   3. information that we are required or authorised to collect and keep under an Australian law or a court/tribunal order.
3. If you apply for a job with us by sending us a copy of your CV, this will be a collection by us of your personal information such as your educational qualifications, career history, interests, hobbies and job interests and such other information as may be routinely included in a CV. We collect this information from you as part of our recruitment activities.
4. Some information that we collect about you will be sensitive and very personal information. We will only collect sensitive information from you if:
   1. our collection of that sensitive information is reasonably necessary for one or more of our activities or functions;
   2. is required to document support provided by us to you; and
   3. we have your consent to collect the sensitive information about you.
5. The APPs list a number of circumstances that permit us to collect sensitive information about your without your consent. These include:
   1. if our collection of the sensitive information is authorised by or under an Australia law or court/tribunal order; or
   2. a permitted general situation applies, for example, it is necessary for us to collect the sensitive information for the establishment or defence of a legal claim.
   We only collect sensitive information in the circumstances listed in the APPs.

 
3. How do we collect personal information?

Collection of personal information

1. The way we collect your personal information:
   1. will be lawful, for example we will not collect information from you in threatening way;
   2. will be fair, for example we will not collect information from you by intimidating or deceiving you; and
   3. will not be intrusive.
2. We may collect information from you in a number of different situations:
   1. Information you provide on training forms
   2. In conversation with MATES in Construction case managers
   3. Your participation in MATES in Construction events or fund raising activities.
   4. From third parties such as your colleagues, employer or union if they call us with concerns for your wellbeing.
3. If you supply us with personal information of a third party, such as a spouse, colleague or friend, or the executor of your will, we accept that information on the condition that you have permission from that third party to provide that personal information to us to use for our functions and activities.
4. We will only collect your personal information from third parties if:
   1. it is provided to us so that we can carry out at least one of our functions or activities, for example it is necessary for us to collect your personal information from your employer so that we are able to collect your redundancy pay contribution from your employer on your behalf;
   2. it is unreasonable or impracticable to collect the information directly from you; or
   3. if we are concerned about your wellbeing and/or safety
   4. we are required or authorised by an Australian law, or a court/tribunal order, to collect the information from someone other than you.

 
4. How do we store your personal information?

1. We store hardcopy documents containing your personal information in secured facilities.
2. Electronic documents are stored with security measures implemented to ensure the security and confidentiality of the documents and the personal information contained in them.

 
5. What do we do with your personal information?

1. We will only use or disclose your personal information for the purpose for which it was collected (the primary purpose). The primary purposes for which we will collect your personal information are set out in section  2(a) above.
2. However, we may use or disclose your personal information for secondary purposes:
   1. if we receive your consent to do so; or
   2. the APPs permit us to do so.
3. The APPs permit us to use and disclose personal information for a secondary purpose without your consent if, for example:
   1. you would reasonably expect us to use or disclose the information for a certain secondary purpose and the secondary purpose is:
      1. directly related to the primary purpose (for sensitive information); or
      2. related to the primary purpose (for non-sensitive personal information); or
   2. the use or disclosure of the information is permitted or authorised by or under an Australian law or a court/tribunal order.
4. You can reasonably expect that your personal information may be used or disclosed for the purposes of us carrying out at least one of our functions or activities.

 
6. Notification of collection

1. At or before the time we collect your personal information (or, if that is not practicable, as soon as practicable after), we will take such steps as are reasonable in the circumstances to notify you of the following ("Collection Information"):
   1. our identity and contact details;
   2. that we have collected your personal information, including where we have collected your personal information from someone other than you, and the circumstances of that collection;
   3. if our collection of your personal information is required or authorised by or under an Australian law or a court/tribunal order – the fact that the collection is so required or authorised;
   4. the purpose for our collection of your personal information;
   5. the main consequences (if any) for you if we do not collect all or some of your personal information;
   6. the organisations, or types of organisations, to which we usually disclose personal information similar to the personal information collected from you;
   7. the fact that our privacy policy contains information about you can access the personal information that we hold about you and how you may correct the personal information we hold about you;
   8. the fact that our privacy policy contains information about how you may complain about a breach of the APPs by us and how we will deal with such a complaint; and
   9. whether we are likely to disclose your personal information to overseas recipients, and if so, the countries in which such recipients are likely to be located (if practicable to do so).
2. We may give you this information by including a note in the forms we require you to complete for membership.
3. Circumstances may arise where we would not be required to provide you with the Collection Information, including:
   1. if you are aware that we are collecting personal information from you and you are aware of the purpose for this collection of your personal information;
   2. if we collect personal information about you on a recurring basis over a short period of time in relation to the same matter, and you are aware (or reasonably ought to be aware) that a separate notice will not be issued for each instance of collection; and
   3. if notification would be inconsistent with a legal obligation, such as legal professional privilege.

 
7. Direct marketing

1. We may, from time to time, use or disclose your personal information (other than sensitive information) for direct marketing to you of our services that may interest you, for example by sending you our newsletter or other information about us or our activities, if:
   1. we collected the personal information we use for the direct marketing from you; and
   2. you have consented to us using or disclosing your personal information for direct marketing, or you would reasonably expect us to use or disclose the your personal information for direct marketing.
2. We will not use or disclose sensitive information about you for direct marketing purposes unless we have your consent to do so.
3. If we do use or disclose your personal information for direct marketing purposes we will provide you with a simple way to unsubscribe from receiving our direct marketing communications. If you follow our process for unsubscribing, we will no longer send you these communications.
4. We will also act in accordance with the Do Not Call Register Act 2006 and the Spam Act 2003.

 
8. Anonymity and Pseudonymity

1. When interacting with us, you may choose to remain anonymous or to use a pseudonym. However, we may choose not to deal with you this way if:
   1. we are required or authorised by or under an Australian law, or a court/tribunal order, to deal with you in accordance with your identity; or
   2. it is impracticable for us to deal with you in this way.
2. In some circumstances, it may not be possible for us to provide a service without the knowledge of your identity.

 
9. Receipt of unsolicited personal information

1. If we receive personal information that we did not take any active steps to collect, we will, within a reasonable period of receiving the information, determine whether we would have been permitted to collect the information pursuant to the APPs.
2. If we determine that we have received personal information that we would not have been permitted to collect pursuant to the APPs (and the information is not contained in a Commonwealth record), we will as soon as practicable and where it is lawful and reasonable to do so, destroy the information or ensure that it is de-identified.
3. If we determine that we would have been permitted to collect the personal information pursuant to the APPs, we will ensure that the information is dealt with in a manner that complies with the APPs.

 
10. Quality of personal information

1. We will endeavour to take reasonable steps to ensure that the personal information that we collect is accurate, up-to-date and complete. Further, we will endeavour to take reasonable steps to ensure that the personal information that we use or disclose is, having regard to the purpose of our use or disclosure, accurate, up-to-date, complete and relevant.
2. The reasonable steps described above that we may undertake include:
   1. ensuring that updated and new personal information is promptly added to relevant existing records;
   2. you to update your personal information when we engage with you;
   3. with respect to personal information in the form of an opinion, we may take the following steps to verify the accuracy of the opinion:
      1. checking that the opinion is from a reliable source;
      2. providing the opinion to you before we use or disclose it;
      3. clearly indicating on our record that the information is an opinion and identifying the person who formed that opinion.

 
11. Security of personal information

1. We will take such steps as are reasonable in the circumstances to protect personal information that we hold from:
   1. misuse, interference and loss; and
   2. unauthorised access, modification or disclosure.
2. If we hold personal information about you which we no longer require, we will take reasonable steps to destroy the information or ensure that it is de-identified (unless our compliance with the APPs or a law requires us to avoid taking such steps).

 
12. Disclosure to overseas recipients

1. We do not disclose your personal information to overseas recipients. However, if circumstances arise where we need to disclose your personal information to an overseas recipient, we will do so in an APP compliant manner. This may occur in a range of circumstances, for example if we make a decision to store and access data by way of cloud computing and other electronic means.
2. Before disclosing personal information to an overseas recipient, we will take such steps as are reasonable in the circumstances to ensure that the overseas recipient also complies with the APPs in relation to that information, unless the APPs do not require us to do so.
3. We will not be required to take the steps described in paragraph 12(b) above if:
   1. we reasonably believe that:
      1. the recipient of the information is subject to a law or a binding scheme that has the effect of protecting the information in a way that, overall, is at least substantially similar to the way in which the APPs protect the information; and
      2. there are mechanisms that could be taken to enforce the law or binding scheme; or
   2. both of the following apply:
      1. we expressly inform you that if you consent to the disclosure of your personal information to the overseas provider, we will not be required to take the steps described in paragraph 12(b) above; and
      2. after being so informed, you consent to the disclosure; or
   3. the disclosure of the information is required or authorised pursuant to an Australian law or a court/tribunal order; or
   4. the APPs otherwise allow us to refrain from taking the steps described in paragraph 12(b) above.

 
13. Access to personal information

1. Requests for access to personal information should be made in writing and addressed to our Privacy Officer. The Privacy Officer may be contacted at Jorgen@matesinconstruction.org.au
2. If we receive a request to access personal information, we will within a reasonable period of the request being made, give access to the information in the manner requested (if it is reasonable and practicable to do so), subject to exceptions set out in the APPs.
3. The APPs list the situations where we may deny access to personal information. These situations include where:
   1. granting access would have an unreasonable impact on the privacy of others;
   2. the request is frivolous or vexatious;
   3. the information relates to existing or anticipated legal proceedings between the person requesting access and us, and would not be accessible by the process of discovery in those proceedings;
   4. access would reveal our intentions in relation to negotiations with the person requesting the information in such a way as to prejudice those negotiations;
   5. granting access would be unlawful; and
   6. denying access would be likely to prejudice the taking of appropriate action in relation to the matter.
4. If we refuse to give access to personal information in accordance with the APPs, or if we refuse to give access in the manner requested, we will take steps (if any) that are reasonable in the circumstances to give access in a way that meets our needs and the needs of the person requesting access.
5. If we refuse to give access to personal information in accordance with the APPs, we will provide a written notice setting out:
   1. the reasons for denying access to personal information (except where it would be unreasonable to provide the reasons);
   2. the ways which are available to complain about the refusal; and
   3. any other matters prescribed by the regulations.
6. Generally, we will not charge fees for giving access to personal information. However, we reserve the right to charge reasonable fees where requests for personal information are complicated or are resource intensive.

 
14. Correction of personal information

1. Requests for correction of personal information should be made in writing and addressed to our Privacy Officer.
2. If, with regard to the purposes for which it is held, we are satisfied that personal information we hold is inaccurate, out-of-date, incomplete, irrelevant or misleading, or if the individual about whom the information relates makes a request, we will take reasonable steps to correct the information. However, as a matter of practice, when we receive personal information, we will hold the information for a period of 5 years before we consider whether it is inaccurate, out-of-date, incomplete, irrelevant or misleading (unless we are informed otherwise).
3. If we correct personal information, we will take reasonable steps to notify any third party to which we had previously disclosed the information, if the individual about whom the information relates, requests and it is not unlawful or impracticable for us to do so.
4. If we refuse to correct personal information in accordance with the APPs, we will provide a written notice setting out:
   1. the reasons for the refusal (except where it would be unreasonable to provide the reasons);
   2. the mechanisms available to complain about the refusal; and
   3. other matter prescribed by the regulations.
5. If we refuse to correct personal information in accordance with the APPs, you may request that we associate the information with a statement that the information is inaccurate, out-of-date, incomplete, irrelevant or misleading. Where such a request is made, we will take reasonable steps to associate the statement so that it is apparent to the users of the personal information.
6. We will aim to respond to any request regarding the correction of personal information within 30 days of the request being made.
7. We will not charge fees for requests for the correction of personal information or for associating the statement with the personal information.

 
15. Complaints

1. If you believe that we have breached the APPs in any way in relation to your personal information, you may make a written complaint to our Privacy Officer.
2. The Privacy Officer will review your complaint, consider our conduct in relation to the complaint and the requirements of the APPs, and will consider appropriate action. The Privacy Officer will inform the you of its decision within 30 days of receiving the complaint.
3. If you are unhappy following the determination of the Privacy Officer, you may make a complaint to the Office of the Australian Information Commissioner.

 
16. Dictionary of key terms