Ronald McDonald House Western Australia Privacy Policy

Our commitment to privacy

The Home Away From Home Inc (ABN 17 197 600 778) trading as Ronald McDonald House Western Australia (‘we’ us’ and ‘our’) takes privacy seriously. We are committed to respecting the rights of all individuals, and we work to ensure compliance and improve our processes. This privacy policy describes how we handle your personal information in line with our obligations under the Privacy Act 1988 (Cth).

Key points on our Privacy Policy

  • We collect personal information from people who are connected to our operations and activities.
  • We only collect personal information when it is required for general business purposes such as to fulfil our mission of providing our services and programs, when supporters and the general public want to register their interest, donation or respond to an invitation as an example, and we only collect it by lawful means and not in an unreasonable or intrusive way.
  • We take reasonable steps to protect all personal information that we hold from misuse, interference and loss, and from unauthorised access, modification and disclosure.
  • You can opt out of receiving direct marketing from us, update your information or make a complaint at any time by contacting: [email protected]
We may revise this Privacy Policy from time to time by updating this document. The revised Privacy Policy will take effect when it is published on our website.
What is personal and sensitive
information?

Personal information means information or an opinion about an identified individual, or an individual who is reasonably identifiable.

We collect personal information from people who are connected to our operations and activities including:

Employees, donors, fundraisers, people who purchase merchandise from us, recipients of our programs and services, participants in advocacy and fundraising programs and campaigns, health professionals, job applicants, people who attend our events such as cooking programs, fundraising, advocacy, volunteer information sessions, suppliers, volunteers and service providers.

Depending on the nature of our relationship and the circumstances in which we deal with you, the types of personal or sensitive information we may collect include:

  • Contact Information – name, address, phone number, email
  • Identification – photo, signature, IP address
  • Behaviour – engagement with our programs or services, interests, purchases, website usage, e-commerce actions, form submissions, email metrics, social media activity, file downloads, customer service interactions,
  • Health and Medical Records – medical diagnosis, health conditions or treatments, prescription details, medical history, treatment and care plans, hospital administration data
  • Financial information – credit/debit card numbers, financial transactions, tax identification numbers, bank account information, tax records,
  • Personal Identifiers – social security numbers, passport numbers, driver’s license numbers employee and customer ID numbers, and Medicare numbers
  • Sensitive Demographic Information – Racial or ethnic origin, sexual orientation, or preferences, gender,
  • Information on Children – personal details, school records, images or videos,
    developmental data, health records, children protection data, observation data
  • Employment and Personnel Records – employee contact information (name, address, personal email), employee details (employee ID, hire date, position, department), financial information (salary, bank account details, tax information), emergecy contact, gender, ethnicity, performance and development data, human resource data

We only collect personal information by lawful means and not in an unreasonable or intrusive way.

Most of the time, we collect personal information directly from you. This may be in person, on the telephone or online via our website (for example when you book a service or program, when you purchase merchandise or attend an event, provide us with an in-kind gift or monetary donation).

We may also collect personal information through various forms of interaction such as recording your attendance at one of our facilities, through correspondence via written letters and emails that you send us – for example, when you ask us to update your contact details. From time to time, in order to provide our programs and services we may collect personal information indirectly from third parties including health and support service providers, fundraisers, event partners, schools, tutors, families and friends.

We may collect personal information passively through observation and use of our website, through analytics which records browsing habits and activity.

We will only collect your personal information from third parties if:

  • It is unreasonable or impracticable to collect the information directly from you – for example if your family has arrived at Perth Children’s Hospital via Royal Flying Doctors Service and medical staff are supporting you. We will collect your contact information along with medical information.
We collect your personal information for a number of purposes, including:
  • Program and services administration – to provide our programs and services to you, process your donation, merchandise purchase, or registration for a program, services or event requested.
  • Quality Control – to ensure our information and services reach the people who need them, to improve and evaluate our programs and services, and to ensure the accuracy of our records.
  • Communication & Marketing – to share important updates on our programs, services and advocacy initiatives. We may use sensitive information for the purpose of direct marketing but only after we have received expressed consent to use or disclose sensitive information. For example, a family may provide us with expressed consent to share their personal family story which includes medical diagnosis information including treatment, photos of their child or children. To communicate to you about our programs, services, activities, campaigns, causes and events – as further described below.
  • Support Services – to provide you with information about our programs, services, and to assist our evaluation of and compliance reporting on our programs and services.
  • Volunteering and other support – when you apply for a volunteering role, we collect your information to select and appoint you, and communicate with you about volunteering shifts, community fundraising, advocacy and other activities where we are seeking community support.
  • Recruitment – when you apply for a job with us, we collect your information to enable us to select and appoint the best people available to join our team.
  • Other Purposes – communicating with you in relation to our operations, activities, and objectives, to verify your identity and to comply with relevant laws and regulations.

We may collect health information and other sensitive information about you in order to provide our programs and services.

For example, we may collect medical information from you in order to better understand your needs to provide accommodation at a Ronald McDonald House or provide tutoring services through the Ronald McDonald House Learning Program.

We only collect sensitive information if the collection is reasonably necessary for one or more of our activities or functions; and where permitted by law, which generally requires us to have your consent to collect that information.

If we receive personal information that we did not solicit, we will, within a reasonable period of time of receiving the information, determine whether we would have been permitted to collect the information according to the APPs.

If we determine that we have received personal information that we would not have been permitted to collect under the APPs (and the information is not contained in a Commonwealth record), we will as soon as practicable and where it is lawful and reasonable to do so, destroy the information or ensure that it is de-identified.

If we determine that we would have been permitted to collect the personal information under the APPs, we will ensure that the information is dealt with in a manner that complies with our privacy policy and the APPs.

If you chose not to provide some or all of your personal information we require, we may not be able to offer you our programs and services or be able to process your registration to an event, or provide a donation receipt.

Where practicable, you will be given the opportunity to engage with us on an anonymous basis or using a pseudonym.

For example, you are able to make a donation anonymously, but if you want to receive a receipt, we need to collect your contact details.

It may not be possible for us to provide you a service without the knowledge of your identity.

For example, we are unable to provide you with accommodation services anonymously or under a pseudonym – for example to fulfil our responsibilities under our Safeguarding Children and Young People Policy.

We take reasonable steps to protect all of the personal information that we hold from misuse, interference and loss, and from unauthorised access, modification and disclosure.

Your personal information will be stored on a multi authenticated electronic database which is maintained by a cloud hosting service provider and a third-party database storage service provider. Backups of electronic information are also stored in cloud hosting service providers.

Hard copy information stored in our offices is minimal and secured in authorised office areas only. Any personal information in hard copy form not actively used is destroyed by secure means.

Where personal information is stored with a third party (for example through third party fundraising websites), we have arrangements which require those third parties to maintain the security of the information.

We take reasonable steps to protect your personal information against a data breach.

We have a data breach response plan in place that sets out how we contain, assess, notify and review any data breach.

We are a not-for-profit organisation that provides programs and services for the benefit of Western Australian families with ill or injured children and the community, and we may from time to time use your personal information to contact you with direct marketing.

For example, if you register for a fundraising event, we may communicate with you in the future via email, mail, phone or online advertising to promote one of our key Ronald McDonald House WA events we think you may be interested in or share updates on how your support has made a difference.

As a charity we rely on donations from the public, so we may contact those who have used our programs and services in the past or persons who have indicated that they may wish to assist us in the future, to seek funds to further enable us to continue to provide our programs and services.

No. We will never share your personal information with a third party (including other charitable organisations, or other Ronald McDonald House entities) for marketing purposes. We will only use your personal information to communicate with you about our own events, programs, services and initiatives.

Anytime we use your personal information to send you marketing and promotional information by email, mail, or telephone, we will provide you with an opportunity to opt-out of receiving such information (unsubscribe). By not opting out, we will assume we have your implied consent to receive similar information and communications in the future. We will always ensure that our opt-out notices are clear and easy to take up. However if you ever have trouble opting out of communications from us, or would like to opt out of all direct marketing at any time, please contact us at [email protected] or call (08) 9346 9000.

When you visit our website, we may use software embedded in our website to place small data files (cookies) on your computer or other device to collect information about which pages you view and how you reach them, what you do when you visit a page, the length of time you remain on the page, and how we perform in providing information to you.

A cookie does not identify you personally, but it does identify devices. You can set your browser to notify you when you receive a cookie, and this will provide you with an opportunity to either accept or reject it in each instance.

We may gather your IP address as part of our business activities and to assist with any operational difficulties or support issues with our services. This information does not identify you personally.

We use Google Analytics features based on remarketing, analytics, demographics and interest reporting is provided to us. We use this information to learn about our audiences. This information helps us optimise our content based on your past visits and helps us to continually improve our site to make it easier for you to find information. Google also receives this information. Google Analytics does not personally identify you unless you consent.

If you would like to opt out of customised Google Display Network services and Google Analytics for Display Advertising you can use Ad Settings. You can also use the Google Analytics Optout Browser Addon so you are not tracked into Google Analytics.

We also use pixel tracking, which indicates when your computer has visited pages on our websites. As with cookies, a pixel does not identify you personally, only the location of your device and the type of device you are using.

We may need to disclose your personal information to other organisations in order to carry out our normal business activities.

The types or organisations we may need to disclose your information to include:

  • External support services: health care professionals, lawyers, authorities, counsellors, funders, volunteers, service providers, agencies and other not-for-profits that provides support services.
  • Contractors and service providers: who perform services on our behalf, such as mailing houses, printers, information technology service providers and database contractors.
  • Ronald McDonald House Australia and other Ronald McDonald Houses within Australia.

There maybe times when required where there may be a need for us to disclose personal information to an overseas recipient. An example maybe Ronald McDonald House in the US.

This may occur, for example where data is being stored and accessed by way of cloud computing software and other electronic means.

You may request access to your personal information by making a request in writing to our privacy officer:

Privacy Officer
Ronald McDonald House Western Australia
21 Monash Ave, Nedlands, WA, 6009
Email: [email protected]

We will, upon receiving your request, and subject to appliable privacy laws, provide you with access to your personal information that is held by us. However, we request that in your written advice that you clearly identify yourself and the type(s) of information you are requesting access to.

We will deal with your request to provide access to your personal information within 30 days and depending on the type of information you request we may charge you for any reasonable cost which we incur to supply you with access to this information.

Your rights to access personal information are not absolute and privacy laws dictate that we are not required to grant access to certain circumstances such as where:

  • access would pose a serious threat to life, safety or health of any individual, or to public health or public safety
  • access would have an unreasonable impact on other individuals’ privacy
  • the request is frivolous or vexatious
  • denying access is required or authorised by a law or a court or tribunal order
  • access would be unlawful, or
  • access may prejudice commercial negotiations, legal proceedings, enforcement
    activities or appropriate action being taken in respect of a suspected unlawful activity or serious misconduct.

If we refuse to grant you access to your personal information, we will provide you with reasons for that decision (unless it is unreasonable to do so).

We take reasonable steps to ensure that your personal information is accurate, up to date and complete.

If you believe that any information that we hold about you is inaccurate or out of date you can ask us to update or correct the personal information we hold about you at any time.

We will take reasonable steps to verify your identity before granting access or making any corrections to your information. We also have obligations to take reasonable steps to correct personal information we hold when we are satisfied that it is inaccurate, out of date, incomplete, irrelevant or misleading for the purpose for which it is held.

You can request correction of your personal information at any time by contacting us in writing:

Privacy Officer
Ronald McDonald House Western Australia
21 Monash Ave, Nedlands, WA, 6009
Email: [email protected]

We will endeavour to respond and complete your personal information update within a reasonable timeframe.

If you have any queries or would like to make a complaint relating to our Privacy Policy or the manner in which we handle your personal information, please contact our Privacy Officer on (08) 9346 9000 or by email to [email protected].

We endeavour to respond to complaints and queries within 30 working days of receiving them.

If you are dissatisfied with our response, you may refer the matter to the Australian Information (Privacy) Commissioner (see www.oaic.gov.au).

Who can you contact for more information?

For further information about our Privacy Policy or how we handle your personal information, please contact our Privacy Officer at:

Privacy Officer
Ronald McDonald House Western Australia
21 Monash Ave, Nedlands, WA, 6009
Email: [email protected]

Ronald McDonald House Western Australia