Privacy Policy

Privacy Policy

Nadia & Alf Taylor Foundation (NATF)

Table of Contents

  1. Privacy Statement
  2. Personal Information
  3. Collection and Use of Personal Information
  4. Disclosure of Personal Information to Third Parties
  5. Storage and Security of Personal Information
  6. Your Rights and Controlling Your Personal Information
  7. Website
  8. Direct Marketing
  9. What Happens If We Can’t Collect Your Personal Information?
  10. Data breaches
  11. Changes to This Privacy Policy
  12. Related Documents
  13. Complaints and Contact Information

Section 1: Privacy Statement

This Privacy Policy outlines how Nadia & Alf Taylor Foundation (NATF) will collect, use, disclose, and safeguard your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Protecting your personal information is essential to NATF’s vision to build the community that educated poverty out of existence.

It applies to everyone who interacts with us—whether you’re a member, Board Director, supporters, visitor, volunteer, contractor, or staff member—and covers all our activities, including those on our website and social media platforms.

Section 2: Personal Information

What is Personal Information?

“Personal information” has the meaning given in the Privacy Act 1988 (Cth). In general terms, it refers to any information or opinion about an individual who is identified or reasonably identifiable. This includes, but is not limited to:

  • Name
  • Mailing or street address
  • Email address
  • Telephone number
  • Age or birth date
  • Payment card information
  • Images of you or stories about you (if you visited our schools/ programs or attended one of our events)
  • Feedback about your experience engaging with us/ relating to our events

What is Sensitive Information?

“Sensitive information” is a subset of personal information that is subject to stricter handling requirements under the Privacy Act. It includes information or opinions about an individual’s:

  • Racial or ethnic origin
  • Membership of a trade union or professional association
  • Sexual orientation or practices
  • Criminal record

We may collect sensitive information for the purposes of advocacy, research, or reporting, particularly to understand the demographics of people responding to surveys, or participating in consultations or focus groups. We will not disclose sensitive information without your express consent, unless required or authorised by law.

Section 3: Collection and Use of Personal Information

We collect, hold, use and disclose personal information so that we can perform our activities and functions.

We may collect personal information when you:

  • Visit our website
  • Fill in forms online or in hard copy
  • Make enquiries about our activities or request information
  • Participate in our advocacy, education, or research activities
  • Respond to surveys, consultations or focus groups
  • Share your story or experiences with us
  • Participate in events we organise
  • Contact us via phone, email, post, social media, or in person

We may use your personal information to:

  • Communicate with you
  • Inform our policy, advocacy and research work
  • Improve our activities and website
  • Maintain internal records and administrative functions
  • Comply with legal obligations and reporting requirements
  • For the immediate reason for which you have given it: for example, to enable us to process your request (eg. gift, payment, registration, subscription, change of details) including issuing you with a receipt
  • To maintain contact with you about our work: report back to you about our work in the field, encourage you to learn about and act on poverty and justice issues, or let you know about other opportunities to give financially or what our partner organisations are doing (unless you have specifically asked us not to)
  • Consider applications for employment or volunteering
  • Any other purpose related to our work

Wherever possible, we will seek your prior consent before using or disclosing your personal information for any secondary purpose, unless such use is reasonably expected or required by law.

Section 4: Disclosure of Personal Information to Third Parties

We don’t disclose your personal information to other organisations except for our core business purposes.

We may disclose personal information to:

  • Our staff members for internal purposes
  • Third-party contractors or service providers who assist us with IT systems, website hosting, communications, and administrative support
  • Specific organisations for authorised purposes, such as travel organisers, lodging reports or submissions, where you have provided express consent

Where information is shared with third parties, we take reasonable steps to ensure they maintain the confidentiality of your personal information and use it only for the purposes for which it was disclosed.

We will not sell, rent, or trade your personal information to any third party.

Section 5: Storage and Security of Personal Information

We are committed to ensuring that the personal information we collect is stored securely and protected from misuse, interference, loss, and unauthorised access, modification, or disclosure.

How we store your information

Most of our electronic records are stored on secure cloud-based servers located in Australia. These systems are protected by:

  • Secure Access Controls via user name, complex password and Multifactor Authentication
  • Security plug-ins
  • Regular data backups, including on secondary secure cloud-based servers

Access to personal information is restricted to authorised personnel only.

Retention and disposal

When your personal information is no longer needed for the purpose for which it was collected, we will take reasonable steps to destroy or permanently de-identify it. However, some information may be retained for a minimum period as required by law or funding agreements.

Section 6: Your Rights and Controlling Your Personal Information

Choice and Consent

By providing personal information to us, you consent to its collection, use, and disclosure in accordance with this Privacy Policy. You are not required to provide personal information, but if you choose not to, it may affect your ability to engage with us, our activities or communications.

Access and Correction

You may request access to the personal information we hold about you at any time. We will provide access unless there is a legal reason to withhold it.

If you believe any information we hold is inaccurate, incomplete, or outdated, you may request a correction. If we do not agree with the correction, we will add a note to your record indicating your disagreement.

We may require identification before releasing or amending your information. Most requests will be handled free of charge, though a reasonable fee may apply if the request involves substantial effort.

Restricting Use

You may choose to restrict the collection or use of your personal information. For example, you can opt out of receiving direct marketing communications at any time by contacting us or using the unsubscribe options provided.

Information from Third Parties

If we receive personal information about you from a third party, we will protect it as described in this Privacy Policy.

There may be circumstances in which we may require you to provide personal information about someone else to us, including, but not limited to instances which support our functions and activities, such as developing a case study or quoting a person. In such cases, you must provide the person’s written consent to do so.

Section 7: Website

Our website information is stored on secure cloud-based servers located in Australia. These systems are protected by:

  • Access control procedures
  • Strong password protection
  • Firewall and security plug-ins
  • Regular data backups

Cookies

Cookies are small summary files placed on your computer or device which enable website owners to automatically recognise your computer and greet you each time you visit their website. We do use cookies on our website to track or store personal information. When we embed content from third-party websites (such as YouTube), cookies from those platforms may be placed on your device.

Most browsers are set by default to accept cookies. If you do not wish to accept cookies, you can adjust your browser settings to block them. Please note that rejecting cookies may affect how embedded third-party content is displayed.

Third-Party Links

Our website may contain links to other websites operated by third parties. These websites are not governed by this Privacy Policy, and we are not responsible for their privacy practices or content. We recommend reviewing the privacy policies of any external websites you visit.

Section 8: Direct Marketing

We may send you direct marketing communications that we believe may be of interest to you. These may include updates about our programs, advocacy work, news, upcoming events, and opportunities to participate in consultations or campaigns.

These communications may be sent via email or SMS (text messages). You may opt out of receiving marketing communications at any time by contacting us directly, or using the unsubscribe facility provided in the communication.

We do not use third-party contractors to send marketing communications, and we do not share your personal information with other organisations for their own direct marketing purposes.

Section 9: What Happens If We Can’t Collect Your Personal Information?

If you choose not to provide personal information, we may be unable to:

  • Provide you with information about our activities
  • Tailor our communications and engagement to your preferences
  • Issue a tax receipt
  • Send you information about a student to whom you provide a scholarship

Where possible, we will allow you to interact with us anonymously or using a pseudonym. For example, if you contact us with a general enquiry, we will not require your name unless it is necessary to respond appropriately. However, for most of our functions and activities, we usually require your name and contact information.

Section 10: Data breaches

A data breach happens when personal information that is held by NATF has been lost or accessed or disclosed without authorisation. Such as when a device is lost or stolen, a database is hacked, or personal information is mistakenly given to the wrong person.

If we suspect a data breach, we will:

  • analyse if an incident has or is occurring
  • assess the scope, impact and severity of the incident
  • implement a resolution plan
  • identify and notify affected stakeholders
  • confirm when the incident has been resolved

We will also notify the Office of the Australian Information Commissioner (OAIC) if a data breach involving personal information is likely to result in serious harm to one or more individuals or we have not been able to prevent the likely risk of serious harm with remedial action.

Section 11: Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legislation, organisational practices, or the way we engage with individuals and communities.

Any changes to this Privacy Policy will be published on our website. We encourage you to check our website periodically to ensure you are aware of the most current version.

Section 12: Related Documents

  • Privacy Act 1988 (Commonwealth)
  • Australian Privacy Principles
  • Any applicable grant or funding agreements

Section 13: Complaints and Contact Information

If you have any questions about this privacy policy, any concerns or wish to make a complaint regarding the treatment of your privacy or a possible breach of your privacy or the Australian Privacy Principles, please email us at:

Email: hello@nadiaandalftaylorfoundation.org

Postal Address: 24 Carter Street, Sydney Olympic Park, NSW 2127, Australia

We will treat your requests or complaints confidentially. Our representative will contact you within a reasonable time after receipt of your complaint to discuss your concerns and outline options regarding how they may be resolved. We will aim to ensure that your complaint is resolved in a timely and appropriate manner.

If you indicate a preference for a method of communication and we need to communicate with you, we will endeavour to use your preferred method of communication whenever practical to do so.

If you are dissatisfied with our response, please email our Chief Executive Officer:

dave.everett@nadiaandalftaylorfoundation.org

You also have the right to make a complaint to the Office of the Australian Information Commissioner (OAIC) by phoning 1300 363 992 or by emailing enquiries@oaic.gov.au.