- 1. Introduction
- 2. Personal Information handling practices
- 3. Complaints
- 5. Contact us
Your privacy is important to us. We are bound by the Privacy Act 1988 (the Privacy Act) and the Australian Privacy Principles (APPs). The APPs regulate the handling of Personal Information by Australian government agencies and businesses under the Privacy Act.
The following Carer Gateway services have separate privacy policies:
- the “Self-Guided Coaching” policy
- the “Community Forum” policy
- the “Phone Counselling” policy
- the Carer Gateway Contact Centre policy (which is available by phoning the Contact Centre on 1800 422 737).
The Carer Gateway website is provided under the DSS policy called the Integrated Carer Support Service (ICSS). More information on ICSS is available on the ICSS webpage.
1.2 The Privacy Act
The Privacy Act 1988 (the Privacy Act) regulates how federal and ACT public sector agencies and certain private sector organisations can collect, hold, use and disclose Personal Information, and how you can access and correct information about you held by those agencies and organisations.
‘Personal Information’ is information in any form that can reasonably identify a living person.
The Privacy Act applies only to information about individuals, not to information about corporate entities such as businesses, firms or trusts. Detailed information on the Privacy Act can be found on the Office of the Australian Information Commissioner (‘OAIC’) website.
1.3 Carer Gateway website and privacy
In performing Our functions We may collect, hold, use or disclose your Personal Information. We take privacy seriously and will only collect, hold, use and disclose your Personal Information in accordance with the Privacy Act.
If We do not receive Personal Information about you the Privacy Act will not apply.
1.4 Australian Government Agencies Privacy Code
1.5 Remaining anonymous or using a pseudonym
Generally, members of the public will have the right to remain anonymous or adopt a pseudonym when dealing with Us. However, it is not always possible to remain anonymous or adopt a pseudonym in order for Us to interact with you effectively, and We will inform you when it is required for you to use your correct name.
1.7 Information held by contractors of DSS
Under the Privacy Act, DSS is required to take contractual measures to ensure contracted service providers (including sub-contractors) comply with the same privacy requirements applicable to DSS.
2. Personal Information handling practices
2.1 Collection of Personal Information
Personal Information about you may be collected by Us from you. In some circumstances a third party may provide information to Us about you. From time to time Personal Information is provided to Us by members of the public without being requested by Us. Information is usually collected directly by Us. We generally use online forms, to collect your information.
We collect and hold a range of Personal Information in records that include:
- information that you provide on online forms;
- complaints (including privacy complaints) and feedback provided to Us and;
- requests made to DSS under the Freedom of Information Act 1982 (Cth).
We will not ask you for any Personal Information which We do not need. The Privacy Act requires that We only collect information for purposes that are reasonably necessary for, or directly related to, the functions or activities of the Carer Gateway website.
When We collect Personal Information, We are required under the Privacy Act to notify you of a number of matters. These include the purposes for which We collect the information, whether the collection is required or authorised by law, and any person or body to whom We usually disclose the information. We provide this notification by issuing separate privacy notices on Our paper-based forms and website areas related to particular programs and activities.
2.2 Kinds of Personal Information that We collect and hold
In providing the Carer Gateway website We may collect and hold the following kinds of Personal Information (which will vary depending on the context of the collection):
- name, phone number, and email address;
- complaints details that may identify you.
On occasions, sensitive information about you may also be collected or held, even if we do not request it. For instance, we cannot prevent you giving this sensitive information in your written feedback.
2.3 How We collect and hold Personal Information
We collect Personal Information through a variety of different methods including:
- electronic forms (including online forms);
- email communications; and
- Carer Gateway branded social media websites and accounts.
We hold Personal Information in electronic records. Storage of personal information (and the disposal of information when no longer required) is managed in accordance with the Australian Government records management regime, including the Archives Act 1983, Records Authorities and General Disposal Authorities. This ensures your personal information is held securely.
2.4 Purposes for which Personal Information is collected, held, used and disclosed
We collect and hold Personal Information for purposes relating to the Carer Gateway functions and activities including:
- performing DSS’ legislative and administrative functions;
- complaints and feedback management;
- investigations and audits; and
- management of correspondence with the public.
We use and disclose Personal Information for the primary purposes for which it is collected. You will be given information the primary purpose of collection at the time the information is collected from you or as soon as possible afterwards.
We will only use your Personal Information for secondary purposes where it is able to do so in accordance with the Privacy Act.
We undertake written Privacy Impact Assessments for all high privacy risk projects that involve new or changed ways of handling Personal Information.
2.5 Data security and integrity
Access to Personal Information held within Our organisations is restricted to authorised people who are Our employees or contractors. We take all reasonable steps, including through contractual measures, to protect the Personal Information We hold and against loss, unauthorised access, use, modification, or disclosure.
Electronic and paper records containing Personal Information are protected in accordance with Australian Government security policies, including the Australian Government Information Security Manual.
We regularly conducts audits to ensure We adhere to our protective and computer security policies.
We take all reasonable steps to ensure that the Personal Information it holds is accurate, up-to-date, complete, relevant, and not misleading.
2.6 Access and correct Personal Information
You have a right under the Privacy Act to access Personal Information We hold about you.
You also have a right under the Privacy Act to request corrections to any Personal Information that We hold about you if you think the information is inaccurate, out-of-date, incomplete, irrelevant or misleading.
It is also possible to access and correct documents held by Us under the Freedom of Information Act 1982 (the FOI Act). For information on this, please contact the DSS FOI Coordinator (contact details are available on the DSS Freedom of Information webpage).
2.7 Accidental or unauthorised disclosure of Personal Information
We will take seriously and deal promptly with any accidental or unauthorised disclosure of Personal Information.
We are subject to the Notifiable Data Breaches Scheme under the Privacy Act, and We will act in accordance with the requirements of the Scheme and the guidance of the OAIC in assessing and responding to suspected notifiable data breaches. Where a breach of Personal Information occurs that is likely to cause serious harm to individuals, We will notify the OAIC and affected individuals as required.
2.8 Website analytics
If you use the Carer Gateway website to read or download information, We record a range of technical information which does not reveal your identity. This information includes your IP or server address, your general locality and the date and time of your visit to the website. This information is used for service improvement and policy evaluation purposes. No attempt is made to identify you through your browsing other than in exceptional circumstances, such as an investigation into the improper use of the Carer Gateway website.
2.9 Supplementary online services
Some functionality associated with the Carer Gateway website is not run by Us, and third parties may capture and store your Personal Information outside Australia. These third parties include (but are not limited to) Facebook, YouTube, MailChimp, SurveyMonkey, Twitter and Google, and they may not be subject to the Privacy Act at all or in the same way as Us. We are not responsible for the privacy practices of these third parties and encourages you to examine each website's privacy policies and make your own decisions regarding their reliability.
Cookies are used to maintain contact with a user through a website session. A cookie is a small file supplied by Us, and stored by your web browser software on your computer when you access the Carer Gateway website. Cookies allow Us to recognise an individual user, as they us the Carer Gateway website. Cookies do not store any Personal Information. You may disable cookies by adjusting the settings on your web browser, but if you do this you may not be able to use the full functionality of the Carer Gateway website.
The Carer Gateway website contain links to other websites. We are not responsible for the content and privacy practices of other websites and encourage you to examine each website's privacy policies and make your own decisions regarding the reliability of material and information found.
2.12 Electronic communication
There are inherent risks associated with the transmission of information over the Internet, including via email. You should be aware of this when sending Personal Information to Us via email or via the Carer Gateway website. If this is of concern to you then you may use other methods of communication with Us, such as post or phone (although these also have other risks associated with them).
2.13 Disclosure of Personal Information overseas
3.1 How to make a complaint
3.2 Process for handling complaints
We will respond to your complaint or request promptly if you provide your contact details. We are committed to quick and fair resolution of any complaints and will ensure your complaint is taken seriously. You will not be victimised or suffer negative treatment if you make a complaint.
3.3 How to complain to the OAIC
You also have the option of contacting the OAIC if you wish to make a privacy complaint against Us and if you are not satisfied with how We have handled your complaint in the first instance. The OAIC website contains information on how to make a privacy complaint.
If you make a complaint directly to the OAIC rather than to Us , the OAIC may recommend you try to resolve the complaint directly with Us in the first instance.
5. Contact us
Please use the details below if you wish to:
- query how your Personal Information is collected, held, used or disclosed;
- obtain access to or seek correction of your Personal Information; or
- make a complaint about a breach of your privacy.
Telephone: 1800 634 035
Post: DSS Feedback, GPO Box 9280, Canberra, ACT 2601.