“We“, “us” and “our” means La Cura Support Coordination (ABN 78 496 685 825).  “You” and “your” means employees, participants, customers and stakeholders of La Cura.

This policy sets out how we will comply with our obligations under the Privacy Act 1988 (Cth) (Privacy Act). We are also bound by the Australian Privacy Principles (APPs), which regulate how we may collect, use, disclose and hold your personal information, and how you may access and correct personal information we hold about you.

We will ensure that all La Cura officers, employees, subcontractors and volunteers are aware of and understand our obligations and their own obligations under the Privacy Act and are provided with training to enable them to fulfil these obligations.

We will also achieve this through maintaining internal policies and processes to prevent personal information being improperly collected, held, shared/exchanged, accessed or disposed of.

You consent to us collecting, holding, using and disclosing your personal information in accordance with this policy.

The purpose of this policy is to:

• provide you with an understanding of the kinds of personal information that we collect and hold;
• clearly and concisely communicate how and when your personal information is collected, disclosed, used, held and otherwise handled by us;
• inform you about the purposes for which we collect, hold, use and disclose personal information;
• provide you with information about how you may access your personal information and seek correction of your personal information; and
• provide you with information about how you may make a complaint and how we will deal with any such complaint.

This policy applies to all La Cura employees and contracted staff (permanent, temporary and casual) employed in La Cura's divisions and service lines and relates to the management of privacy.

La Cura is committed to effectively managing risks through compliance with legislation, alignment with best practice and through a practical approach that carefully plans for and prioritises risks and balances the costs and benefits of action.

Personal information is any information or an opinion about an identified individual or an individual who can be reasonably identified from the information or opinion. Information or an opinion may be personal information regardless of whether it is true.

It includes your name, date of birth, age, gender and contact details as well as health information (which is also sensitive information). In this policy, the reference to personal information includes sensitive and health information.

We do not collect personal information unless it is reasonably necessary for, or directly related to, one of more of our functions or activities.

We do collect information about you and your interactions with us, for example, when you become an employee, purchase or use any of our services, call us or visit our website. 

Personal information collected by us will usually fall into one of the following categories:

• contact information (name, age, address, email address and telephone numbers);
• Commonwealth identifiers (e.g. CRN, TFN);
• employment information (e.g. employment history, work performance, next of kin information);
• financial information (e.g. bank account details);
• sensitive information (e.g. health or medical history); and/or
• information obtained to assist in managing participant and business relationships.

Where personal information is sensitive information, we will only collect that information where:

• it is reasonably necessary for one or more of our functions;
• we have the individual’s consent to the collection of that information; or
• we are required or authorised by law to collect the sensitive information.

We may also collect non-personal information about how you access, use and interact with the website, via website analytic tools. 

We collect, use and store your personal information so that we can:

• deliver our products and services;
• manage our relationship with you;
• contact you, for example, to respond to your queries or complaints, or if we need to tell you something important;
• comply with our legal obligations and assist government and law enforcement agencies or regulators;
• identify and tell you about other products or services that we think may be of interest to you (including for marketing and promotional purposes); and/or
• act as your employer.

If you do not provide us with your personal information, we may not be able to provide you with our services, communicate with you or respond to your enquiries. 

We will collect your personal information directly from you whenever you interact with us, such as through face-to-face discussions, over the telephone, an on-line form or portal, paper form, social media channel, or email.  Sometimes we will collect personal information from a third party or a publicly available source if it is unreasonable or impracticable to collect the personal information directly from you, such as:

• Government agencies (such as the NDIA);
• insurance companies; or
• previous employers.

When you use our website, La Cura automatically collects certain computer information by the interaction of your mobile phone or web browser with our website. Such information is typically considered non-personal information.  

This information is generally collected through the use of third-party website analytics tools, cookies, tracking and other information gathering technologies.  We do this to:

• help deliver, optimise, personalise and analyse our services, and for advertising purposes;
• analyse trends and your use of the website and other technologies and how you respond to any advertising or content;
• serve targeted advertising to you via our website or other technologies on the basis of your use and preferences; and
• administer products and services and gather demographic information about your use of the website and other technologies in order to target and personalise advertising and offers to you.

We store most information about you in computer systems and databases operated by either us or our external service providers. Some information about you is recorded in paper files that we store securely.

We implement and maintain processes and security measures to protect personal information which we hold from misuse, interference or loss, and from unauthorised access, modification or disclosure.  

These processes and systems include:

• the use of identity and access management technologies to control access to systems on which information is processed and stored;
• requiring all employees to comply with internal information security policies and keep information secure;
• requiring all employees to complete training about information security; and
• monitoring and regularly reviewing our practise against our own policies and against industry best practice.

We will also take reasonable steps to destroy or de-identify personal information once we no longer require it for the purposes for which it was collected or for any secondary purpose permitted under the APPs.

Although we take all reasonable steps to secure personal information from loss, misuse and unauthorised access, there is an inherent risk of loss of, misuse of or unauthorised access to such information. La Cura will not be held responsible for such actions where the security of the personal information is not within our control or we cannot reasonably prevent such an incident.

We will only use and disclose personal information for the primary purpose for which it was initially collected, or for purposes which are directly related to one of our functions or services.

Like many other businesses in Australia, we contract out some of our functions and rely on third party suppliers or contractors to provide specialised services (such as employment services, ‘cloud computing’, technology and data storage services, legal services, insurance broking, security services, organisations that assist with our product planning, analytics, research and development, information technology tools providing analytics and reporting services, marketing and advertising services including printers, mailing and distribution houses, or emailing services, telemarketing agencies, media organisations who assist us to communicate with you including media or social media sites and business advisors and financial services).  We may disclose personal information to external service providers so that they may perform services for us or on our behalf.

We may transfer or disclose your personal information to our related companies.

We may also disclose your personal information to others outside our group of companies where:

• we are required or authorised by law to do so;
• it is reasonably necessary for enforcement related activities conducted by, or on behalf of, an enforcement body (such as the police);
• you may have expressly consented to the disclosure or the consent may be reasonably inferred from the circumstances; or
• we are otherwise permitted to disclose the information under the Privacy Act. 

If the ownership or control of all or part of our business changes, we may transfer your personal information to the new owner. 

We will ensure that all personal information we collect, use or disclose is accurate, complete and up to date. 

You may access or request correction of the personal information that we hold about you by contacting us. 

There are some circumstances under the APPs in which we are not required to give you access to your personal information. 

We will respond to your requests to access or correct personal information in a reasonable time and will take all reasonable steps to ensure that the personal information we hold about you remains accurate, up to date and complete.  

If we do not agree to make a correction to personal information, you may provide a statement about the requested corrections and we will ensure that the statement is apparent to any users of the relevant personal information.

If we do not agree to provide access to personal information or to correct the personal information, we will provide you with written reasons for the refusal and the mechanisms available to complain about the refusal.

There is no charge for requesting access to your personal information, but we may require you to meet our reasonable costs in providing you with access (such as photocopying costs or costs for time spent on collating large amounts of material).

If you have a complaint about the way in which we have handled any privacy issue, including your request for access or correction of your personal information, you should contact us.

All complaints are to be in writing and directed to lacura.qld@outlook.com. 

• All La Cura officers, employees and sub-contractors are aware of their responsibility to comply with the Privacy Act.
• La Cura will ensure that all employees and subcontractors required to manage personal information are appropriately trained and supervised.
• La Cura will conduct regular reviews to ensure that personal information is managed correctly.
• Breaches of the Privacy Policy or personal information management processes will be dealt with appropriately.
• La Cura will provide appropriate assistance to individuals and relevant third parties to make enquiries regarding personal information management.
• Personal information will be retained according to the requirements of the Privacy Act.

From time to time, we may change our policy on how we handle personal information or the types of personal information which we hold. Any changes to our Privacy Policy will be published on our website.

You may obtain a copy of our current policy from our website or by contacting us at the contact details below.