Privacy Policy
Effective Date: September 1, 2023
1.2 How LoveHeart Collects and Uses Personal Information
1.3 Who LoveHeart Shares Your Personal Information With
1.4 Storing and Securing Personal Information
1.5 Retaining Personal Information
1.6 Accessing, Correcting, and Deleting Your Personal Information
1.7 Data Incidents
1.8 Contact Information
1.9 Definitions
LoveHeart is committed to protecting the privacy of individuals by handling Personal Information lawfully and transparently. This Privacy Policy outlines how LoveHeart collects, uses, stores, and discloses Personal Information in accordance with the Privacy Act 1988 (Cth) and other applicable regulations.
1.1 Purpose
This Policy ensures that LoveHeart:
-
Is transparent about the reasons for collecting and using Personal Information.
-
Only collects, uses, and discloses Personal Information necessary for its functions or activities.
-
Takes reasonable steps to secure Personal Information.
-
Ensures all handling of Personal Information complies with the Australian Privacy Principles and other legal obligations.
1.2 How LoveHeart Collects and Uses Personal Information
Personal Information refers to information that identifies or can reasonably identify an individual. The type of Personal Information collected by LoveHeart varies based on the services or activities you participate in, including:
-
Directly from you: via phone, email, secure file sharing, websites, client portals, social media, or face-to-face interactions.
-
From third parties: such as guardians, social media platforms (e.g., Facebook, Instagram, LinkedIn), or service providers (e.g., IT platform providers, police and visa check providers, marketing agencies).
Usage of Personal Information:
-
LoveHeart collects and uses the minimum amount of Personal Information necessary to provide services, meet legal obligations, and support individuals.
-
Sensitive Information (e.g., health information) is collected only with explicit consent when required.
1.3 Who LoveHeart Shares Your Personal Information With
LoveHeart takes reasonable steps to ensure that access to Personal Information is limited to those who need it. However, in certain cases, Personal Information may be shared with:
-
Service providers (e.g., IT services, marketing, fundraising agencies).
-
Third parties when necessary to fulfill legal obligations, ensure safety, or provide services.
-
External entities like the John Fawcett Foundation or overseas-based suppliers, ensuring compliance with Australian privacy laws.
1.4 Storing and Securing Personal Information
LoveHeart stores Personal Information within Australia and, where necessary, in overseas jurisdictions that have comparable privacy laws. LoveHeart applies the following security measures to protect Personal Information:
-
Technological security, including firewalls, encryption, access controls, and multi-factor authentication.
-
The use of Suppliers to store specific types of Personal Information (such as analytics and credit card information) on its behalf. Personal Information stored by Suppliers relates directly to their functions and services and is stored in accordance with the contract with these Suppliers.
1.5 Retaining Personal Information
LoveHeart retains Personal Information only for as long as required for the purposes for which it was collected or to comply with legal obligations. Once the information is no longer needed, LoveHeart will securely destroy or de-identify the personal information.
1.6 Accessing, Correcting, and Deleting Your Personal Information
You have the right to:
-
Access your Personal Information held by LoveHeart.
-
Correct inaccurate, incomplete, or outdated information.
-
Request deletion of your Personal Information, subject to legal or contractual retention requirements. To make a request, please contact LoveHeart at hello@loveheart.org. Verification of your identity will be required before processing any request.
1.7 Data Incidents
LoveHeart takes data security seriously and will investigate any incident involving unauthorised access, disclosure, or loss of Personal Information. In the event of a data breach likely to cause serious harm, LoveHeart will notify the affected individuals and report the breach to the Office of the Australian Information Commissioner (OAIC) as required by law.
1.8 Contact Information
If you have any questions or concerns regarding your privacy or wish to make a complaint, you can contact LoveHeart:
-
Email: hello@loveheart.org
-
Phone: 1800 568 343 (within Australia) or +61 3 9345 1800 (outside Australia)
For more information on lodging a privacy complaint, visit the OAIC website at oaic.gov.au.
1.9 Definitions
Client:
A person receiving support services from LoveHeart.
Donor:
An individual providing donations to LoveHeart.
OAIC:
The Office of the Australian Information Commissioner.
Personal Information: As defined in the Privacy Act 1988 (Cth), it refers to information or opinions about an identified or reasonably identifiable individual.
Sensitive Information:
Defined in the Privacy Act, including information about racial or ethnic origin, political beliefs, religious beliefs, health information, and more.
Team:
As the context requires, all employees, volunteers, and members of LoveHeart
Additional Information on Collection
Who is Collecting the Information? LoveHeart collects your Personal Information.
How We Collect Information:
-
Directly from you (e.g., website, phone, or in-person interactions).
-
From third parties (e.g., marketing service providers, publicly available sources).
-
Through website analytics, cookies, or other tracking technologies.
Why We Collect Information: We collect your Personal Information to:
-
Process donations or memberships.
-
Verify your identity.
-
Enable your participation in activities or fundraising campaigns.
-
Provide tax receipts and support services.
-
Understand your communication needs and improve our services through research and analysis.
-
Send direct marketing or tailored communications (e.g., emails, newsletters, or SMS).
You can opt out of direct marketing at any time by contacting us via hello@loveheart.org or calling 1800 568 343.
Consequences of Not Providing Personal Information: If you do not provide certain Personal Information, we may not be able to process donations, memberships, or enable participation in our activities or events.
Third-Party Disclosures: LoveHeart may share your information with third-party service providers, such as marketing agencies, IT platforms, or the Australian Taxation Office, to support operations and ensure compliance with legal obligations.