aecom

GOOD COMPANY

Karma Currency Foundation Limited (Karma Currency) is committed to protecting the privacy of any personal information we collect from and about you and its Clients. Karma Currency has implemented measures to comply with its obligations under the Privacy Act 1988 (Cth) (Act) the National Privacy Principles set out in the Act (NPPs).

This policy explains how we deal with personal information we collect and store (Personal Information).

1) Why does Karma Currency collect Personal Information?

1.1 Karma Currency, through its website at URL http://www.goodcompany.com.au (Website), provides a portal that matches people wishing to volunteer with a community group and community groups searching for volunteers with people registered on the Website (Services). The volunteers and community groups (Clients) register their interest through the Website and Karma Currency may provide a Client’s details to another Client.

1.2 To enable Karma Currency to implement, manage, coordinate and procure the provision of the Services for its Clients, it may be required to collect, store, use and disclose Personal Information.

2) What type of information is included in Personal Information?

2.1 Personal Information includes information or an opinion (including information or an opinion forming part of a database), whether true or not, and whether recorded in a material form or not, about a person whose identity is apparent, or can reasonably be ascertained, from the information or opinion

2.2 A Client’s Personal Information may include:

(a) personal details and contact information (including name, age, gender, ethnic background, address, telephone numbers and email addresses); and

(b) employment history, level of education, skills, personal and professional references, (note: Please advise any other information that you require from users)

but only to the extent necessary for the provision of the Services or otherwise as permitted under an Agreement.

3) How does Karma Currency collect Personal Information?

3.1 Karma Currency will only collect a person’s Personal Information:

(a) by lawful and fair means;

(b) from the person directly where reasonable and practicable to do so; and

4) Do you have to provide Your Information to Karma Currency?

4.1 Providing Personal Information to Karma Currency is voluntary. However, if a Client can’t or won’t provide Personal Information to Karma Currency as it reasonably requires, they may be unable to receive information or Services.

5) How does Karma Currency use and disclose Personal Information?

5.1 Subject to any restrictions in this Privacy Policy, and at all times having regard to the interests and protection of Clients, Karma Currency may use and disclose Personal Information:

(a) to determine a Client’s eligibility to receive Services;

(b) to implement, manage and facilitate the provision of Services; and

5.2 Karma Currency may be required to disclose Personal Information for the purposes of assessing the effectiveness and delivery of Services, to investigate a potential security breach or complaint in respect of Personal Information held by Karma Currency. In such circumstances, Karma Currency will ensure that to the greatest extent possible, Personal Information is disclosed in a way that will not identify you (that is, Personal Information will be ‘de-identified’).

5.3 Other than as described in this privacy policy, Karma Currency will not disclose Personal Information to any third party unless:

(a) you authorise Karma Currency to do so;

(b) your safety or the safety of others in the community is at risk; or

6) Disclosure of Your Information outside of Australia

Karma Currency will only transfer Personal Information outside of Australia if such disclosure is necessary, and only to the extent required, to provide Clients with the Services, having regard at all times to the interests and protection of Clients.

7) Is my Personal Information secure?

Karma Currency takes all reasonable steps to ensure all Personal Information it holds is protected against loss and unauthorised access, use, modification, disclosure or any other misuse, including:

(a) where Personal Information is held in paper form, storage in lockable physical security;

(b) where Personal Information is held in digital form, password, firewall and server protection;

(d) ensuring any person who Karma Currency authorises to access Personal Information is made aware of, and undertakes and agrees in writing:

(1) to observe Karma Currency’s obligations under:

(A) this privacy policy; and

(B) the Act, including all NPPs (where applicable); and

(2) that their failure to comply with the obligations described in clause 7(d)(1) may be a criminal offence, and in the case of Karma Currency employees, may also result in disciplinary action being taken against them.

8) Access and correction

2.1 You may access Your Information held by Karma Currency at any time by emailing our Privacy Officer, [enter name and email] and specifying the information you wish to access.

2.2 Subject to any restrictions, either under the Act or otherwise, with which it must comply, Karma Currency will provide you with a copy of your Personal Information as soon as reasonably possible after receiving your request.

2.3 If you believe that Your Information held by Karma Currency is not accurate, complete or up-to-date, please contact Karma Currency’s Privacy Officer and Karma Currency will endeavour to update its records as soon as possible upon receiving your request.

9) Changes to this privacy policy

Karma Currency reserves the right to change this Privacy Policy from time to time. This Privacy Policy was last updated in July 2012.

10) Need more information?

For further information regarding this Privacy Policy or any other steps Karma Currency has taken to protect your Personal Information or privacy, please contact Karma Currency’s Privacy Officer.