The SALT Foundation is committed to providing quality services and respecting your rights. Your right to privacy and confidentiality will be recognised, respected, and protected in all aspects of your contact with us. This statement outlines our ongoing obligations to you regarding how we manage your Personal Information.
The SALT Foundation complies with the requirements of the Privacy Act 1988 as well as: Privacy and Personal Information Protection Act 1998 (NSW), Health Records and Information Privacy Act 2002 (NSW), Privacy Committee of South Australia Information, Privacy Principles—PC012 Information Privacy Principles Instruction (SA), Privacy and Data Protection Act 2014 (Vic), Health Records Act 2001 (Vic), Information Privacy Act 2009 (Qld).
What is Personal Information, and Why Do We Collect It?
Personal Information is information or an opinion that identifies an individual. Personal Information includes Health Information, which is information about the physical or mental health or disability of an individual.
Examples of Personal Information we collect include but are not limited to:
- Contact details for participants and their representatives
- Details for emergency contacts and people allowed to act on behalf of participants
- Participants’ health status and medical records
- Medication records
- Service delivery intake, assessment monitoring and review information
- Assessments, reviews, and service delivery records
- External agency information
- Feedback and complaints
- Incident reports
- Consent to photograph for marketing purposes
- Consent forms
We collect your personal information in many ways, which are including but not limited to: interviews, correspondence, by telephone, by email, via our website, from other publicly available sources and from third parties.
The SALT Foundation will only request and keep Personal Information that is necessary to:
- assess your eligibility for support
- provide safe and responsive support
- monitor the supports provided and
- fulfil contractual and other requirements to provide non-identifying data and statistical information to government agencies
When we collect Personal Information, we will explain to you why we are collecting the information and how we plan to use it.
Where reasonable and practicable to do so, we will collect your Personal Information only from you. However, in some circumstances, we may be provided with information by third parties (such as other disability services). In such cases, we will take reasonable steps to ensure that you are made aware of the information provided to us by the third party.
Disclosure of Personal Information
We will only disclose your Personal Information:
- to prevent or lessen a serious and imminent threat to the life or health of you or another person
- to outside agencies with your or your representative’s permission
- with written consent from a person with lawful authority or
- when required by law, or to fulfil legislative obligations such as mandatory reporting
Security and Destruction of Personal Information
We will store your Personal and Health Information in a manner that reasonably protects it from misuse and loss and from unauthorised access, modification or disclosure.
When your Personal and Health Information is no longer needed for the purpose for which it was obtained, we will take reasonable steps to destroy or permanently de-identify it.
We will keep and dispose of your Personal and Health Information under our Privacy and Confidentiality Policy and Procedure [or equivalent].
Access to Your Personal Information
You may access the Personal or Health Information we hold about you, including to update or correct it, subject to certain exceptions. If you wish to access your Personal or Health Information, please speak to a staff member.
In order to protect your Personal or Health Information we may require identification from you before releasing the requested information.
You have the right to:
- request access to personal information we hold about you
- access this information and
- make corrections if you consider the information is not accurate, complete, or up to date
However, access may be denied in part or in total, where:
- the request is frivolous or vexatious
- providing access would have an unreasonable impact on the privacy of other individuals
- providing access would be likely to prejudice an investigation of possible unlawful activity
- providing access would pose a serious and imminent threat to the life or health of any individual and
- denying access is required or allowed by or under the law.
We aim to address all requests to access or correct information within 5 working days. We will not charge any fee for your access request, but may charge an administrative fee for providing a copy of your information.
Maintaining the Quality of your Personal Information
It is an important to us that your information is up to date. We will take all reasonable steps to make sure that your Personal Information is accurate and complete. If you find that the information we have is not up to date or is inaccurate, please advise us as soon as practicable so we can update our records and ensure we can continue to provide quality services to you.
Complaints and Enquiries
If you have any queries or complaints about this Privacy Statement, please lodge them:
- directly with a staff member, either verbally or
- by email to: firstname.lastname@example.org
- by phone on: 1300 777 258
- in writing to: 101 Ramu Parade, Heidelberg West 3081 VIC
Documents relevant to this policy:
- Participant Rights and Responsibilities Policy and Procedure
- Records and Information Management Policy and Procedure
- Privacy and Confidentiality Policy and Procedure
- Feedback and Complaints Policy and Procedure
Monitoring and Review
This Privacy Statement, along with The SALT Foundation’s Privacy and Confidentiality and Records and Information Management policies and procedures, will be formally reviewed at least annually by the Management Team. Formal reviews will include participant, staff, and other stakeholder feedback.