We do this by:

Creating procedures that protect privacy about the collection, storage and disclosure of personal information; and, complying with the Australian Privacy Principles and the Privacy Act 1988 (Cth) (the Privacy Act).

This Policy applies to the Personal Information of all Infinity Coordination customers or employees, collected or held by Infinity Coordination.

Personal Information means information or an opinion (including information or an opinion forming part of a database), whether true or not, and whether recorded in a material form or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion.

Policy Guideline

This privacy policy sets out how Infinity Coordination comply with our obligations under the Privacy Act. We are bound by the Australian Privacy Principles in the Privacy Act which regulate how organisations may collect, use, disclose and store personal information, and how individuals may access, and correct personal information held by them.

Objectives

To ensure information is received, recorded, accessed and stored appropriately to maintain confidentiality; To remain compliant with:

• the Privacy Act 1988 (Cth) (as amended);
• all other relevant legislation;
• obligations imposed by Government as well as accreditation and licensing standards; and,
• any other Infinity Coordination Policies and Procedures related to the collection, storage or other use of Personal information
• To ensure that all individuals are aware of their rights in regard to privacy and confidentiality and are aware of the means to access or amend private information held about them
• To ensure that any Personal information collected is directly related to Infinity Coordination’s’ service functions or activities

Guiding Principles

• Infinity Coordination believes that individuals and communities have a right to privacy, dignity and confidentiality. This right will always be upheld through practices of sharing and providing information in a discrete manner and on a need-to-know basis;
• Infinity Coordination will always be guided by the Australian Privacy Principles;
• Where Infinity Coordination operates databases or information systems the relevant policies and procedures are to be followed for the appropriate use of Personal Information within these systems
  Infinity Coordination aims to create a workplace which is respectful, ethical and professional in all matters pertaining to confidential or private information held about an individual.
• Infinity Coordination will make available to individuals’ information about privacy rights and how to access or amend their Personal Information
• Infinity Coordination will take steps to ensure that in reasonable circumstances the privacy policy is readily available and in an appropriate form.

How we collect information

Where possible, we collect your Personal Information directly from you.

• We collect information through various means.
• We will not collect information unless it is necessary for the functions or activities of Infinity Coordination.
• If you do not want to disclose information that we have requested, please raise this with us.
• There are situations where we may also obtain Personal Information about you from a third-party source.

If we collect information about you in this way, we will take reasonable steps to contact you and ensure that you are aware of the purpose for which we are collecting your personal information and the organisations to which we may disclose your information, subject to any exceptions under the Privacy Act.

Security of Personal Information and Sensitive Information

Infinity Coordination takes reasonable steps to protect the Personal Information and Sensitive Information we hold against misuse, interference, loss, unauthorised access, modification and disclosure. These steps include password protection for accessing our electronic IT systems, securing paper files in locked cabinets and applying physical access restrictions. Only authorised personnel are permitted to access our systems and controlled premises. When Personal Information is no longer required, it is destroyed in a secure manner, or will be de-identified.

Access to and correction of personal information

If an individual requests access to the Personal Information we hold about them, or seeks to change that Personal Information, upon this request we will give the individual access, unless:

• the request does not relate to the personal information of the person making the request;
• the request would have an unreasonable impact on the privacy of other individuals;
• providing access would pose a serious threat to the life, health or safety of a person or to public health or public safety;
• providing access would create an unreasonable impact on the privacy of others;
• the request is frivolous and vexatious; o the request relates to existing or anticipated legal proceedings;
• providing access would prejudice negotiations with the individuals making the request;
• access would be unlawful;
• denial of access is authorised or required by law;
• access would prejudice an action in relation to suspected unlawful activity, or misconduct of a serious nature relating to the functions or activities of the Infinity Coordination.
• access discloses a ‘commercially sensitive’ decision making process or information; or
• any other reason that is provided for in the APPs or in the Privacy Act. Requests for access and/or correction should be made to the Managing Director.
• For security reasons, any request must be made in writing with proof of identity. This is necessary to ensure that personal information is provided only to the correct individuals and that the privacy of other persons is preserved.

In the first instance, Infinity Coordination will assume (unless otherwise informed) that any request relates to current records. These current records will include personal information which is included in databases and in paper files which may be used on a day to day basis.

We will take all reasonable steps to provide access to the information requested with 14 days of your request.

In situations where the request is complicated or requires access to a large volume of information, we will take all reasonable steps to provide access to the information requested within 30 days

We will provide access by allowing you to inspect, take notes or print outs of personal information that we hold about you.

If we deny access to information, we will set out our reasons for denying access in writing. Where there is a dispute about the right to access information or forms of access, this will be dealt with in accordance with the Infinity Coordination’s complaints procedure. More information about this process can be obtained from the Managing Director

If an individual can establish that personal information Infinity Coordination’s holds about her/him is not accurate, complete or up to date, Infinity Coordination’s will take reasonable steps to correct our records unless it is impracticable or unlawful to do so.

In the event a request for change is refused Infinity Coordination’s will set out, in writing, the reasons for refusal and the mechanism by which you can complain. We will not charge an individual for making the request or correcting the information.

Complaints Procedure

If you have a complaint about Infinity Coordination’s privacy practices or our handling of your Personal Information or Sensitive Information, you may notify our Managing Director/s. All efforts will be made to address complaints and achieve an effective resolution of your complaint within a reasonable timeframe. In most cases this will be 30 days or as soon as practicable. However, if the matter is complex, the resolution of the complaint may take longer. All complaints and outcomes will be recorded. If an anonymous complaint is received, we will note the issues raised and where appropriate, investigate and resolve them appropriately.

Reviewing this Privacy Policy

Infinity Coordination will review, amend and/or update this policy from time to time as seen as appropriate.