Privacy Policy

Pius X Aboriginal Corporation (“Pius X”) respects and promotes the privacy of our community, clients, families, staff and partners. We are committed to handling personal information safely, respectfully and in accordance with the Privacy Act 1988 (Cth) (‘the Privacy Act’).

This Privacy Statement explains how we collect, use, store and share personal information when you access our services, programs or websites.

Principles

Our privacy culture promotes best practice in handling personal information that is aligned with our community’s expectations and values, respects Aboriginal and Torres Strait Islander Ways of Knowing, Doing and Being, and is grounded in principles of Indigenous Data Sovereignty.

We value the trust our community places in us to handle their personal information safely and respectfully and we aim to make information about privacy at Pius X easy to find and understand.

Our privacy culture is consistent with the Australian Privacy Principles and the Privacy Act and supports our ethical, relational and cultural obligations to our community.

We have systems in place that support us to know what personal information we hold, where we hold it, and how we keep it safe and secure.

In all that we do, Pius X strives to take a ‘privacy by design’ approach, ensuring privacy and personal information handling is considered as part of all new developments and our privacy processes are regularly reviewed to ensure they are consistent with applicable legislation and our community’s expectations and values.

We aim to ensure that everyone who is engaged by, with or for Pius X understands understands their obligations in relation to protecting and respecting the privacy and handling the personal information of our Mob.

What is personal information?

Personal information is any information or opinion, in any form, whether or not it is true, about an identified individual or an individual who is reasonably identifiable. This includes information such as your name, date of birth, address, and a photo where your face is clearly visible.

Pius X’s privacy policy describes how we protect the personal information we collect from our communities.

Who this applies to?

This statement applies to people who:

use our Clinics, programs, business units and other initiatives
attend our Pre-School
attend or access our residential rehabilitation service
apply for employment or volunteer roles
visit our website or contact us

For consistency, we refer to all people who use our services as service users.

Why do we collect, use, hold and share personal information?

Pius X Aboriginal Corporation collects personal information so we can deliver safe, respectful and effective services to our mob.

The main purpose of collecting, using, holding and sharing your information is to provide you with the care, support, education or other services you have asked for or been referred to.

We may also use your information for activities directly related to operating our organisation, such as:

coordinating your care or support across services
referrals to other service providers
funding, Medicare or other claims and payments
service planning, quality improvement, audits and accreditation

Where possible, we use de-identified information for reporting, evaluation and service improvement activities.

What information we collect

Depending on the service or program you access, we may collect:

Identity and contact details – such as your name, date of birth, address and contact details
Next of kin and emergency contacts, where relevant
Service-related information relevant to supporting you or your family (for example medical history, assessments or case notes)
Information you provide via our websites, forms, emails or phone calls
Website usage information, such as cookies or analytics data

We only collect information that is reasonably necessary for our services and functions.

How we collect information

Pius X may collect information:

directly from you
when you register with, are referred to, or attend our services or programs
when you complete forms, bookings or referrals
when you contact us by phone, email, website or social media
when you apply for jobs or volunteer opportunities with us, new employees or volunteers are onboarded and existing employees or volunteers update their personal information.
When community members attend health promotion events, community events, training, conferences and other events or gatherings organised by us
During general business activities, such as responding to enquiries and feedback, funding and contract arrangements, procuring services, and other interactions with our associated entities
from other service providers or agencies involved in your care (with your consent or as permitted by law)
from government agencies such as Medicare or Department of Veteran Affairs (as necessary)

Where reasonable and lawful, you may choose to remain anonymous or use a pseudonym.

When, why and who do we share your personal information

We only use and disclose personal information for the specific purpose/s for which it was collected.

When we collect sensitive and health information, we generally ask permission first. If we use and disclose personal information without asking for permission first, this is always in accordance with relevant exceptions in the Privacy Act.

In general, we don’t disclose personal information overseas unless there are exceptional circumstances or a third party organisation associated with us stores personal information overseas (for example, a social media platform).

Pius X may sometimes share your personal information:

With third parties who work with our organisation for business purposes, such as accreditation agencies or information technology providers – these third parties are required to comply with APPs and this policy.
With other healthcare providers or rehabilitation centres
When it is required or authorised by law (e.g. subpoenas)
When it is necessary to lessen or prevent a serious threat to a patient’s life, health or safety or public health or safety, or it is impractical to obtain the patient’s consent.
To assist in locating a missing person
During the course of providing medical services, through Electronic Transfer of Prescriptions (eTP), My Health Record/PCEHR system (via Shared Health Summary, Even Summary).

How we protect and store your information

All personal information we collect is stored in Australian-based data centres.

We handle all personal information in accordance with the Australian Privacy Principles.
Your personal information may be stored at Pius X Aboriginal Corporation in various forms.
Pius X stores all personal information securely using a range of storage systems.
Only people that need to access your information will be able to do so. Access to our systems for storing personal information is provided on a strictly ‘need to know’ basis.
Some third-party organisations we interact with, such as social media platforms and other online services, may collect and hold the personal information of community members and this information may be stored outside Australia.

Websites and Cookies

Our websites may use cookies or analytic tools to help us understand how the site is used and improve our services. These analytical tools record data of a general nature and do not identify you personally.

You can adjust your browser settings to disable cookies if you prefer.

Accessing or correcting your information

You may request access to, or correction of, your personal information at any time.

We require you to put this request in writing. Please provide this to the CEO and the relevant business unit will respond within a reasonable time (up to 30 working days).

Pius X staff will take reasonable steps to correct your personal information where the information is not accurate or up-to-date. From time-to-time, we will ask you to verify your personal information held by the organisation is correct and up-to-date. You may also request that we correct or update your personal information, and you should make such requests in writing, in person or via phone.

How you can lodge a privacy related complaint, and how will the complaint be handled?

Pius X take complaints and concerns regarding privacy seriously. You should express any privacy concerns you may have in writing. We will then attempt to resolve it in accordance with our Grievance and Dispute Resolution Policy.

Please mail or bring in a letter to Pius X Aboriginal Corporation, Attn: CEO, 140 Anne St, Moree NSW 2400. We aim for a turnaround time up to 30 business days, where a written reply will be provided. Please write your reply address and contact phone number in your letter to facilitate this process.

You may also contact OAIC. Generally, the OAIC will require you to give them time to respond before they will investigate. For further information visit OAIC or call OAIC on 1300 336 002.