Australian Privacy Policy: https://childrenshealthdefense.org.au

Effective Date: February 15, 2023

Children's Health Defense - Australia Chapter recognises the importance of your privacy and understands your concerns about the security of your personal information. We are committed to protecting any personal information that we hold. This Privacy Policy details how we generally collect, hold, use and disclose personal information and your rights in relation to the personal information that we hold about you.

When we deal with organisations (such as a corporation or a Government Department or agency) we may collect personal information about individuals who are employees, volunteers, directors or principals of those organisations or their associates. If you are an organisation and you provide us with personal information about such individuals, or are otherwise aware that we have collected personal information about such individuals, we ask you to assist us by referring the relevant individuals to this Privacy Policy. Before you provide us with personal information about an individual that is sensitive information, you must ensure that you are authorised by the relevant individual to disclose that information to us.

Where this Privacy Policy refers to a party that may be either an individual or an organisation (such as our Members or volunteers or service providers), the reference includes individuals who are employees, volunteers, directors, or principals of an organisation or its associates. Please read this Privacy Policy carefully before you start to use the Website or provide us any information about yourself. By using the Website or by accepting or agreeing to the Terms of Use when this option is made available to you, you accept and agree to be bound and abide by this Privacy Policy, our Terms of Use found on the Website, and any other additional privacy terms applicable to your geographic location, for example our Colorado Privacy Notice, or our GDPR and UK GDPR Privacy Notice, incorporated herein by reference. If you do not want to agree to these Terms of Use or the Privacy Policy, you must not access or use the Website or otherwise provide us any information about yourself as this Privacy Policy, together with our Terms of Use, creates a binding agreement between you and us in regards to the matters covered in those policies.

Controller

Children's Health Defense is made up of different not-for-profit legal entities, details of which can be found here: "the Children's Health Defense Group".

This Privacy Policy is issued on behalf of Children's Health Defense - Australia Chapter, (Children’s Health Defense Australia LTD, ACN 653 919 414), so when we mention Children's Health Defense - Australia Chapter, "we", "us" or "our" in this Privacy Policy, we are referring to the relevant company in Children's Health Defense Group responsible for processing your data. We will let you know which entity will be the controller for your data when you purchase a product or service from us. Children's Health Defense - Australia Chapter is the controller and responsible for this Website. When you donate, you are donating to Children's Health Defense - Australia Chapter.

We have appointed a data privacy manager who is responsible for overseeing questions in relation to this Privacy Policy. If you have any questions about this Privacy Policy, including any requests to exercise your legal rights, including any data subject rights you may have based on where you reside, please contact the data privacy manager using the details set out below.

Personal information

'Personal information' is defined in the Privacy Act 1988 (Cth) to mean any information or opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not and whether the information or opinion is recorded in a material form or not.

The kinds of personal information we collect and hold

We collect and hold a range of personal information in carrying out our business and Objects. The kinds of personal information that we collect and hold about you will depend upon the nature of our relationship with you.

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

• Identity Data includes first name, maiden name, last name, username or similar identifier, marital status, title, date of birth and gender.
• Contact Data includes billing address, delivery address, email address and telephone numbers.
• Financial Data includes bank account and payment card details.
• Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us.
• Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
• Profile Data includes your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses.
• Usage Data includes information about how you use our website, products and services.
• Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.

We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data could be derived from your personal data but is not considered personal data under the law as this data does not and will not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific feature of the Website. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data, which will be used in accordance with this Privacy Policy. We collect the following Special Categories of Personal Data about you: information about your health. We do not collect any other Special Categories of Personal Data.

Our Members

We typically collect and hold the following kinds of personal information about our Members:

• Name and contact details;
• communications between you and us;
• financial information;
• information about your areas of interest or specialisation; and
• other personal information that you provide to us (such as when you respond to an invitation to attend a seminar or function) or that we collect in the course of our relationship with you.

To the extent that it is relevant to the information, services, and representation we are undertaking for a Member or our general relationship with a Member, we may also collect and hold personal information about Members that is sensitive information under the Privacy Act. For example, we may collect health information about an individual, membership of a professional or trade association, membership of a trade union, religious beliefs or affiliations or criminal records.

Our volunteers, contractors, service providers, suppliers and job applicants

We typically collect and hold the following kinds of personal information about volunteers, contractors, service providers, suppliers and job applicants:

• name and contact details;
• information contained in resumes;
• educational details, academic and other transcripts, employment history, skills and background checks;
• references from past employers and referees;
• information collected during the interview or assessment process;
• details of your performance under any contract; and
• personal information required to make payments, such as bank account details.

We may also collect sensitive information contained within the sources set out above, such as membership of a political, professional or trade association or trade union, criminal records and health information.

Website users, online contacts and attendees at seminars and other functions

The amount and type of information we collect from you when you use of our website or contact us online will depend upon your use of the facilities and services and information available through our website or otherwise available online. However, the only personal information which we collect about you when you use our website or contact us online is what you tell us about yourself, such as when you complete an online Membership subscription form, a subscription form to our publications, alerts and newsletters, when you accept an invitation to attend a seminar or function, or complete one of our online forms, including through our marketing campaigns, or information you provide to us when you send us an email.

The kinds of personal information that we may collect through our website, online or when you register to, or attend a function include:

• your name, contact details, employer and job title; and
• your areas of interest or specialisation.

We will also collect personal information about you if you provide us with your business card at a function or otherwise provide your personal information to us in person or contact us through social media (such as LinkedIn and Facebook).

How we collect personal information

In most instances we will collect personal information directly from the person to whom the information relates, or the organisation of which that personal is an employee, volunteer, director or principal. However, we may also collect personal information about individuals from the following third parties:

• our Members;
• government agencies;
• law enforcement bodies;
• publicly available records;
• public registries;
• court or tribunal records;
• ratings agencies;
• search agencies;
• regulatory and licensing bodies;
• service providers;
• parties to whom you refer us, including previous employers and referees;
• recruitment agencies;
• online searches; and
• social media (such as LinkedIn and Facebook).

When we obtain personal information from third parties to whom you refer us, we will assume and you must ensure that you have made that third party aware that you have referred us to them and of the purposes involved in the collection, use and disclosure of the relevant personal information.

If you supply us with personal information about another individual, we ask you to assist us by referring that person to this Privacy Policy.

Data Security

We have put in place appropriate security measures to help prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so. We endeavor to incorporate commercially reasonable safeguards to help protect and secure your Personal Information. However, no data transmission over the Internet, mobile networks, wireless transmission or electronic storage of information can be guaranteed to be 100% Privacy Policy secure. Please note that we cannot ensure the security of any information you transmit to us, and you access our Website and provide us with your information at your own risk.

Third Parties

Internal Third Parties

Other companies in Children's Health Defense Group, which are based in the United States, Europe, South Africa, Canada, Australia, and Ireland, act as joint controllers or processors, and provide IT and system administration services.

External Third Parties

• Service providers based in Europe or the United States who provide IT and system administration services.
• Professional advisers including lawyers, bankers, auditors and insurers based in Europe or the United States who provide consultancy, banking, legal, insurance and accounting services.

Purposes for Which We Will Use Your Personal Data

We have set out below, in a table format, a description of all the ways we may use your personal data, and the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.

Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need details about the specific legal ground we are relying on to process your personal data where more than one ground has been set out in the table below.

We may also use the personal information we collect for one or more of the following purposes:

• To fulfill or meet the reason you provided the information. For example, if you share your name and contact information to request a price quote or ask a question about our products or services, we will use that personal information to respond to your inquiry. If you provide your personal information to purchase a product or service, we will use that information to process your payment and facilitate delivery. We may also save your information to facilitate new product orders or process returns.
• To provide, support, personalize, and develop our Website, products, and services.
• To create, maintain, customize, and secure your account with us.
• To process your requests, purchases, transactions, and payments and prevent transactional fraud.
• To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses.
• To personalize your Website experience and to deliver content and product and service offerings relevant to your interests, including targeted offers and ads through our Website, third-party sites, and via email or text message (with your consent, where required by law).
• To help maintain the safety, security, and integrity of our Website, products and services, databases and other technology assets, and business.
• For testing, research, analysis, and product development, including to develop and improve our Website, products, and services.
• To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
• As described to you when collecting your personal information or as otherwise set forth in our Privacy Notices.
• To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us about our Website users is among the assets transferred.

Marketing

We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising:

Promotional Offers From Us

We may use your Identity Data, Contact Data, Technical Data, Usage Data and Profile Data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you (we call this marketing).

You will receive marketing communications from us if you have requested information from us or purchased goods or services from us and you have not opted out of receiving that marketing.

Third-Party Marketing

We do not currently sell, rent, lease, disclose or otherwise share your personal data with any third party for marketing purposes.

Overseas disclosures of personal information

We may disclose personal information to external service providers located overseas (including the United States of America) so that they can provide us with services in connection with the operation of our business, such as marketing services and data storage

If you apply to us for employment or as a volunteer, and have lived or worked overseas, we may disclose your personal information to overseas recipients for the purposes of gathering information to assess your application. If you have previously worked for us, and provide our details to a prospective employer or recruitment agency located overseas, we may disclose your personal information to that entity to assist them to assess your application.

Aside from the purposes set out above, we are generally not likely to disclose personal information to overseas recipients. The countries in which these overseas recipients may be located will depend upon the individual circumstances of our Member’s or prospective employees or volunteers, and it is not practicable to specify them in this Privacy Policy.

International Transfers

We share your personal data within the Children's Health Defense Group. This will involve transferring your data outside Australia, the EU, EEA, and/or the UK.

We ensure your personal data is protected by requiring all our group companies to follow the same rules when processing your personal data. As such, to the extent we transfer data from Australia, the EU, EEA, and/or UK to a jurisdiction without an adequacy decision, we will ensure that it is done so through a Data Processing Addendum with the proper Standard Contractual Clauses as approved by the European Commission and/or the ICO, which give personal data the same protection it has in the EU, EEA, and/or the UK. For further details, see European Commission: Standard contractual clauses for international transfers.

Access to your personal information

You have a right to request access to personal information that we hold about you and request its correction if it is inaccurate, out of date, incomplete, irrelevant or misleading. You may do so by contacting our Privacy Officer at the details below. We will respond to all requests for access to or correction of personal information within a reasonable period.

In some cases, in accordance with the Privacy Act, we may refuse to give you access to personal information we hold about you.

Complaints

If you would like to complain about a breach of the Australian Privacy Principles, you may contact our Privacy Officer at the details below.

We will respond to complaints within a reasonable period of time (usually 30 days).

If you disagree with our decision, you may refer your complaint to the Office of the Australian Information Commissioner by visiting www.oaic.gov.au, calling 1300 363 992 or by emailing [email protected].

Privacy Officer

If you would like more information about the way we manage personal information, would like to request access to or correction of personal information that we hold about you, or wish to make a complaint, please contact our Privacy Officer by either:

Email - [email protected] ;

Post - Attention "Privacy Officer" PO BOX 64, HUSKISSON, NSW 2540, Australia; or

Telephone: +61 402-857-555

Changes to our privacy policy

From time to time it may be necessary for us to review and revise our Privacy Policy. We may notify you about changes to this Privacy Policy by posting an updated version on our website. We encourage you to check our website from time to time to ensure you are familiar with our latest Privacy Policy.