Throughout this policy we are referred to as WHA, we or us. We refer to an individual as you.
WHA is committed to ensuring your privacy is protected. WHA complies with the Privacy Act 1988 (Cth), the Privacy Act 1993 (NZ) and the Health Information Privacy Code 1994 (NZ), as applicable.
In Australia this includes complying with the Australian Privacy Principles (APPs). These 13 principles detail how organisations such as WHA should collect, update, use, keep secure or where required disclose and give access to personal information, as well as how complaints are handled and how, in some circumstances, anonymity can be maintained.
In New Zealand this includes complying with the New Zealand Information Privacy Principles (IPPs). These 12 principles detail how an agency such as WHA should collect, use, store, provide access and correct personal information, and use unique identifiers. This also includes complying with the New Zealand Health Information Privacy Rules (HIPRs). These 12 rules detail how health agencies such as WHA should collect, use, store, provide access and correct personal information, and use unique identifiers.
We recognise the importance of protecting your privacy and our policy is designed to assist you by explaining how we collect, use, disclose, store and destroy the personal information you provide to us and to assist you in making informed decisions when contacting us or using our websites, portals and apps. This policy will be regularly assessed against new technologies, business practices and our client’s and candidate's needs.
This policy applies to WHA, WHA Screening Pty Ltd trading as Quescreen and RiskScreen Pty Ltd trading as VisitScreen.
What personal information (under Australian law) does this policy cover?
Health information is:
Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable.
Personal information may include sensitive information about the individual such as racial or ethnic origin, political opinions, membership of a political association, religious beliefs or affiliations, philosophical beliefs, membership of a professional or trade association, membership of a trade union, sexual orientation or practices, criminal record, health information, genetic or biometric information.
What personal information (under New Zealand law) does this policy cover?
Health Information as defined in the Health Information Privacy Code (NZ) is information or classes of information about an identifiable individual which is:
Personal information is information about an identifiable individual; and includes information relating to a death that is maintained by the Registrar-General pursuant to the Births, Deaths, Marriages, and Relationships Registration Act 1995, or any former Act (as defined by the Births, Deaths, Marriages, and Relationships Registration Act 1995).
WHA only collect personal information that is necessary to provide our services. In some circumstances this may include sensitive information.
If you do not provide us with this information, we may not be able to provide our services. This could include but is not limited to:
WHA collects personal information including sensitive information in a number of ways. This may include:
At or before the time we collect your personal information, we will take reasonable steps to ensure that you are made aware that we are collecting your personal information. We will use your personal information for the purpose for which we collected it. We may also use your personal information for related purposes which you would reasonably expect. We only collect sensitive information with your consent and where permitted by the Privacy Act (Cth) or NZ privacy laws, as applicable. We will not use your personal information outside its intended purpose without your consent.
If you choose to correspond with us through email, we may retain the content of your email messages together with your email address and our responses. We provide the same protection for these electronic communications that we use in the storage of information received by mail and telephone.
WHA uses personal information collected from an individual for the purpose for which it was collected. This usually is to perform its obligations in delivering WHA’s services, which include:
We will take reasonable steps to ensure the personal information we use is accurate, up-to-date, complete and relevant, having regard to the reasons why it is being used. We will not use personal information for direct marketing.
Sensitive information will be used and disclosed only for the purpose for which it was collected, a directly related secondary purpose, with your consent or as required or allowed by law.
Health information will be used and disclosed only for the purpose for which it was collected, a directly related secondary purpose, with your consent or as required or allowed by law.
WHA will not disclose your personal information overseas unless it is necessary for the purpose for which is was collected, and:
IP addresses are used by your computer every time you are connected to the Internet. Your IP address is a number that is used by computers on the network to identify your computer. IP addresses are automatically collected by our web server as part of demographic and profile data known as traffic data so that data (such as the web pages you request) can be sent to you.
WHA stores personal information securely at all times. We take reasonable steps to protect the security of personal information including the physical security on our premises and use of access level permissions and passwords to restrict access to electronic records.
WHA takes reasonable steps to ensure personal information it collects, uses and where specified above, discloses to others is accurate, complete, and up to date. If your personal information changes or you believe our records are not up-to-date, complete and accurate please contact us. If we agree the information needs correcting, we will take reasonable steps to correct the information. If instead we do not agree the information needs correcting, you can ask us to put a statement with your records explaining what you say needs to be corrected.
If we refuse to correct your personal information, we will provide you with a written explanation for that refusal. We will try to resolve all requests within 14 days of receipt of your written request or 30 days where the matter is more complicated. We may charge you a reasonable fee to correct that information.
Any individual has a right to access any personal information held by WHA about them. WHA will not disclose any personal information requested without first establishing the identity of the person requesting the information. Appropriate identification must be supplied to WHA before any personal information will be disclosed. WHA will try to provide you with access to your requested personal information within 14 days of your request but in no later than 30 days of your request. A reasonable fee may apply.
WHA securely destroys or de-identifies personal information when it is no longer required. WHA will upon written request from an individual that WHA holds personal information about, destroy or de-identify their personal information unless there is a legal or other requirement to retain that personal information.
If you have any questions or concerns about a possible interference with your privacy, this policy or the APPs, IPPs or HIPRs (as applicable) please submit a complaint in writing specifying the relevant details, marked to the attention of the Managing Director, Level 4, 15 Victoria Street Hobart, Tasmania, Australia 7000. All complaints will be acknowledged within five (5) business days of receipt. The contact details of the person dealing with the complaint will be advised to the individual making the complaint at this time. We will consider and respond to a complaint within fifteen (15) business days. We will seek to resolve the complaint with you.
If WHA’s response does not resolve the complaint, you can make a complaint about interferences with your privacy:
In Australia to the Office of the Australian Information Commissioner. Their contact details are:
|Post:||GPO Box 5218
Sydney, NSW 2001
|Phone:||1300 363 992|
In New Zealand to the Privacy Commissioner. Their contact details are:
|Email:||Via their Contact Form on their website|
|Phone:||0800 803 909|