PRIVACY POLICY

The Australian Cancer Research Foundation (ACRF, we, us or our) (ABN 27 076 461 360) is committed to protecting the privacy of our valued supporters and employees. We are bound by the Privacy Act 1988 (Cth) (the Privacy Act) as well as other applicable laws protecting privacy.

The Privacy Act contains exemptions and permitted general situations in relation to certain acts undertaken, including in relation to employee records, legal claims and litigation. Where appropriate, we make use of relevant exemptions in the Privacy Act.

This Privacy Policy explains how we collect, use, store and disclose personal information.

We may modify or update this privacy policy from time to time by publication on our website. We encourage you to read our Privacy Policy carefully and also check our website periodically to ensure you are aware of our current practices. We may also update individuals about how their personal information is collected and handled over the course of our relationship with those individuals.

What personal information do we collect?

Personal information includes information or an opinion (whether true or not) about an identified or a reasonably identifiable individual.

We may collect the following types of personal information:

• your name and contact details (phone, email and address);
• your age or date of birth;
• details of the nature of our relationship and your support to us, including how you support and engage with us (how regularly you donate, and whether you enquire about or attend our events);
• payment information that you provide to us when you donate (including PayPal, credit card, bank transfer or cheque details as applicable);
• information about your bequest including a copy of your will if you make a bequest to us;
• information you provide to us through our supporter surveys and any additional information that you volunteer to us, including photos or sensitive health information that may relate to your health or experience of cancer;
• information we collect about your digital interactions with us, including information to identify the devices, IP addresses, geo-location and ISPs you use to access our website along with web log information and information about how you use our website or other digital platforms;
• if you apply for a position with us – your resume, working history and/or criminal record (which may contain sensitive information), and if you are successful in procuring a position with us, identification and other information through employee onboarding including information about your right to work in Australia;
• if you partner with us – information we may require to promote our partnership; and
• if you are a supplier – information we may require to onboard you to our systems and processes.

How do we collect your personal information?

We may collect personal information from you directly when you interact with us or donate.

We also may collect personal information about you from third parties such as your loved ones, peer to peer fundraising platforms and will writing platforms that we have partnered with. In particular, we may:

• receive information about you from your loved ones. This includes information in connection with estates and bequests where you are also a beneficiary (including information about you in wills and court documentation) and sensitive information about your health and experience of cancer, if your loved one shares this information with us.
• collect your name and contact details from peer to peer fundraising when you donate to us using an external Peer2peer fundraising platform.
• collect your information from will writing platforms, where you name us as a recipient in any will that you prepare using that provider.
• collect [aggregated] information from media agencies and data aggregators to optimise your fundraising experience.
• if you participate in a workplace giving program, we may receive information about your donation from your employer or payroll provider. This may include your name, donation amount, and donation date. If you prefer to remain anonymous, you should check with your employer about the level of information shared with us.collect information from any referees or references you provide to us, if you are applying for a volunteer or employment position, we may also collect information from any references you provide to us.

Who do we share your personal information with? 

We may share your personal information for the purposes set out in this privacy policy to:

• our employees and volunteers;
• our third party service providers (such as technology and data related service providers), and their employees, contractors and agents;
• specific third parties authorised by you to receive information held by us, including professional payment systems operators (including merchants receiving card payments);
• our professional advisers (which may include auditors, lawyers, accountants, consultants and insurers), dealers and agents; and
• other persons, including government agencies, regulatory bodies and law enforcement agencies, or as required, authorised or permitted by law.

Disclosing your personal information outside of Australia

We may disclose your personal information to trusted third-party service providers located outside Australia when necessary for:

• Secure data storage and management within our CRM and cloud-based systems.
• Processing donations and transactions via payment platforms.
• Conducting supporter engagement, marketing, and analytics.
• Providing IT support, security, and system maintenance.

Before disclosing personal information overseas, we take all reasonable steps to ensure that the recipient complies with Australian privacy laws or is subject to equivalent privacy protections. If an overseas provider is not subject to equivalent privacy protections, we implement appropriate safeguards to protect your personal information in line with our privacy obligations.

Why do we collect, use and share your personal information?

We may collect, hold, use and share your personal information to:

• raise funds and engage with our supporter base, including to:
  • communicate with you about our organisation and how you may support us;
  • process donations and bequests;
  • provide information requested by you, including tax receipts;
  • enable you to access and use our website and services;
  • operate, protect, improve and optimise our website and organisation;
  • to optimise your fundraising experience and to perform analytics on supporter engagement;
• consider and award grants to support cancer research;
• enable you to apply for a position (as a volunteer or employee) with us; and
• for our general business operations and to comply with our legal obligations.

Fundraising and communications

If your details appear on our donor or fundraising databases we may send you information about ACRF, including our newsletters. This may take the form of emails, SMS, mail or other forms of communication. If you do not wish to receive this information you can opt-out by contacting our Privacy Officer using the information below or by using the opt-out facilities provided in the communication (such as an unsubscribe link).

Data analytics, using our website, electronic messages and cookies

We track supporter engagement and activity so that we can improve our fundraising efforts in support of a cancer-free future.

We may collect information about you through your use of our website or online presence or through other websites or accounts from which you permit us to collect information.  This typically includes cookies, device ID, device type, geo-location information, computer and connection information, statistics on page views, traffic to and from our website, ad data, IP address and standard web log information.

When cookies are used on this site, they store information about your visit, which may include a unique identifier or value to indicate whether you have visited a webpage. We may use this to identify you when you engage with our website more than once.

Most internet browsers are set up to accept cookies. If you do not wish to enable cookies, you may be able to change the settings of your browser to refuse all cookies or to notify you each time a cookie is sent to your computer.

If you click through to our website from any newsletter, invitation, update or other email or message we send to you, we may identify and collect information relating to your subsequent and previous use of our website, such as which pages you visit and for how long.

This information may be disclosed to marketing experts and data aggregators to increase our understanding of our supporters through aggregate or statistical review of user site traffic patterns and fundraising conversions.

Securing your personal information

We may hold your personal information in either electronic or hard copy form. We use a variety of physical and electronic security measures to keep your personal information secure from misuse, interference, loss or unauthorised access, use or disclosure.

We will take reasonable steps to ensure the security of your personal information. However, the internet is not a secure environment. If you do use the internet to send us any information, including your email address, please be aware that it will be sent at your own risk.

Links and third party platforms

Our website may contain links to websites operated by third parties. Those links are provided for convenience and may not remain current or be maintained. Unless expressly stated otherwise, we are not responsible for the privacy practices of, or any content on, those linked websites, and have no control over or rights in those linked websites. The privacy policies that apply to those other websites may differ substantially from our Privacy Policy, so we encourage you to read them before using those websites.

If you provided personal information to us via a platform operated by Meta, Inc (including Facebook or Instagram), you can request we delete that personal information by contacting our Privacy Officer on the contact details at the end of this Privacy Policy. If you ask us to delete that personal information, we may need to verify your identity. In some circumstances, there may be a valid reason for us to deny your request to delete that information.

Accessing and correcting your personal information

You have the right to access and correct the personal information we hold about you. If you would like access to the information we hold about you, if your details change or if you believe that your personal information held by us is inaccurate or out of date, please contact our Privacy Officer on the contact details at the end of this Privacy Policy.

If you request access to your personal information or ask us to correct or update information about you, we may need to verify your identity. In some circumstances, there may be a valid reason for us to deny your request to access or correct your information. If we do this, we will tell you why.

Making a complaint

You may make a complaint about our handling of your personal information, including our response to your request to access or correct or your personal information, or if you think we have breached the Privacy Act, by contacting our Privacy Officer on the details set out at the end of this Privacy Policy. If we are not able to resolve your complaint, you may wish to contact the Office of the Australian Information Commissioner. More information is available on the OAIC’s website at https://www.oaic.gov.au/.

Contact Us

If you have any questions or concerns relating to this Privacy Policy please contact:

Privacy Officer at Australian Cancer Research Foundation

Suite 903, 50 Margaret Street, Sydney NSW 2000

Phone 02 9223 7833, facsimile 09 9223 1800 or email info@acrf.com.au