Your privacy is important to us. This Privacy Statement describes how we collect, use, store and disclose personal, and other types of, information when you interact with Our Recovery website.
Where the twenty-two community-led CRC’s are defined as:
Where the 3 local councils are defined as:
- East Gippsland Shire council
- Alpine Shire council
- Towong Shirt council
There are links to other websites on Our Recovery. If you click on one of those links, you will leave the Our Recovery website. This Privacy Statement does not apply to any other website and we recommend you review the other website’s privacy statement when you access it.
What information do we collect and is it secure?
We collect information about you and your use of Our Recovery. Our Recovery will only collect personal information if it is necessary for the provision of services or to carry out its functions.
Security of your information
Under the PDP Act, BRV and local council have a responsibility to protect your personal information. CRCs are not bound by the PDP Act but have agreed to handle privacy in line with the legislation. We will not use or disclose any personal information that is collected through this website unless the use or disclosure is:
- for the primary purpose the information was collected
- for a related secondary purpose, which you ought to reasonably expect in the circumstances
- required or authorised by law
- for any other purpose permitted under the Privacy and Data Protection Act 2014 (Vic) or Health Records Act 2001 (Vic).
We take reasonable steps to make sure that your personal information is protected from misuse, loss, and unauthorised access, modification, or disclosure. Access to systems, applications, and the information that we collect is limited to authorised users from the following groups – BRV, CRCs and local council.
Any personal information that we collect and use for identifying user trends is anonymised and aggregated when generating reports.
To protect your own privacy, your password for Our Recovery should be kept confidential, and must not be displayed, shared or written down.
How we use and collect information
When you visit this website, there are 5 main ways that we use and collect information from you:
Registering for the service
Users can register for Our Recovery to receive email updates from the service.
Mandatory registration fields
Optional registration fields
This information is used to administer the site and manage your account, and send you email notifications of project updates or newsletters, but only where you have agreed to us sending you this information.
Participating in a consultation
Consultations on Our Recovery are conducted by CRCs, and supported by BRV and local council. They use tools provided by the service (e.g. forms, forums and maps) to collect user feedback.
Depending on the nature of the consultation, CRCs, with the support of BRV and local council, may collect the following information to support their consultation process:
- full name, gender, post code, address, phone number, email address and age bracket.
- content that you post on Our Recovery
- a hashed IP address where the location is not identifiable, but administrators can determine whether multiple contributions have been submitted from the same IP address.
Our Recovery may use personal information to confirm your identify in order to protect the integrity of the consultation process.
Consultations will provide a collection notice when collecting personal information.
Any user feedback or correspondence provided to email@example.com, received about a specific consultation will be disclosed to the CRC and local council conducting the consultation.
We collect the following information when you visit Our Recovery in order to improve the service. We collect clickstream data and visitor logs to measure visitation numbers and record:
- your server IP address
- the date, time and duration of your visit
- any documents, images or videos that you download from the service
- the type of browser and device that you used.
- feedback you submit on the user experience and performance of the site.
Information collected on unregistered users for service improvement is de-identified. We will not attempt to identify you except when required by law to do so.
What’s publicly available and what’s not?
Content that you post on the site publicly can be viewed by everyone who uses the site. A post may contain your username, any personal information you have entered into a post, and any publicly available reports from consultations, and may include quotes from participants in forums, surveys and other consultation tools.
We will not disclose any personal information, correspondence or information submitted to consultations without your expressly provided permission to do so.
Data collection tools
We collect the data and information outlined above including a combination of report analytics, server logs and tools within the functionality of the site, using data security protocols. Where data and information is collected via the site’s servers and tools, this is managed through our data security protocols and processes.
Automatic collection by third party software vendors
Our Recovery uses several tools to measure website use, which are provided by third party software vendors. Personal information may be provided to third parties when accessing this website. We use these tools to help us make our site better.
We use software by third parties, including:
- The HiVE
For further information on how these third-party software vendors handle your personal information, please review their privacy policies.
Use of web analytics data
We use the HiVE analytics data to analyse, measure, and report on data about our website. This information helps us understand consultation outcomes, general user trends at an aggregate level, and improve our website, content, and user experience.
We do not use this information to identify you or match it with any other personal information that we may collect from you, unless required to do so as part of an internal investigation or for a law enforcement-related purpose, in accordance with the PDP Act.
Your site visit data is collected under the authority of Information Privacy Principle 1.1 of the PDP Act for the purposes stated above.
Disclosure of web analytics data
In addition to the third party tools described above, we sometimes share web analytics data with other third parties. We make sure they keep it safe and secure through contracts and commercial agreements.
In the event of an investigation into suspected unlawful or improper activity, a law enforcement or government agency may use its legal authority to inspect our web server’s records (for example, in relation to hacking or abusive messages).
Can I opt out of the collection of web analytics data?
You cannot opt out of the automatic collection of information that is used for analytical purposes. However, you may choose to disable cookies or delete any individual cookie.
Data quality, access and correction
We try to ensure that the personal information that we collect is accurate. If information that you have provided to us has changed, please log into your Our Recovery account where you can update your details or via firstname.lastname@example.org.
You may request access to, or correction of, documents that contain your personal information by emailing email@example.com. In some cases, requests for access or correction will be handled in accordance with the Freedom of Information Act 1982 (Vic).
When will we contact you?
You can choose to receive updates from us by email. If you choose this but then change your mind, you can unsubscribe at any time by logging into your Our Recovery account.
Changes to our Privacy Statement
We may update the content of this Privacy Statement from time to time for any reason. We suggest that you regularly review the Privacy Statement.
What if you have a complaint?
If you wish to make a complaint about a breach of this Privacy Statement, please email firstname.lastname@example.org. We will investigate your complaint and determine what steps we will take to resolve your complaint.
If you have any questions regarding this Privacy Statement, or want to update your personal details held by the service, please email email@example.com.