Introduction
Wesnet is committed to providing quality services to you and this policy outlines our ongoing obligations to you in respect of how we manage your personal information.

We have adopted the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) (the Privacy Act). The NPPs govern the way in which we collect, use, disclose, store, secure and dispose of your personal information.
A copy of the APPs may be obtained from the website of the Office of the Australian Information Commissioner at https://www.oaic.gov.au/.

Why do we have a policy?
The purpose of this policy is to provide a framework for Wesnet in dealing with privacy considerations.
We apply this policy to all individuals and entities who interact with Wesnet. This includes (but is not limited to) agents, contractors, subcontractors, employees, representatives, users of services, and volunteers.
We may update this policy from time to time in accordance with legislative or operational changes. If you have any questions regarding this policy, please do not hesitate to contact us.

What types of information do we collect?
The type of information that we collect and hold depends on the nature of a person’s involvement with us.
We only collect your personal information where it is reasonably necessary for us to pursue one or more of our functions or activities, or where the law requires us to collect it.
Depending on the reason for collecting it, the personal information we collect may include (but is not limited to):

We may also collect information about recipients of Safe Connections Smartphones but this information is de-identified.
In some circumstances, we collect “sensitive information”, which requires a higher level of protection under the privacy legislation. We consciously limit how much sensitive information we collect, and we only collect it when we have your consent and the collection is reasonably necessary for us to pursue one or more of our functions or activities. In this policy, “sensitive information” has the same meaning as in the privacy legislation.

How do we collect information?
We ask you for personal information only when it is reasonably necessary for the activities in which you are seeking to be involved.
We will only collect your personal information by lawful and fair means, including by telephone, by letter, by email, through forms on our websites or through websites we trust.

Normally, we collect your personal information directly from you (or the relevant individual), unless it is unreasonable or impracticable to do so. On occasion, we may collect personal information from a third party. For example, personal information may be provided by third party websites or we may collect user data through log files and cookies.

We generally obtain consent from the owner of personal information to collect their personal information. Consent may be provided in writing, or may be provided orally, or may be implied through a person’s conduct.

You are not required to provide information we request. However, if you choose not to provide it, we may not be able to provide you with an optimum service.

Receipts (especially tax deductible receipts) may be invalid unless accurate information, including your real name, is provided.

How do we deal with unsolicited personal information?

If we receive personal information from you or a third party without having asked for it, and we determine we do not have a need for it, we will destroy or deidentify the information as soon as practicable, so long as it is lawful and reasonable to do so

How do we use your personal information?

We use your personal information for a range of purposes, including:

We may also collect, hold, use and disclose personal information for purposes:

We only use or disclose your personal information for the above purposes, or for purposes that you consent to, or for other related purposes that you would reasonably anticipate.
If you have any concerns about us using your personal information in any of these ways, please notify us immediately.

How do we store and handle your data?
We hold personal information in a number of ways, including in electronic databases, email contact lists, and in paper files held in secure offices.
We take reasonable steps to:
(a) make sure that the personal information is accurate, up to date and complete, and (in the case of use and disclosure) relevant,
(b) protect the personal information from misuse, interference, loss, unauthorised access, destruction, modification or disclosure, and
(c) destroy or permanently de-identify personal information that is no longer needed. (However, we will keep information for a longer period where necessary to comply with contractual, regulatory or legal requirements, with most of the personal information stored in client files kept by us for a minimum of 7 years.)

 
How can you access and correct your personal information?
You can request at any time:
(a) confirmation that we hold your personal information,
(b) access your personal information, or
(c) correction to your personal information.
We will respond to your request within a reasonable period and within any timeframe specified by the privacy legislation. You may make an urgent request to access or correct your personal information, which should include the reasons for the urgency.
Prior to allowing access to your personal information, we may ask you to take steps to verify your identity.
We will allow you to access your personal information unless there is a sound reason not to, including where:
(a) giving access would have an unreasonable impact on the privacy of others, or
(b) we reasonably consider that your request for access is frivolous or vexatious, or
(c) it is not permitted under the applicable privacy legislation.
If we refuse to give you access to your information, we will give you a notice setting out our reasons.

If you believe that information we hold about you is incorrect or out of date, please contact us and we will take all reasonable steps to amend the information in line with your request.

 
Third party service providers
Wesnet may use some third party service providers (sub-processors) in order to support our websites and operations. These third party service providers may include foreign entities that operate in an overseas jurisdiction.
We select reputable third party service providers on the basis of their published privacy policies.
By using our services, you acknowledge that third party service providers that are foreign entities may not be required to protect your personal information in a way that provides comparable safeguards as those provided in the privacy legislation.
Any questions related to our use of third party service providers can be directed to us.
Will your data be used for direct marketing purposes?
We only use your personal information to let you know about our products or services where we have your consent, or where we are otherwise permitted by law to do so. We may contact you for these purposes in a variety of ways, including by mail, email, SMS or telephone.
We do not sell your personal information to any third party for the purposes of direct marketing.
Where you have consented to receiving communications from us, your consent remains current until you advise us otherwise. You can opt out at any time, by contacting us or by using the unsubscribe facility that we include in our electronic messages.
We do not use your sensitive information for the purposes of direct marketing.

 
Will we notify you if there is a data breach?
If we become aware of unauthorised access to or loss of your personal information, we will promptly:
(a) notify you;
(b) investigate the cause;
(c) do our best to remedy any consequences; and
(d) tell you what steps we have taken to prevent a reoccurrence.

Unauthorised access to or unauthorised disclosure of personal information, or a loss of personal information, are handled in accordance with the relevant authority as follows: oaic.gov.au/privacy/notifiable-data-breaches

 
How can you make a complaint?
If you have a complaint about how we collect or handle your personal information, please let us know. We treat any claims of privacy breaches seriously and will do our best to respond to your complaint within seven days of receiving it.
If you are unhappy with our response, you can refer your complaint to the Office of the Australian Information Commissioner.

 
How can you contact us?
Please contact us if you have any queries about the personal information that we hold about you or the way we handle it.