Privacy Policy

This Privacy Policy sets out our commitment to protecting the privacy of personal information provided to us, or otherwise collected by us, offline or online, including through this website (Site). In this Privacy Policy we, us or our means Voluntech Pty Ltd ACN 623 358 663 trading as Worthy®.

By accessing or using our Site, you agree to be found by our Terms of Service, Terms of Use and this Privacy Policy.

We are committed to protecting your privacy through compliance with the Privacy Act 1988 (Cth) (“Privacy Act”), the Australian Privacy Principles (“APP”), the General Data Protection Regulation (“GDPR”) and any other privacy laws applicable to our platform.

Personal information

Personal information : The types of personal information we may collect about you include:

• your name;

• images of you;

• details regarding your volunteer hours;

• your contact details, including email address, mailing address, street address and/or telephone number;

• your employer and profession;

• your age and/or date of birth;

• your demographic information, such as postcode;

• your preferences and/or opinions, including your preferences regarding charitable causes and opinions for review purposes;

• information you provide to us through customer surveys;

• details of products and services we have provided to you and/or that you have enquired about, and our response to you;

• your browser session and geo-location data, device and network information, statistics on page views and sessions, acquisition sources, search queries and/or browsing behaviour;

• information about your access and use of our Site, including through the use of Internet cookies, your communications with our Site, the type of browser you are using, the type of operating system you are using and the domain name of your Internet service provider;

• additional personal information that you provide to us, directly or indirectly, through your use of our Site, associated applications, associated social media platforms and/or accounts from which you permit us to collect information; and

• any other personal information requested by us and/or provided by you or a third party.

We may collect these types of personal information directly from you or from third parties.

Collection and use of personal information

Legal basis of our Data Processing : We collect, store, use and disclose your personal information through lawful and fair means, so we can perform our business activities. The legal basis for our processing of your personal information and other data is based on:

• your consent through your voluntary submission of the information and agreeing to these terms or ticking “I agree” button on our platform;

• the information being necessary for the performance of a contract to which you are a party (primary purpose);

• for carrying out pre-contractual measures; and/or

• any other legitimate interests as detailed in this Privacy Policy.

We may collect, hold, use and disclose personal information for the following purposes :

• to provide your contact details to charities that you follow, using our platform, to allow that charity to contact you, send you information or newsletter updates;

• to enable you to access and use our Site, associated applications and associated social media platforms;

• to contact and communicate with you;

• for internal record keeping and administrative purposes;

• for analytics, market research and business development, including to operate and improve our Site, associated applications and associated social media platforms;

• to run competitions and/or offer additional benefits to you;

• for advertising and marketing, including to send you notifications regarding charities you are interested in or follow, volunteering opportunities relevant to your skill set and experience or to send you other information about third parties that we consider may be of interest to you;

• to verify your identity, investigate any complaints related to you, or if we have reason to suspect that you are in breach of any of our Terms and Conditions;

• managing, researching and developing our products and services;

• to comply with our legal obligations and resolve any disputes that we may have; and

• if you apply for employment with us, to consider your employment application.

We may also use personal information to meet our internal and external audit requirements, information security purposes, and as we otherwise believe to be necessary or appropriate:

• under applicable law, which may include laws outside your country of residence;

• to respond to requests from courts, law enforcement agencies, regulatory agencies, and other public and government authorities, which may include such authorities outside your country of residence; or

• to protect our rights, privacy, safety, property, or those of other persons.

Your personal information will only be used and stored for the primary purpose for which it was collected and not for any other purpose, unless you would reasonably expect us to use or disclose the information for a secondary purpose or your consent has been obtained to use the information for additional purposes.

Disclosure of personal information to third parties

We may disclose personal information to:

• charities listed on our platform that you follow for the purpose of enabling them to provide you with updates and notifications;

• third party service providers for the purpose of enabling them to provide their services, including (without limitation) IT service providers, data storage, web-hosting and server providers, debt collectors, maintenance or problem-solving providers, marketing or advertising providers, professional advisors and payment systems operators;

• our employees, contractors and/or related entities;

• our existing or potential agents or business partners;

• sponsors or promoters of any competition we run;

• anyone to whom our business or assets (or any part of them) are, or may (in good faith) be, transferred;

• credit reporting agencies, courts, tribunals and regulatory authorities, in the event you fail to pay for goods or services we have provided to you;

• courts, tribunals, regulatory authorities and law enforcement officers, as required by law, in connection with any actual or prospective legal proceedings, or in order to establish, exercise or defend our legal rights; and

• third parties, including agents or sub-contractors, who assist us in providing information, products, services or direct marketing to you. This may include parties located, or that store data, outside of Australia including in the United States of America;

• third parties to collect and process data, such as Google Analytics, Meta or other relevant businesses. This may include parties that store data outside of Australia including in the United States of America.

Your personal information may be transferred overseas or stored overseas for a variety of reasons (such as to our data hosting and IT service providers based overseas). If your personal information is sent to a recipient in a country with data protection laws which are at least substantially similar to the APP, and where there are mechanisms available to you to enforce protection of your personal information under that overseas law, we will not be liable for a breach of the APP if your personal information is mishandled in that jurisdiction. If your personal information is transferred to a jurisdiction which does not have data protection laws as comprehensive as Australia's, we will take reasonable steps to secure a contractual commitment from the recipient to handle your information in accordance with the APP.

Automated Individual Decision-Making : If you reside in the European Union or European Free Trade Association (EFTA) States, you shall have the right not to be subject to a decision based solely on automated processing, including profiling, as long as the decision is not necessary for entering into, or the performance of, a contract between us, or is not authorised by European Union or EFTA Member State law to which we are subject, or is not based on your explicit consent. If you wish to exercise your rights please contact us.

How we treat personal information that is also sensitive information

Sensitive information is a sub-set of personal information that is given a higher level of protection under the Australian Privacy Principles. Sensitive information means information relating to your racial or ethnic origin, political opinions, religion, trade union or other professional associations or memberships, philosophical beliefs, sexual orientation or practices, criminal records, health information or biometric information.

We will not collect sensitive information about you without first obtaining your consent.

Sensitive information may also be used or disclosed if required or authorised by law.

Your rights and controlling your personal information

Choice and consent : Please read this Privacy Policy carefully. By providing personal information to us, you consent to us collecting, holding, using and disclosing your personal information in accordance with this Privacy Policy.

You can choose not to provide us with your personal information. However, this may mean that:

• we will not be able to provide you with our services, or be limited in how we can do so

• we will not be able to interact with you

• we may be unable to process and open an account for you; or

• we will not be able to properly investigate or resolve any complaint you submit.

Information from third parties : If we receive personal information about you from a third party, we will protect it as set out in this Privacy Policy. If you are a third party providing personal information about somebody else, you represent and warrant that you have such person’s consent to provide the personal information to us.

Restrict : You may contact us or update your settings to restrict the collection or use of your personal information or delete your personal information.  If you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time by contacting us using the details below.

Access : You may request details of the personal information that we hold about you. An administrative fee may be payable for the provision of such information. In certain circumstances, as set out in the Privacy Act 1988 (Cth), we may refuse to provide you with personal information that we hold about you.

Correction : If you believe that any information we hold about you is inaccurate, out of date, incomplete, irrelevant or misleading, please contact us using the details below. We will take reasonable steps to correct any information found to be inaccurate, incomplete, misleading or out of date.

Complaints : If you believe that we have breached the Australian Privacy Principles and wish to make a complaint, please contact us using the details below and provide us with full details of the alleged breach. We will promptly investigate your complaint and respond to you, in writing, setting out the outcome of our investigation and the steps we will take to deal with your complaint.

Unsubscribe : To unsubscribe from our e-mail database or opt-out of communications (including marketing communications), please contact us using the details below or opt-out using the opt-out facilities provided in the communication.

Storage and security

Anonymity, Destruction and De-identification : We will allow our users to transact with us anonymously or by using a pseudonym wherever that is lawful and practicable.

We destroy or permanently de-identify personal information which is no longer needed in accordance with the APP 11, unless we are otherwise required or authorised by law to retain the information for a period of time.

In some circumstances, we will not attempt to match de-identified or anonymous data collected through surveys or such online devices as "cookies", without your consent. By providing us your personal information, you consent and agree to our cookies-related activities as set out under this Policy. below.

Data Quality and Security : We take reasonable precautions to ensure that the personal information we collect, use, store and disclose is accurate, complete, relevant and up-to-date.  However, the accuracy of that information depends to a large extent on the information users provide. That's why we recommend that you:

• let us know if there are any errors in your personal information

• keep us up-to-date with changes to your personal information such as your name or address.

We are committed to ensuring that the personal information we collect is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the personal information and protect it from misuse, interference, loss and unauthorised access, modification and disclosure.

We cannot guarantee the security of any information that is transmitted to or by us over the Internet. The transmission and exchange of information is carried out at your own risk. Although we take measures to safeguard against unauthorised disclosures of information, we cannot assure you that the personal information we collect will not be disclosed in a manner that is inconsistent with this Privacy Policy. In the event of a data breach, we will attend to the reporting requirements that apply to us. We cannot accept responsibility for the misuse, loss or unauthorised access to, your personal information where the security of information is not within our control.

If you reside in Australia, in the event that there is a data breach and we are required to comply with NDBS of the Privacy Act, we will take all reasonable steps to contain the suspected or known breach where possible and follow the process set out in this clause.

If we have reasonable grounds to suspect that the data breach is likely to result in serious harm to any individuals involved, then we will take all reasonable steps to ensure an assessment is completed within 30 days of the breach or sooner if possible. We will follow the guide published by the Office of the Australian Information Commissioner (if any) in making this assessment.  If we reasonably determine that the data breach is not likely to result in serious harm to any individuals involved or any remedial action we take is successful in making serious harm no longer likely, then no notification or statement will be made.

In the case of a personal information breach that affects an EU citizen, we shall without undue delay and where feasible, not later than 72 hours after having become aware of the breach, notify you and the Information Commissioner’s Office, unless the breach is unlikely to result in a risk to your right and privacy.

Cookies and web beacons

We may use cookies on our Site from time to time. Cookies are text files placed in your computer's browser to store your preferences. Cookies, by themselves, do not tell us your email address or other personally identifiable information. However, they do allow third parties, such as Google and Facebook, to cause our advertisements to appear on your social media and online media feeds as part of our retargeting campaigns. If and when you choose to provide our Site with personal information, this information may be linked to the data stored in the cookie.

If you do not want to activate cookies, you can opt-out of receiving them by amending the settings of your internet browser, although you may find that some parts of our platform will consequently have limited functionality and personalisation if you do so.

We may use web beacons on our Site from time to time. Web beacons (also known as Clear GIFs) are small pieces of code placed on a web page to monitor the visitor’s behaviour and collect data about the visitor’s viewing of a web page. For example, web beacons can be used to count the users who visit a web page or to deliver a cookie to the browser of a visitor viewing that page.

Third Party Analytics Tools

Third-party analytics tools collect non-personal information such as how often you visit our platform, the web pages you visit, add-ons, and other analytics data that assists us in improving our services. These tools might include Google Analytics, Google AdWords conversion tracking, Google Tag Manager, or Facebook Ads conversion tracking. Third-party cookies may be placed on your computer by a service provider to us, for example, to help us understand how our platform is being used. Third-party cookies may also be placed on your device by our business partners to advertise the service to you elsewhere on the Internet. We reserve our rights to modify, add or remove any third-party analytics tools. By using our Site, you consent to the processing of any non-personal data these tools will collect in the way and for the purposes described above.

Links to other websites

Our Site may contain links to other websites. We do not have any control over those websites and we are not responsible for the protection and privacy of any personal information which you provide whilst visiting those websites. Those websites are not governed by this Privacy Policy.

Amendments

We may, at any time and at our discretion, vary this Privacy Policy by publishing the amended Privacy Policy on our Site. We recommend you check our Site regularly to ensure you are aware of our current Privacy Policy.

For any questions or notices about your rights, personal information or account settings, please contact our Privacy Officer at:

Voluntech Pty Ltd ACN 623 358 663 trading as Worthy®

Email: mail@worthycause.com.au

For any questions about privacy issues and protecting your privacy, please visit your local privacy officer:

Australia: Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au/privacy/privacy-complaints  

Europe: European Data Protection Supervisor (EDPS) at  https://edps.europa.eu/data-protection/our-role-supervisor/complaints_en  

Last updated: 22 January 2024