°Ç¸ç³Ô¹Ï

Privacy Policy and Privacy Collection Notice

Privacy Policy

This Privacy Policy sets out how the Association of Independent Schools (°Ç¸ç³Ô¹Ï) manages personal information and your rights in relation to your personal information, including how to complain and how we deal with complaints. 

°Ç¸ç³Ô¹Ï is bound by the Australian Privacy Principles contained in the Commonwealth Privacy Act 1988 (Privacy Act). Under the Privacy Act, the Australian Privacy Principles do not apply to certain treatment of an employee record. As a result, this Privacy Policy does not apply to °Ç¸ç³Ô¹Ï's treatment of an employee record held by °Ç¸ç³Ô¹Ï, where the treatment is directly related to a current or former employment relationship between °Ç¸ç³Ô¹Ï and the employee.

°Ç¸ç³Ô¹Ï may, from time to time, review and update this Privacy Policy to take account of new laws and technology, changes to °Ç¸ç³Ô¹Ï’s operations and practices and to make sure it remains appropriate to the changing education services environment. The current version of this Privacy Policy is published on our website.


Kinds of personal information we collect

°Ç¸ç³Ô¹Ï provides support and advice to °Ç¸ç³Ô¹Ï member schools (‘schools’) on matters arising from their operations. Therefore, the types of information °Ç¸ç³Ô¹Ï collects include (but is not limited to) personal information, including health and other sensitive information, about: 

• applicants for °Ç¸ç³Ô¹Ï professional development training; 

• students and parents and/or guardians (‘Parents’) enrolled or applying to be enrolled in a school before, during and after the course of a student’s enrolment, including: 

» results of assignments, tests and examinations; 

» conduct and complaint records, or other behaviour notes, and school reports; 

» information about referrals to government welfare agencies; 

» counselling reports; 

» health fund details and Medicare number; 

» Family Court orders; 

» criminal records; 

» volunteering information; and

» photos and videos at School and °Ç¸ç³Ô¹Ï events. 

 

• °Ç¸ç³Ô¹Ï and school job applicants, volunteers and contractors, including: 

» name, contact details (including next of kin), date of birth, and religion; 

» information on job application; 

» professional development history; 

» salary and payment information, including superannuation details;

» health information (e.g., details of disability and/or allergies, and medical certificates); 

» complaint records and investigation reports; 

» leave details; 

» photos and videos at School and °Ç¸ç³Ô¹Ï events; 

» workplace surveillance information; and 

» work emails and private emails (when using work email address) and Internet browsing history; and

• other people who come into contact with °Ç¸ç³Ô¹Ï and schools, including name and contact details and any other information necessary for the particular contact with a school or°Ç¸ç³Ô¹Ï.

How we collect personal information

Personal information you provide: °Ç¸ç³Ô¹Ï generally collects personal information about an individual directly from the individual (or their Parent in the case of students). This includes by way of forms, face-toface meetings and interviews, emails, and telephone calls. 

Personal information provided by other people: In some circumstances °Ç¸ç³Ô¹Ï may be provided with personal information about an individual from a third party, for example a school may seek advice, provide a report provided by a medical professional, a reference from another school or organisation or a referee for a job applicant. 

Personal information from other sources: We may also collect personal information through surveillance activities (such as CCTV security cameras) and email monitoring.

Purposes for which we collect, use and disclose personal information

The purposes for which °Ç¸ç³Ô¹Ï collects, uses and discloses personal information depend on our relationship with you and include the following:

°Ç¸ç³Ô¹Ï:

  • the administration of °Ç¸ç³Ô¹Ï; 
  • delivery of °Ç¸ç³Ô¹Ï services including professional development.

Schools:

  • providing advice to schools on governance and the conduct of their activities; 
  • making required reports to government authorities;
  • keeping schools informed about matters related to staff employment, and student education; 
  • supporting schools looking after students’ educational, social and health wellbeing; 
  • to satisfy schools’ legal obligations and allow principals to discharge their duty of care.

Job applicants and contractors:

  • assessing and (if successful) engaging the applicant or contractor; 
  • administering the individual’s employment or contract; 
  • for insurance purposes; 
  • satisfying °Ç¸ç³Ô¹Ï’s legal obligations, for example, in relation to child protection legislation.
Who we disclose personal information to

°Ç¸ç³Ô¹Ï may disclose personal information, including sensitive information, for educational, care and administrative purposes, and to seek or give support and advice. This may include to:

  • schools and staff at those schools; 
  • government departments (including for policy and funding purposes); 
  • providers of specialist advisory services and assistance to °Ç¸ç³Ô¹Ï, including in the area of Human Resources, legal, child protection, students with disability, and for the purpose of administering information technology services and ensuring its proper use (see further the section below ‘Sending and storing information overseas); 
  • providers of learning and assessment tools;
  • assessment and educational authorities, including the Australian Curriculum, Assessment and Reporting Authority (ACARA), the School Curriculum and Standards Authority (SCASA) relating to student NAPLAN results and NAPLAN Test Administration Authorities (who will disclose it to the entity that manages the online platform for NAPLAN); 
  • agencies and organisations to whom we are required to disclose personal information for education, funding and research purposes; 
  • people providing administrative and financial services to °Ç¸ç³Ô¹Ï; 
  • the providers of our information management and storage system and other information technology services; 
  • hosts of websites publishing NAPLAN and other student results; 
  • recipients of °Ç¸ç³Ô¹Ï publications, such as newsletters and magazines; 
  • students’ parents or guardians; 
  • anyone you authorise °Ç¸ç³Ô¹Ï to disclose information to; and 
  • anyone to whom we are required or authorised to disclose the information to by law, including child protection laws.
How we store personal information

We store your personal information in hard copy and electronically. We use information management and storage systems provided by third party service providers. Personal information is stored with and accessible by the third party service providers for the purpose of providing services to °Ç¸ç³Ô¹Ï in connection with the systems. °Ç¸ç³Ô¹Ï may use online or ‘cloud’ service providers to store personal information and to provide services to °Ç¸ç³Ô¹Ï that involve the use of personal information. See further the section below ‘Sending and storing information overseas.’

Sending and storing information overseas

°Ç¸ç³Ô¹Ï may disclose personal information about an individual to overseas recipients in certain circumstances. 

°Ç¸ç³Ô¹Ï may use online or ‘cloud’ service providers to store personal information and to provide services to °Ç¸ç³Ô¹Ï that involve the use of personal information, such as services relating to email, instant messaging and education and assessment applications. 

Some limited personal information may also be provided to these service providers to enable them to authenticate users that access their services and provide technical support. 

This personal information may be stored in the ‘cloud’ which means that it may reside on a cloud service provider’s servers which may be situated outside Australia. 

°Ç¸ç³Ô¹Ï personnel and our service providers may have the ability to access, monitor, use or disclose emails, communications (e.g., instant messaging), documents and associated administrative data for the purposes of administering our information technology platforms and ensuring their proper use

Marketing

°Ç¸ç³Ô¹Ï treats marketing as a means of publicising our services to allow us to expand our services to as many schools and staff as possible to support staff development and student learning and wellbeing. Your personal information may be used to contact you about °Ç¸ç³Ô¹Ï services. It may also be disclosed to organisations that assist in our marketing. If you do not want to receive communications from us, please contact us.

Security of personal information

°Ç¸ç³Ô¹Ï has in place steps to protect the personal information °Ç¸ç³Ô¹Ï holds from misuse, interference and loss, unauthorised access, modification, or disclosure by use of various methods including locked storage of paper records and password access rights to computerised records. These steps include: 

  • Restricting access to information on °Ç¸ç³Ô¹Ï databases on a need-to-know basis with different levels of security being allocated to staff based on their roles and responsibilities and security profile. 
  • Ensuring all staff are aware that they are not to reveal or share personal passwords. 
  • Ensuring where personal and health information is stored in hard copy files that these files are stored in lockable filing cabinets in lockable rooms. Access to these records is restricted to staff on a need-to-know basis. 
  • Implementing physical security measures around °Ç¸ç³Ô¹Ï buildings and grounds to prevent break-ins. 
  • Implementing ICT security systems, policies and procedures, designed to protect personal information storage on our computer networks. 
  • Implementing human recourses policies and procedures, such as email and internet usage, confidentiality and document security policies, designed to ensure that staff follow correct protocols when handling personal information. 
  • Undertaking due diligence with respect to third party service providers who may have access to personal information, including cloud service providers, to ensure as far as practicable that they are compliant with the Australian Privacy Principles or a similar privacy regime.
Access and correction of personal information

Under the Commonwealth Privacy Act an individual has the right to seek access to, and/or correction of, any personal information which °Ç¸ç³Ô¹Ï holds about them. Students will generally be able to access and update their personal information through their Parents, but older students may seek access and correction themselves. 

There are some exceptions to these rights set out in the applicable legislation. 

To make a request to access, update or correct any personal information °Ç¸ç³Ô¹Ï holds about you or your child, please contact our Privacy Officer by email, post or telephone at privacy@ais.wa.edu.au or 9441 1687. °Ç¸ç³Ô¹Ï may require you to verify your identity and specify what information you require. °Ç¸ç³Ô¹Ï may charge a reasonable fee for giving access to your personal information (but will not charge for the making of the request or to correct your personal information). If the information sought is extensive, °Ç¸ç³Ô¹Ï will advise the likely cost in advance. 

If we decide to refuse your request, we will provide you with written notice explaining the reasons for refusal (unless, in light of the grounds for refusing, it would be unreasonable to provide reasons) and how to complain.

Consent and rights of access to the personal information of students

°Ç¸ç³Ô¹Ï respects every Parent’s right to make decisions concerning their child’s education. Generally, °Ç¸ç³Ô¹Ï will refer any requests for consent and notices in relation to the personal information of a student to the student’s Parents. Generally, °Ç¸ç³Ô¹Ï will treat consent given by Parents as consent given on behalf of the student, and notice to Parents will act as notice given to the student.

Parents may seek access to personal information held by °Ç¸ç³Ô¹Ï about them or their child by contacting our Privacy Officer by telephone or in writing (details in the section above ‘Access and correction of personal information’).

However, there may be occasions when access is denied. Such occasions may include (but are not limited to) where °Ç¸ç³Ô¹Ï believes the student has capacity to consent and °Ç¸ç³Ô¹Ï is not permitted to disclose the information to the Parent without the student’s consent, where release of the information would have an unreasonable impact on the privacy of others, or where the release may result in a breach of °Ç¸ç³Ô¹Ï’s duty of care to the student.

°Ç¸ç³Ô¹Ï may, at its discretion, on the request of a student grant that student access to information held by °Ç¸ç³Ô¹Ï about them or allow a student to give or withhold consent to the use of their personal information, independently of their Parents. This would normally be done only when the maturity of the student and/or the student’s personal circumstances warrant it.

Enquiries and complaints

If you would like further information about the way °Ç¸ç³Ô¹Ï manages the personal information it holds, or wish to complain that you believe that °Ç¸ç³Ô¹Ï has breached the Australian Privacy Principles please contact the Privacy Officer by email, post, or telephone at privacy@ais.wa.edu.au or 9441 1687. °Ç¸ç³Ô¹Ï will investigate any complaint and will notify you of the making of a decision in relation to your complaint as soon as is practicable after it has been made.

If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) via the OAIC website, .

Privacy Collection Notice 

This notice explains how °Ç¸ç³Ô¹Ï handles your personal information.

°Ç¸ç³Ô¹Ï supports schools and educational organisations in the independent sector (‘°Ç¸ç³Ô¹Ï schools’). It may therefore handle information in the course of providing its services.

In this Notice, ‘°Ç¸ç³Ô¹Ï’ includes °Ç¸ç³Ô¹Ï schools, unless stated otherwise.

How and Why does °Ç¸ç³Ô¹Ï Collect Personal Information?
  1. °Ç¸ç³Ô¹Ï collects personal information about you before and during the course of your engagement with °Ç¸ç³Ô¹Ï. This may be in writing, through technology systems or in the course of conversations. °Ç¸ç³Ô¹Ï collects personal information from °Ç¸ç³Ô¹Ï schools in the course of providing services to them. The types of personal information °Ç¸ç³Ô¹Ï collects include sensitive information, which includes health information.
  2. The primary purpose of collecting personal information is to enable °Ç¸ç³Ô¹Ï to provide services to °Ç¸ç³Ô¹Ï schools including the discharge of °Ç¸ç³Ô¹Ï schools’ duty of care, and for °Ç¸ç³Ô¹Ï to perform necessary associated °Ç¸ç³Ô¹Ï employment and administrative activities.
  3. °Ç¸ç³Ô¹Ï supports °Ç¸ç³Ô¹Ï schools to comply with their legal obligations which require certain information to be collected and disclosed. These include the School Education Act 1999 (WA), and public health and child protection laws, as well as schools’ duty of care to students and staff.
  4. °Ç¸ç³Ô¹Ï’s ability to provide timely and accurate services allowing an °Ç¸ç³Ô¹Ï school to support staff and students may be delayed or prevented if °Ç¸ç³Ô¹Ï cannot collect certain personal information. This is particularly so where the information is relevant to the health and safety of the student, other students and/or staff.
  5. If you provide °Ç¸ç³Ô¹Ï with the personal information of others, such as doctors or emergency contacts, we encourage you to inform them that you are disclosing that information to °Ç¸ç³Ô¹Ï and why.
To Whom Does °Ç¸ç³Ô¹Ï Disclose Information

6. °Ç¸ç³Ô¹Ï may disclose your personal and sensitive information for educational, care and administrative purposes, and to seek support and advice. This may include to:

  • schools and teachers at those schools, including a new school to which a student transfers;
  • government departments (including for policy and funding purposes);
  • the governing body or owner of a school;
  • medical practitioners;
  • people providing educational, support and health services to °Ç¸ç³Ô¹Ï, including specialist advisors, presenters, volunteers, and counsellors;
  • organisations that assist us with marketing and event planning;
  • providers of learning and assessment tools;
  • assessment and educational authorities, including the Australian Curriculum, Assessment and Reporting Authority (ACARA), School Curriculum and Standards Authority (SCSA), and NAPLAN Test Administration Authorities (who will disclose it to the entity that manages the online platform for NAPLAN);
  • the third party providers of our information management and storage systems for the purpose of the providers providing services to °Ç¸ç³Ô¹Ï in connection with the systems;
  • people providing other information technology services to °Ç¸ç³Ô¹Ï;
  • people providing administrative and financial services to °Ç¸ç³Ô¹Ï;
  • anyone you authorise °Ç¸ç³Ô¹Ï to disclose information to; and
  • anyone to whom °Ç¸ç³Ô¹Ï is required or authorised to disclose the information to by law, including child protection laws.

7. Student personal information may be disclosed to their parents or guardians.

8. °Ç¸ç³Ô¹Ï activities and news (including staff achievements) are frequently published in °Ç¸ç³Ô¹Ï’s journals, newsletters and magazines, on our intranet or otherwise shared with °Ç¸ç³Ô¹Ï community (current, future and past °Ç¸ç³Ô¹Ï staff). This may include personal information (including photographs and videos) of participants in °Ç¸ç³Ô¹Ï activities such as professional development and networking events, and presentations. °Ç¸ç³Ô¹Ï will obtain permissions to include photographs or videos or other identifying material in our promotional material or otherwise make this material available to the public such as on the internet.

9. °Ç¸ç³Ô¹Ï uses centralised information management and storage systems (Systems). These Systems are provided by third party service providers. Personal information is stored with and accessible by the third party service providers for the purpose of providing services to °Ç¸ç³Ô¹Ï in connection with the Systems for administering AIWA services to schools and its internal operations.

Overseas Storage and/or Disclosure

10. °Ç¸ç³Ô¹Ï may use online or ‘cloud’ service providers to store personal information and to provide services to °Ç¸ç³Ô¹Ï that involve the use of personal information, such as services relating to email, instant messaging and education and assessment applications. Some personal information may be provided to these service providers to enable them to authenticate users that access their services, and for technical support. This personal information may reside on a cloud service provider’s servers which may be situated outside Australia. Further information about °Ç¸ç³Ô¹Ï’s use of online or ‘cloud’ service providers is contained in °Ç¸ç³Ô¹Ï’s Privacy Policy.

Your Rights and How to Complain

11. °Ç¸ç³Ô¹Ï’s Privacy Policy, accessible on °Ç¸ç³Ô¹Ï’s website, sets out how you can:

  • seek access to and correction of your personal information which °Ç¸ç³Ô¹Ï holds;
  • make a privacy complaint and how we will handle the complaint.