This policy was prepared by the Foundation for Young Australians (trading as YLab). It explains how we collect, hold, use and disclose information. It also explains how you may access and correct your personal information and complain or contact us.
This policy applies to all websites and social media profiles operated by us. For a full list of those websites and social media profiles read our general terms and conditions.
We aim to be open and transparent in how we manage personal information. If you have any questions about this policy or feedback on how we might improve it, please contact us.
Collection of personal information.
We are a social enterprise operated by the Foundation for Young Australians. At YLab we involve young people in decision-making; not just on “youth issues”, but on all the economic, social and environmental challenges we face. We bring the fresh perspectives of young people, different ways of being in the world, networks, and familiarity with technology, to co-design new systems and practices. We work across the spectrum of politics, volunteering, consumerism, education, business, community resilience, service provision, market innovation, and economic development. All personal information collected by us helps us to support this objective in some way.
What kinds of personal information do we collect and hold?
The kinds of personal information we collect includes:
E.g. name, date of birth, contact details.
- the personal information we collect may include: personal details (name, age, date of birth, year of birth, gender, school, social media profile), contact details (phone number, email address, postal address, post code), image (photo and video recording), any languages other than English that you may speak, voice recording and other information reasonably necessary for our activities and functions.
- for our employees, contractors and volunteers, we may collect additional relevant information including resumes and employment history, bank accounts, tax file number and superannuation details.
- if you are an employee, contractor or representative of one of our partners, sponsors, collaborators or stakeholders or an educational institutions that we deal with, we may collect your name and your organisation’s name, your address, contact details and other information necessary to manage and administer our relationship with you and your organisation.
E.g. health information, ethnic origins, political opinions, health care card details.
- the sensitive information we may collect includes: health information (medical history, immunisation, dietary requirements, diseases, allergies, impairments, asthma details and plan, medication and mental health diagnosis). We generally only collect this information if you participate in one of our programs, initiatives, events or challenges and are under our care.
- if you are attending one of our programs or a program run by one of our partners, we may collect your Medicare number, Health Care Card details, private health insurance details, ambulance membership, the name and contact details of an emergency contact for you and any dietary requirements or restrictions you may have.
- we may collect sensitive information about your political opinions, ethnic origins, country of birth or Aboriginal or Torres Strait Islander heritage, but only where this information is relevant to our research or participation in one of our programs, initiatives, events or challenges.
- for our employees, contractors and volunteers, we may also collect relevant health information about you and, with your consent, undertake a working with childrens and pre-employment police records check.
E.g. IP address, web pages visited, browser information, opinions posted on our social media profiles.
- the other personal information we collect may include: IP address, type of browser and operating system, webpages visited, time and date of visit, domain name from which you linked to our website and other non-personally identifiable information which might automatically be collected when you access or use one of our websites or social media profiles.
- we may collect ideas, opinions, images and other material might automatically be collected through our websites and social media profiles when you post content on our blogs and other forums.
How we collect and hold that personal information?
We usually collect personal information directly from you. We also collect personal information from your teacher, parent or guardian if you are under the age of 18.
We will usually collect personal information from you (or your parent or guardian or teacher) when you:
- access and use any of our websites or social media platforms;
- communicate with us through correspondence, email, chat or other online forms;
- register for any of our programs, initiatives, events or challenges; or
- participate in research or evaluation discussions, interviews or focus groups that we run or participate in.
Sometimes we will collect personal information about you from a third party.
When you participate in one of our programs, initiatives, events or challenges:
- we may collect personal information about you from your school or other organisation we are collaborating with to present the program, initiative, event or challenge;
When you access or use one of our websites or social media profiles:
- we may collect personal information about you from a third party (such as, Twitter, Facebook, YouTube, Instagram or Google) when you use express login or post things on our social media channels;
If you are an employee or contractor of any of our partners, sponsors, collaborators or supporters (including if you attend any of our programs in that capacity):
- we may collect personal information about you from your employer or another representative of your organisation;
When you participate in research or evaluation discussions, interviews or focus groups:
- we may collect personal information about you from any research contractor we have engaged to conduct those discussions; and
When you apply to work or volunteer with us:
- we may collect personal information about you from a recruitment consultant, your previous employer(s) and other persons who may be able to provide information to us about your suitability for the position. This includes obtaining information from screening agents (such as, the Department of Justice and Fit2Work) regarding your Working with Children Check (WWCC) and Pre-Employment (National Police Records) Check.
Why we collect, hold, use and disclose that personal information?
We may collect, hold, use and disclose personal information about you to enable you to use our websites and social media channels or participate in our programs, join our mailing list, initiatives, events and challenges; and to conduct research, comply with legal obligations, consider your application to work for us.
Who do we usually disclose that personal information to?
We may disclose personal information about you to people and other organisations.
E.g. employees, partners, service providers, emergency personnel, parents, guardians and teachers.
We may disclose personal information about you:
- to our employees, volunteers, contractors or service providers for the purposes of operating our website, fulfilling requests by you and to otherwise deliver our programs, initiatives, events and challenges. This may include: web hosting providers, IT systems administrators, mailing houses, couriers and network administrators;
- to our sponsors, partners, stakeholders and collaborators who helps us to provide our programs, initiatives, events and challenges. This may include: workplaces you visit, corporate partners, councils, government departments, other not-for-profit organisations and other social pioneers, changemakers and entrepreneurs.
- to your parents, guardian, teacher or school for the purposes of you participating in one of our programs, initiatives, events or challenges;
- to police, fire, medical and other emergency personnel in the event of an emergency involving you;
- to professional research bodies whom we have engaged to conduct research or evaluate one of our programs, initiatives, events and challenges;
- to suppliers, service providers and other third parties with whom we have relationships, for business, marketing, travel and related purposes;
- to third parties that operate the social media platforms we have a profile on to determine whether you have a profile; and
- to our professional advisers. This may include: lawyers, accountants, business advisors and consultants.
Whether we are likely to disclose your information to overseas recipients?
Because we use a number of cloud service providers (such as Google, Netsuite, Survey Gizmo, Dropbox, Pardot, Trello, Slack Office R&D, Eventbrite, ) and social media platforms (such as Facebook, Instagram, YouTube and Twitter), your information may be disclosed overseas to countries like: the United States of America, the United Kingdom, Chile, Taiwan, Singapore, Japan, Finland, Belgium, Ireland and Netherlands. Australian privacy laws will not apply in those circumstances.
Being so informed, by providing personal information to us, you consent to its disclosure to these cloud service providers and social media platform operators located in countries outside Australia.
The Australian Privacy Principles state we must take such steps as are reasonable in the circumstances to ensure that an overseas recipient of personal information does not breach the Australian Privacy Principles. Unfortunately, we cannot guarantee that these cloud service providers and social media platform operators will not breach the Australian Privacy Principles. Nor are we satisfied that our contracts with them would enable you (or us) to take action if they did.
Being so informed, by providing personal information to us, you consent to its disclosure to these cloud service providers.
Use of your personal information
To make sure that you get the most out of being connected to us, we use your information in a variety of ways.
We may collect, hold, use and disclose personal information about you:
- to enable you to access and use our websites and social media profiles (including public blogs and other forums);
- to add you to our mailing list;
- to help us operate, protect, improve and optimise our websites and social media profiles (including to analyse trends and improve functionality);
- to enable you to participate in our programs, initiatives, events or challenges (including competitions and promotions run by us);
- to help us conduct research about challenges facing young Australians and evaluate our programs, initiatives, events or challenges (including to obtain your feedback and suggestions on these programs);
- to keep you informed about the work we do (including to let you know about upcoming initiatives, programs, events and challenges);
- to comply with our legal obligations, resolve complaints and enforce our agreements with third parties; and
- to consider your application to work or volunteer with us and to administer your employment, contracting or volunteering arrangement with us.
If we are unable to collect this information,
- You may not be able to participate in our programs, attend our events.
- You may also not be able to access and interact on our social media channels.
If you do not provide us with the personal information described above:
- you may not be able to participate in some of our programs, initiatives, events and challenges;
- we may not be able to keep you informed about the work we do or let you know about upcoming initiatives, programs, events and challenges that you may want to participate in;
- we may not be able to complete our research into a particular challenge affecting young Australians or complete our evaluation of one of our programs, initiatives, events or challenges; and
- we may be unable to tailor the content of our websites to your preferences and your experience of our websites and social media profiles may not be as enjoyable or useful.
We may use your information for direct marketing related to our purposes, blogs and forums, research and evaluation and cookies.
Blogs and forums
Many of our websites and social media profiles contain public blogs and other forums that allow you to upload content. Please be aware any information you post or disclose in these areas will become public (as anything you post, anyone in the world can see). We advise you not to share any personal information that you would not otherwise be comfortable to share publicly on these blogs and forums and to consider your online safety at all times. This includes any sensitive information or information that could be used to locate you in person. FYA team members will never contact you on social media and ask you to share personal or private information with them.
If we do like what you post, we may share that content (including, ideas, opinions, photographs and video).
We like to keep young people and our supporters informed about the work we do. This includes letting them know about our upcoming initiatives, programs, events and challenges.
If you provide your contact details to us we will include you in these communications. These communications may be sent in various forms, including mail, email, social media content, ads and SMS. If you indicate a preference for a method of communication, we will endeavour to use that method whenever practical to do so.
You may opt-out of receiving marketing communications from us at any time by contacting us or by using the opt-out (unsubscribe) mechanism provided in the marketing communications.
Your personal information will not be shared, sold, rented or disclosed other than as described in this policy. We will not market to you about commercial goods or services unrelated to our purpose.
Research and evaluation
We conduct research into challenges facing young Australians. We also evaluate our programs, initiatives, events and challenges and
publish the results. Sometimes we conduct research and evaluation ourselves and sometimes we engage professional research organisations to conduct it on our behalf.
If you provide personal information to us in connection with one of our programs, initiative, events or challenges, we may use that information in our research and evaluation. This includes publishing non-personally identifiable information and statistics containing your information for these purposes.
If you provide your contact details to us, we may also contact you (including by telephone and email) to participate in research or evaluation surveys. You may opt-out of receiving marketing communications from us at any time by contacting us or by using the opt-out (unsubscribe) mechanism provided in the survey.
Sometimes we collect personal information about you when you access or use one of our websites or social media profiles.
We may record certain information about your use of our websites and social media profiles to help us analyse trends and improve functionality. This information includes pages visited, time and date of visit, IP address (that is, the electronic addresses assigned to your device) and general demographic information. While we do not use browsing information to identify you personally, it could be used to identify you if combined with other information we may hold.
We may send a ‘cookie’ (which is a small summary file containing a unique ID number) to your device. This enables us to recognise your device and greet you each time you visit our website. It also enables us to keep track of the programs, initiates, events and challenges you view to help us determine other initiatives, programs, events and challenges you may be interested in.
We take reasonable steps to ensure your personal information is protected from misuse and loss and from unauthorised access, modification or disclosure. We may hold your information in either electronic or hard copy form. When we no longer need your personal information, we will either securely destroy it, or irreversibly anonymise the data (and we may further retain and use the anonymised information).
Because the internet and technology are continually evolving, we cannot guarantee secure transmission of information you communicate to us online or by mobile device. Information transmitted by these means can be intercepted. Any personal information you transmit to us
online or by mobile device is at your own risk. You should never communicate sensitive information to us online or by mobile device.
If you suspect at any time your security has been compromised or the security of one of our websites or social media profiles, you should notify us immediately at firstname.lastname@example.org
Rights and choices
You can request to access the personal information we hold about you. If you think any personal information we hold about you is incorrect, you can request that we correct that information. You can also request to have the personal information we hold about you deleted. We will take reasonable steps to do so.
How to make a complaint
You can complain to us in writing if you have any concerns with how we have handled your personal information.
Please include your name, an outline of your complaint and an email or postal address so that we can write back to you. We will treat your complaint confidentially and respond within a reasonable time.
You can contact us:
- by email: email@example.com
- by post: Attention: Privacy Officer
- The Foundation for Young Australians
- GPO Box 239, Melbourne, Victoria 3001
- by phone: +61 3 9670 5436
- via the web: contact-us
If you are a resident of the European Union for the purposes of the General Data Protection Regulation (GDPR), then in addition to what is set out above, the following applies to you.
In providing services to you, FYA may make use of a number of automated processes using your personal information and your activity on our website as tracked by us, in order to provide more tailored and relevant services to you such as providing tailored content to you through email communication, and on the website.
In addition to your rights set out above, you may:
- update or rectify any of the personal information that we hold about you;
- request that FYA provides you with a copy of the personal information FYA holds about you in a portable and machine readable form; or
- share your personal information with a nominated third party.
You may request this from us by contacting us using any of the methods set out in the “Contact Details” paragraph above. These rights are subject to certain exemptions to safeguard the public interest (e.g. the prevention or detection of crime) and our interests (e.g. the maintenance of legal privilege).
Should you have any concerns in relation to FYA’s collection and/or processing of your personal information, then in addition to the process set out in “How to make a compliant” set out above (including the right to complain to the Office of the Australian Information Commissioner), you have the right to complain to a supervisory authority (within the meaning of the GDPR).
© 2018 The Foundation for Young Australians ABN 26 092 744 968