Centenary Evangelical Church (ABN 37 576 589 117) (the Church) is committed to providing quality care to you and this policy outlines our ongoing obligations to you in respect of how we manage your Personal Information.

Though not legally required to, we have adopted the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) (the Privacy Act) as guiding principles for our church. The APPs govern the way in which we collect, use, disclose, store, secure and dispose of your Personal Information.

A copy of the Australian Privacy Principles may be obtained from the website of The Office of the Australian Information Commissioner at www.aoic.gov.au.

What is Personal Information and why do we collect it?

Personal Information is information or an opinion that identifies an individual. Examples of Personal Information we collect include: names, addresses, email addresses, phone and mobile numbers. We may also collect information such as donations details, communications you have with us (e.g. letters, emails, prayer requests), records of discussions (e.g. discipleship and/or counselling sessions), your involvement in ministries of the Church, records of visits and pastoral matters, staff details for superannuation, payroll, and taxation purposes.

This Personal Information is obtained in many ways including interviews, correspondence, by phone, by email, via our website www.centenaryev.church, via our connect cards, registration forms and from third parties. We do not guarantee website links or policy of authorised third parties.

We collect your Personal Information for the primary purposes of providing our care to you as you receive goods or services from the Church, providing information to our necessary team members, and marketing or running of events held by the Church. We may also use your Personal Information for secondary purposes closely related to the primary purposes, in circumstances where you would reasonably expect such use or disclosure.

When we collect Personal Information we will, where appropriate and where possible, explain to you why we are collecting the information and how we plan to use it.

You may unsubscribe from our mailing/marketing lists at any time by contacting us in writing to info@centenaryev.church.

Sensitive Information

Sensitive information is defined in the Privacy Act to include information or opinion about such things as an individual's racial or ethnic origin, political opinions, membership of a political association, religious or philosophical beliefs, membership of a trade union or other professional body, criminal record or health information.

When we collect information from you, it may include some sensitive information (as defined by the Privacy Act), such as health information or information about your beliefs, relevant to the services or assistance you have requested from the Church. Any sensitive information that the Church collects in the course of its activities is covered by an exemption set out in APPs. This exemption permits the Church to collect information regarding such things as religious beliefs or affiliations (as this is naturally an important part of membership of the Church) without first receiving your consent to the collection.

In compliance with APPs, sensitive information will be used by us only:

• For the primary purpose for which it was obtained
• For a secondary purpose that is directly related to the primary purpose
• With your consent; or where required or authorised by law.

How we use your information

The Church will use the personal information we collect for the purpose disclosed at the time of collection, or otherwise as set out in this Privacy Policy. We will not use your personal information for any other purpose without first seeking your consent, unless authorised or required by law.

Generally we will only use and disclose your personal information as follows:

• To establish and maintain your involvement with the Church and its ministries, including providing you with written and digital communications
• To provide the products and services you have requested from the Church
• To answer your inquiry
• To register you for events, conferences, or promotions
• To coordinate the rostering of volunteers
• To assist us to make the Church’s sites, services, and products more valuable to our community
• For direct promotion of products or services and to keep you informed of new developments we believe may be of interest to you. If we contact you in this way without obtaining your prior consent, we will provide you with the opportunity to decline any further promotional communications
• To third parties where we have retained those third parties to assist us to operate the Church and provide the products or services you have requested, such as religious education instructors, catering and event coordinators, promotions companies, transport providers, health care providers, church management software providers, website hosts and IT consultants, and our professional advisors such as consultants, lawyers, and accountants. In some circumstances we may need to disclose sensitive information about you to third parties as part of the services you have requested
• To different parts of the Church (including lay leaders and formal members) to enable development and promotion of other products and services and to improve our general ability to assist Church attendees and wider community

Access to your personal information is always restricted to those staff and leaders who require the information to provide a service to you. In general, information provided to third parties should not be able to identify you as an individual; such information can only be disclosed with your express written consent.

We will not sell your Personal Information to third parties regardless of circumstance.

Disclosure of Personal Information

Your Personal Information may be disclosed in a number of circumstances including the following:

• Third parties where you consent to the use or disclosure; and
• Where required or authorised by law.

Security of Personal Information

The Church will take reasonable steps to keep secure any personal information which we hold and to keep this information accurate and up to date. Personal information is stored in a secure server or secure files.

When your Personal Information is no longer needed for the purpose for which it was obtained, we will take reasonable steps to destroy or permanently de-identify your Personal Information. However, most of the Personal Information is or will be stored and kept by us for a minimum of 7 years.

The Internet is not a secure method of transmitting information. Accordingly, the Church cannot accept responsibility for the security of information you send to or receive from us over the Internet or for any unauthorised access or use of that information.

Access to your Personal Information

You can request access to the personal information that the Church holds about you by contacting the Church's Privacy Officer as set out below. We will provide you with access to your personal information unless we are legally authorised to refuse your request. We may charge a reasonable amount for providing access.

You may access the Personal Information we hold about you and to update and/or correct it, subject to certain exceptions. If you wish to access your Personal Information, please contact us in writing at info@centenaryev.church.

We may refuse your request to access, amend or delete your personal information in certain circumstances. If we do refuse your request, we will provide you with a reason for our decision and, in the case of amendment, we will note with your personal information that you have disputed its accuracy.

In order to protect your Personal Information we may require identification from you before releasing the requested information.

Maintaining the Quality of your Personal Information

It is important to us that your Personal Information is up to date. We will take reasonable steps to make sure that your Personal Information is accurate, complete and up-to-date. If you find that the information we have is not up to date or is inaccurate, please advise us as soon as practicable so we can update our records and ensure we can continue to provide quality services to you.

Policy Updates

The Church may amend this Privacy Policy from time to time by having the amended version available on our website at www.centenaryev.church. We suggest that you visit our website regularly to keep up to date with any changes.

Privacy Policy Complaints and Enquiries

If you would like any further information, or have any queries, problems or complaints relating to the Church's Privacy Policy or our information handling practices in general, please contact our Privacy Officer by emailing info@centenaryev.church.