Privacy policy
Privacy Act:
Pressurise is committed to protecting your privacy and is bound by the Privacy Act 1988 (the Act) and the Australian Privacy Principles (APP). As an APP entity defined in s 6(1) of the Act, we collect and hold personal information related to our clients and other associated entities. This information is collected through:
- Direct provision by clients
- Authorisation for third parties to provide it
- Voluntary or compulsory processes conducted on behalf of our clients
How is personal information received and held?:
Personal information may be received and held in hard copy (paper) and soft copy (electronic data). We prioritise the security of personal information, ensuring all documents are securely stored and protected.
Purpose of collecting, holding, using, and disclosing personal information:
Personal information is processed lawfully for the following purposes:
- Offering our products and services, which may involve disclosing information to entities such as government departments, with client knowledge and consent, unless compelled by law
- Facilitating internal and external administrative processes, including financial and business operations
- Complying with terms of professional indemnity and other insurance policies
- Adhering to applicable laws
Accessing or correcting personal information:
Clients can access and correct their personal information at any time by contacting our office in person or in writing. Formal identification will be required before releasing or amending any information.
Complaints process:
If there is a breach of this privacy policy, the Act, or the APP, clients may file a complaint with:
- Our customer service team
- The Office of the Australian Privacy Commissioner
Data breaches:
All staff are responsible for maintaining the confidentiality of client and business information. Any data breaches or suspected breaches must be reported to the Director as soon as possible.
Eligible data breach:
An eligible data breach, as defined in s 26WE(2) of the Act, occurs when:
- There is unauthorised access to or disclosure of information, likely resulting in serious harm to individuals
- Information is lost, and unauthorised access or disclosure is likely to occur, potentially causing serious harm
Suspected breach procedure:
If a breach is suspected, an assessment will be conducted within 30 days. If a breach is confirmed, a statement will be prepared detailing:
- Business details
- Description of the breach
- Types of information involved
- Response steps
Affected clients will be notified, and the statement will be published on our website if direct communication is impractical. The statement will also be submitted to the Privacy Commissioner.
Exceptions to reporting:
Mandatory notification requirements are waived if remedial action is taken, ensuring that access or disclosure is unlikely to result in serious harm.
Last updated: 6th of August 2024