Privacy Policy
Enterprise Partnerships WA (EPWA, we, us) is committed to protecting your privacy and ensuring the security of your personal information. We adhere to the Australian Privacy Principles contained in the Privacy Act 1988 (Cth) (Privacy Act). This privacy policy explains how we use and manage personal information provided to or collected by us (Privacy Policy).
We make our Privacy Policy available on our website located at www.epwa.org.au and we can also provide a hard copy version upon request. If you would like more information about this policy, a hard copy of this policy, or to contact us in relation to your rights or any questions or concerns about this Privacy Policy or our personal information practices, please contact us using the following details:
· Contact person / title: Susannah Wallman, Director EPWA
· Email: susannah@epwa.org.au
· Phone: 0401806804
· Post: PO Box 843 Margaret River WA 6285
1. Personal Information under the Privacy Act
Personal Information is defined in the Privacy Act to mean any information or opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not and whether the information or opinion is recorded in a material form or not.
Sensitive Information is a subset of Personal Information that is afforded higher levels of protection under the Privacy Act. It includes information or opinion about an individual's racial or ethnic origin, political opinion, religious beliefs, sexual orientation, criminal record, or health information.
2. Protecting your privacy
This Privacy Policy applies to all your dealings with us.
By providing us with your Personal Information and continuing to engage with us, use our website, use our services, or otherwise deal with us, you accept this Privacy Policy and expressly consent to our collection, use, and disclosure of your Personal Information in accordance with it.
3. Information we collect
To enable us to deliver our services and otherwise engage with you, we may collect the following types of information:
3.1 Personal Information: Personal Information about you, including any information that identifies you, such as your name, email address, phone number, job title, organisation name, and postal address.
We may also collect the following kinds of information about you or your organisation that may constitute Personal Information:
3.2 Business Information: information about your business, including the details about your organisation, including its size, industry, objectives, and relationship with EPWA.
3.3 Financial Information: information about your finances, including any banking details and other payment-related information for processing transactions, donations, or funding agreements.
3.4 Usage Information: Data about how you interact with our website, platforms, or communications, including cookies, IP addresses, and browsing history.
3.5 Sensitive Information: to the extent it is relevant to the work we are undertaking, we may also collect Sensitive Information from you. For example, we may collect photographs of you and details about First Nations cultural affiliations. Before you provide to us information that is Sensitive Information, we will separately seek your explicit consent.
4. How we collect your Personal Information
We may collect Personal Information from you in a variety of ways, including when you interact with us electronically or in person, when you access our website, and when we provide our services to you.
We may receive Personal Information from third parties. If we do, we will manage your Personal Information as set out in this Privacy Policy.
When we obtain Personal Information from third parties to whom you refer us, we will assume (and you must ensure) that you have made that third party aware that you have referred us to them and of the purposes involved in the collection, use, and disclosure of the relevant Personal Information.
If you supply us with Personal Information about another individual, we will assume that you have the consent of that person to provide their Personal Information to us and that you have referred that person to this Privacy Policy.
5. Collection of unsolicited Personal Information
From time to time, we may receive unsolicited Personal Information about you. Unsolicited Personal Information is information we may receive from you which is not in response to a request by us for that information.
Where we receive unsolicited Personal Information about you (either directly from you or from a third party), we will consider, within a reasonable period, whether we could have collected that Personal Information from you had the Personal Information been solicited.
Where we determine that we could have collected the unsolicited Personal Information had it been solicited, we will store, use and disclose that Personal Information in the manner set out in this Privacy Policy.
Where we determine that we could not have collected the unsolicited Personal Information had it been solicited, we will destroy or de-identify that unsolicited Personal Information as soon as practicable, provided it is lawful and reasonable to do so.
6. How we use your Personal Information
We use the Personal Information about you we collect for the primary purpose of conducting and supporting our operations and for other permitted related purposes. Without limiting the foregoing, depending on the nature of the services you obtain from us or your interactions with us, we may use your Personal Information for:
6.1 Service Delivery: To provide support, resources, and opportunities aligned with our mission to empower remote First Nations women.
6.2 Communication: To send updates, newsletters, event invitations, and other relevant information.
6.3 Partnerships and Collaborations: To develop, manage, and enhance relationships with our partners, funders, and stakeholders.
6.4 Compliance and Legal Obligations: To comply with applicable laws, regulations, and contractual requirements.
6.5 Improvement: To analyse and improve our programs, website, and service offerings.
6.6 Customers: To send you information about your order, to process payments and to prevent fraud.
7. How we disclose your Personal Information
To enable us to deliver our services, we may disclose the Personal Information about you we collect to third parties in certain circumstances, including to:
7.1 Trusted Partners: Third party organisations and individuals who work with us to achieve our goals, provided they adhere to this Privacy Policy. This specifically includes Good Return Limited for the Maganda Makers Business Club initiative, and may also includes the collaborators we identify on our website at (https://www.enterprisepartnerships.org.au/collaborators) and the other partners we recognise on our website at (https://www.enterprisepartnerships.org.au/new-page-2).
7.2 Service Providers: Our third party vendors who assist with our operations such as those involved with IT support, data storage, insurance, or event management.
7.3 Other third parties: Other third parties when the disclosure is for the primary purpose for which the Personal Information was collected, including to the extent required for us to provide our services to you.
7.4 Government Authorities: Government authorities or entities when required by law or to protect our rights, property, or safety.
We may also disclose Personal Information about you to other persons with your explicit consent.
We do not sell, trade, or rent your Personal Information to third parties for marketing purposes.
Where we disclose your Personal Information to third parties, we will request that the third party follow this Privacy Policy regarding handling your Personal Information.
8. Direct marketing
Unless you request otherwise, we may also use your Personal Information for marketing purposes to send you news, information about our activities and general promotional material which we believe may be useful or of interest to you. If you do not want us to use your Personal Information in this manner, please contact us using the contact details provided above and we will give effect to your request as soon as possible and, in any event, within 7 days.
9. How we hold Personal Information
EPWA takes reasonable steps to protect your Personal Information from unauthorised access, disclosure, or misuse. Measures include suitable physical, electronic and managerial procedures to safeguard and secure information and protect it from misuse, interference, loss and unauthorised access, modification and disclosure. Although we take these safeguarding measures, we cannot assure you that the Personal Information we collect will not be disclosed in a manner that is inconsistent with this Privacy Policy.
10. Your rights
You have the right to:
10.1 Access: Request access to the Personal Information we hold about you.
10.2 Correction: Request corrections to inaccurate, incomplete, out of date, irrelevant or misleading information.
10.3 Withdrawal of Consent: Withdraw consent for certain uses of your Personal Information, subject to legal or contractual obligations.
To exercise these rights, please contact us using the contact details provided above. We will respond to all requests in relation to the above rights within a reasonable period.
We reserve the right to refuse to provide you with Personal Information that we hold about you, in certain circumstances set out in the Privacy Act.
11. Complaints
You have a right to lodge a complaint with us if you believe your privacy rights have been breached. You should lodge a complaint by contacting us using the contact details provided above. All complaints will be investigated by an appropriately qualified representative. We will endeavour to resolve your complaint as quickly as possible, and, in any event, within 30 days. We will notify you of the outcome of the investigation, including how we propose to resolve your complaint and what, if any, corrective measures we will implement.
If you are not satisfied with our response to your complaint, you can refer your complaint to the Office of the Australian Information Commissioner by visiting www.oaic.gov.au, calling 1300 363 992, or by emailing enquiries@oaic.gov.au.
12. Interactions with us by electronic means
While we do all we reasonably can to protect your Personal Information from misuse, loss, unauthorised access, modification or disclosure, including investing in security software, no data transfer by electronic means, including over the internet, is 100% secure.
If you access a third party's website from our website, any Personal Information you provide by way of that third party website will be handled by the third party in accordance with that third party's privacy policy (if any). We do not have any control over, and do not accept any responsibility for, such third party websites or the handling of any Personal Information that you provide through such websites.
The open nature of the internet is such that information exchanged via the internet may be accessed and used by people other than those for whom the data is intended. If you send us any information, including (without limitation) Personal Information, it is sent at your own risk.
You should also contact us at the above details immediately if you believe someone has gained access to the Personal Information about you that we hold.
13. Retention of Personal Information
We retain Personal Information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as authorised or required by law (such as for the prevention of fraud, for insurance and governance purposes, for the collection of any monies owed, and to resolve disputes).
When the Personal Information that we collect is no longer required, we will remove or de-identify the Personal Information as soon as reasonably possible.
14. Changes to this Privacy Policy
We may review and update this Privacy Policy from time to time. Any changes will be effective when posted on our website. We encourage you to review this policy periodically to stay informed about how we protect your Personal Information.
Version 3 | 14th May 2025
