1. About this privacy policy

Musicians Making A Difference (MMAD, we, our, us) is committed to protecting the privacy and confidentiality of our young people and staff, and complying with our obligations including those in the Australian Privacy Act 1988 (Cth).

We have prepared this privacy policy, in line with MMAD’s commitment to best practice, to inform you of the personal information we may collect and hold about you via mmad.org.au (collectively, our Website), and how we use that information. This privacy policy also provides information about your privacy rights as an individual and how to contact us if you have any privacy concerns.

This privacy policy may change from time to time and it is therefore important that you review it regularly.

2. What personal information do we collect and handle?

Personal information

MMAD may collect personal information about you as an identified or reasonably identifiable individual.

The types of personal information that we may collect and handle vary depending on your use of the Website

Sensitive information

We may also collect sensitive information. Sensitive information is a special subset of personal information which is generally afforded greater protections under the Australian Privacy Act. The types of sensitive information we may collect include:

• health information (such as current and past medical history) and assessments;

• cultural background;

• details of relationships; and

• personal circumstances and other information that you choose to provide.

2.1 For young people

The types of personal information we may collect about you and handle may include, but are not limited to:

• your name, contact details, date of birth and gender;

• your emergency contact details;

• information in forms that you submit and survey responses;

• music, if you submit to one of our opportunities and agree to our terms to share

• enquiry/complaint details, and opportunity submissions to our Opportunities; and

• information about your use of our services

In addition to the personal and sensitive information listed above, we may also collect additional personal and sensitive information that you provide directly to us during, or in connection with the provision of support services and related services.

2.4 For general users

The types of personal information we may collect about you and handle may include, but are not limited to:

• your name and contact details;

3. How do we collect your personal information?

We collect personal information through various avenues, including:

• information you provide to us directly, for example:

• when you communicate or interact with us by telephone, email, online (including through our website and our social media channels) or in person;

• when you complete a form or a survey;

• when you complete or submit for an opportunity via Access All Areas (AAA)

• information you provide to us during attendance at our events; and

• hospitals and medical practitioners (if they have your consent to provide your information to us).

You must only provide us with the personal information of someone else if you have that person’s consent to do so.

4. Why do we collect your personal information?

We collect, hold, use and disclose personal information for a variety of reasons, including:

• to provide, administer, promote and develop and evaluate our programs, services and fundraising activities;

• to verify your identity and personal information;

• to maintain and update our records;

• to manage our relationship with you;

• where your health or well-being is at risk;

• to conduct health and social research;

• to train and manage our people;

• to protect our lawful interests;

• to deal with enquiries and disputes;

• to provide marketing communications and targeted advertising to you on an ongoing basis by telephone, electronic messages (eg. email), online (including websites and mobile apps) and other means, unless you opt out or we are subject to legal restrictions; and

• to meet reporting obligations to government agencies or as required by law.

5.  What if we can’t collect your personal information?

If you do not provide us with the personal information we need, some or all of the following may occur:

• we may not be able to provide you with our services, including any support you may request;

• we may not be able to respond to your requests for information

6. Who might we disclose your personal information to?

We will not disclose your personal information to anyone outside of the MMAD organisation. However we may use statistics from Access All Areas (AAA) and information offered to MMAD for public use.

The types of third parties with whom we may exchange your personal information include:

• a parent, guardian, representative or carer;

• our service providers that assist us with archival, auditing, accounting, legal, business consulting, data processing, data analysis, document management, research, website and technology services;

• various third party suppliers and partners that provide services and support for our programs and operations;

• where your health and well-being is at risk, in which case we may notify relevant health services and other parties that can help us to protect you;

• health service providers involved in your ongoing care or to provide treatment, including your general practitioner, home service provider or mental health practitioner;

• government health bodies and departments; and

• to law enforcement agencies and other organisations where required or permitted by law.

7. Visitors to our Website

We sometimes collect clickstream data that logs which parts of those Online Services you have visited. We may also use cookies in some of our Online Services so that we have a way of remembering a user’s activity.  We uses clickstream data and cookies to help users have a better experience of the Online Services.

8. How do we protect your personal information?

We take all reasonable steps to keep personal information protected from loss, interference, misuse or unauthorised access, modification or disclosure. These steps may include access controls, encryption, and secure premises. We store personal information in both physical and electronic form, sometimes with the assistance of third parties such as data hosting providers.  We also have systems in place to record and monitor the secure destruction or de‑identification (where necessary) of personal information it no longer requires or is no longer permitted by law to store.

9. How can you access and correct your personal information?

The accuracy of the personal information we hold and use is important to us. We take reasonable steps to ensure that the personal information we handle is accurate, complete and up-to-date. To help us keep your personal information accurate, please update any errors or changes in your personal information.

You can request access to the personal information we hold about you at any time by contacting us via the contact details at the bottom of this policy. You may also request the correction of any of the personal information we hold about you. In most cases, we can help you promptly and informally with these requests. In other cases, we may need to verify your identity and ask you to make your request in writing.

In some cases, such as where it would be unlawful to do so, or where providing access would have an unreasonable impact upon the privacy of other individuals, we may restrict access to all or part of the information requested.  From time to time, we may need to reject your request to access or correct the personal information we hold about you, if we believe it to be necessary and to the extent allowed by law. We will provide a written explanation if we deny your request for access to, or correction of, your personal information.  If we disagree with a requested change, we will on request keep a record of the requested changes with the relevant personal information.

10. How can you make a privacy complaint?

You can contact us via the contact details at the bottom of this Privacy Policy if you have any concerns about how we have handled your personal information.  We will respond to let you know who will be handling your matter and when you can expect a further response.  We may request additional details from you regarding your concern, and we may need to engage or consult with other parties to investigate and deal with your issue. We will keep records of your request and any resolution. If you are not satisfied with the manner in which we have dealt with your complaint, you may contact the Office of the Australian Information Commissioner at www.oaic.gov.au or you can call them on 1300 363 992.

11. How to contact us

If you have any questions or comments about this privacy policy, please don’t hesitate to email hello@mmad.org.au

Last updated: 3rd August 2021