Jewish House (ACN 140 232 873), trading as ‘One&All’ (we, our or us) is committed to ensuring the proper management and use of all personal information we collect and handle in accordance with applicable privacy laws, including the Australian Privacy Principles.

This Policy applies only to external personal information provided by participants, participant representatives, volunteers, facilitators, contractors, donors, online visitors and other external third parties that we interact with.

Privacy Act

The Australian Federal Government’s Privacy Act 1988 (Privacy Act) includes the Australian Privacy Principles that govern the way in which we collect, use, disclose, store, secure and dispose of your personal information.

A copy of the Australian Privacy Principles can be obtained from the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

Personal information

Personal information is any sort of information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether true or not (personal information). A sub-category of personal information is sensitive information. Sensitive information includes information of a particularly sensitive nature, including information relating to an individual’s health (physical and mental) and genetics and information about an individual’s racial or ethnic origins, political opinions, membership of a trade union or political association, religious beliefs or affiliations, philosophical beliefs, sexual preferences or criminal record (sensitive information).

What personal information do we collect & from whom?

We will only collect personal information that is necessary for our functions and activities. We will only collect personal information by lawful and fair means and not in an obtrusive way. We collect and hold different categories of information depending on the engagement we have with you.

Information about participants

When you become a participant at the One&All Hub the kind of personal information we collect includes your name, address, email address, phone number, date of birth, details of your NDIS plan, medication management plan, allergies and your COVID vaccination status.

We may collect sensitive information that helps us to assess your eligibility for particular programs. We collect this information to provide a safe and accessible environment at the One&All Hub.

We will not use this information in any way other than the one stated at the time of collection, or for a directly related purpose, without your consent.

We collect this information in a number of ways, including through participant intake forms and inductions, when you phone or email us for information, and through our website at www.oneandallhub.org.

Information about participant representatives

If you are a participant representative, for example a parent or guardian, the kind of personal information we collect includes your name, address, email address and phone number.

We will not use this information in any way other than the one stated at the time of collection, or for a directly related purpose, without your consent.

We collect this information in a number of ways, including through participant intake forms and inductions, when you phone or email us for information, and through our website at www.oneandallhub.org.

Information about volunteers, facilitators and contractors

When we engage you as a volunteer, facilitator or contractor at the One&All Hub the kind of personal information we collect includes your name, address, email address, phone number, date of birth,  your COVID vaccination status, NDIS worker checks, and working with children checks.

We collect this information in a number of ways, including through intake forms, interviews and inductions, when you phone or email us for information, and through our website at www.oneandallhub.org.

Donors, online visitors and other external third parties

When you become a donor, use our website to purchase One&All merchandise, or hire the One&All Hub for an event the kind of personal information we collect includes your name, address, email address, phone number, bank account and credit card details.

We collect this information in a number of ways, including when you phone or email us for information, and through our website at www.oneandallhub.org.

Website browsing

Accessing our website at www.oneandallhub.org will result in some information being logged including the time of access, your IP address and the pages that have been viewed or accessed.

Our website may contain links to external websites. We are not responsible for the content or privacy policies that govern these websites.

Why do we collect this personal information?

We collect and use personal information:

• to deliver our services to you as a participant at the One&All Hub,

• to communicate and otherwise engage with you as a participant’s representative in the course of delivering our services to that participant at the One&All Hub,

• to engage you as a volunteer, facilitator or contractor to assist our participants and the One&All team to deliver our programs at the One&All Hub,

• for billing purposes and order fulfilment,

• to send you information about our services, programs and events at the One&All Hub that you may have requested,

• for marketing, and

• in other circumstances where you would reasonably expect such use. 

You may unsubscribe from our mailing lists at any time by contacting us at info@oneandallhub.org or unsubscribing through the link in the newsletter.

Quality of personal information

We will ensure, to the extent reasonably possible, that personal information collected, used or disclosed is accurate, up-to-date, complete and relevant. If we become aware that any of the personal information we hold is inaccurate we will take prompt steps to update our records so that those records are correct.

Anonymity & pseudonymity

Due to the nature of the services we provide, in most situations it will be impracticable for an individual to deal with us on an anonymous basis. However, we will consider requests on a case by case basis.

Keeping your information secure

We keep all your information secure, whether it is held in hard copy or electronically. Our computers are username and password protected and only authorised staff members have access to personal information. Information that is held in hard copy is held in a lockable office space.

Disclosing information to third parties

Your personal information may be provided to organisations or third parties that may include the following:

• government agencies, as required by law

• government or non-government agencies where we have a reasonable concern regarding your safety or wellbeing,

• external service providers who assist us with the delivery of our services,

• third parties who assist us with fundraising activities or strategy,

• third parties who assist us with co-ordination of volunteers, community activities and advocacy,

• third parties who collate or analyse information for the purposes of research, and

• third parties for the electronic storage of information, some of which may be overseas.

Whilst we seek to ensure through our arrangements with external parties that they comply with the Privacy Act regarding the use of your personal information, we have limited control around how some external parties (for example, government agencies) use your personal information.

Overseas disclosure of personal information

As part of our operations we may store some personal information with cloud based service providers which retains personal information on servers that may be located outside Australia.

By submitting your personal information to us you are taken to expressly consent to the transfer, storing or processing of that information outside of Australia. In providing consent, you understand and acknowledge that countries outside Australia do not always have the same privacy protection requirements as Australia in relation to personal information.

If you do not agree to the transfer of your personal information outside Australia, please contact us at info@oneandallhub.org.

Retention of personal information

We only retain personal information for as long as required by law and needed for our business functions and activities. It is then securely destroyed and disposed of.

How to access your personal information

You have a right to ask for access to, and update personal information we hold about you. If you want to access your personal information or update it, please contact us in writing at info@oneandallhub.org. We may ask for identification before releasing the information.

Mandatory notifiable data breaches

We will comply with the notification and other requirements of the Privacy Act where your personal information held by us has been inadvertently lost or disclosed or improperly accessed and that loss, disclosure or access may result in serious harm to you.

Complaints & enquiries

If you have any questions about privacy-related issues or wish to complain about a breach of the Australian Privacy Principles or the handling of your personal information by us, you may lodge your complaint in writing to us at info@oneandallhub.org.

We will promptly respond to your request.

If you are dissatisfied with our response, you may refer the matter to the OAIC:

T:  1300 363 992
E:  enquiries@oaic.gov.au
F:  +61 2 9284 9666
P:  GPO Box 5218
      Sydney NSW 2001

Website: https://www.oaic.gov.au/privacy/privacy-complaints/

Privacy Policy updates

This Policy may change from time to time and is available on our website.

Effective: 12 March 2024