Privacy Statement

This Statement explains how Infinity Community Solutions Ltd. manages your personal information.

At Infinity Community Solutions Ltd. (ICS), we are committed to protecting your privacy and your personal information and we are bound by the Privacy Act 1988 (Cth) (‘Privacy Act’) and will manage protect your personal information in accordance with the Australian Privacy Principles. These principles govern how we can collect, use, hold and disclose your personal information, as well as ensuring the quality and security of your personal information. We are also bound by relevant state laws in Queensland and South Australia.

What is personal information?

Personal information is any information or opinion that identifies an individual, or from which an individual’s identity can be reasonably ascertained, whether the information is true or not and whether recorded in material or digital form. Examples include a person’s name, date of birth, nationality or heritage, home address and telephone number.

Personal information includes sensitive information, which means information or an opinion about an individual’s:

• racial or ethnic origin
• political opinions or membership of a political association
• religious or philosophical beliefs
• membership of a trade union
• sexual orientation or practices
• criminal record
• biometric or genetic information used for identification purposes

Personal information also includes health information, which means information or an opinion about the health or disability of an individual, or an individual’s wishes about the provision of health services.

What kinds of personal information do we collect and hold?

ICS collects, holds and maintains personal and sensitive information from clients, staff and potential staff, volunteers, foster carers and members of their household and organisational supporters (including donors, sponsors, consultants and referring agencies).

ICS collects personal information directly from individuals in writing, by telephone, email or via our website.  We collect and manage a range of personal information for the purposes of carrying out our services and activities, including:

• Employment
• Education and training
• Support for children, young people, families and people with disability
• Residential, foster/home based and kinship care
• Youth and community work services
• Disability services
• Therapeutic and clinical services
• Fundraising
• Sponsorship

ICS generally collects personal information with your consent. However, we may also collect personal information from third parties where lawful and appropriate, including:

• carers, trustees or authorised representatives (such as guardians)
• government or non-government agencies acting on your behalf
• referees or previous employers
• publicly available sources (such as public registers)
• other organisations we work with to deliver services
• where required or authorised by law

Personal information collected will be stored confidentially unless disclosure is required by law.

Why do we collect, hold, use and disclose personal information?

ICS collects and uses personal information for the primary purposes of:

• employing and managing staff, carers and volunteers
• delivering services and supports
• recording and processing donations
• protecting the safety and wellbeing of clients
• meeting legal, regulatory and contractual obligations

With the exception of what is outlined in this Privacy Statement, we do not sell or otherwise disclose any personal information to other organisations. ICS does not sell personal information.

ICS may not be able to provide some or all services if required personal information is not provided.

ICS may disclose personal information to government or statutory agencies to comply with legislative requirements, including mandatory reporting, reportable conduct schemes, or incident management and reporting.

ICS may also disclose personal information to organisations that assist us to deliver services. This information is disclosed only where necessary, and with the understanding that recipients comply with applicable privacy laws and use the information solely for the purpose requested.

ICS may share personal information with volunteers, contractors or third‑party service providers where functions are outsourced.

ICS may use personal information to communicate with you about ICS services, events or activities where permitted by law and where consent has been provided where required.

How do we hold and secure personal information?

Personal information is stored electronically in secure data centres and/or in paper-based files. ICS takes reasonable steps to ensure personal information is accurate, up to date, complete and protected from misuse, interference, loss, unauthorised access, modification or disclosure.

Security measures include:

• secure systems and access controls
• staff identity and access management
• confidentiality obligations for staff and contractors
• mandatory information security training
• regular review of privacy compliance and security practices

ICS’s website uses 128-bit SSL security ICS uses industry‑standard encryption and security controls to protect information transmitted via our website.

ICS takes reasonable steps to destroy or de‑identify personal information when it is no longer required for the purpose for which it was collected.

Who do we disclose personal information to?

ICS may disclose personal information to:

• contractors or external service providers (including IT and mailing service providers)
• health care providers
• non‑government organisations that jointly provide services
• client representatives (including legal advisors, guardians, carers or trustees)
• regulatory bodies, government agencies and law enforcement authorities

ICS may also disclose personal information where:

• required or authorised by law (including child protection and serious risk matters)
• an individual has provided consent, or consent can reasonably be inferred
• disclosure is necessary to lessen or prevent a serious threat to health or safety
• disclosure is otherwise permitted under the Privacy Act or relevant state legislation

Do we disclose information interstate or overseas?

ICS operates in Queensland and South Australia. Personal information is generally disclosed within Australia. ICS does not routinely disclose personal information overseas.

Where disclosure outside the state or Australia is necessary, ICS takes reasonable steps to ensure the recipient is subject to privacy protections that are substantially similar to those under the Privacy Act.

Marketing communications

ICS may use personal information for marketing or fundraising communications only where express consent has been provided or where otherwise permitted by law. Individuals can opt out of receiving marketing communications at any time by contacting ICS. ICS complies with the Spam Act 2003 (Cth).

Social media

ICS may use social media platforms (such as Facebook, Instagram and LinkedIn) to share information and communicate with the community. If you interact with ICS via social media (for example by liking, commenting, sharing, or sending a direct message), ICS may collect personal information that you choose to provide. Information collected through social media will be handled in accordance with this Privacy Statement. Please note that social media platforms may also collect your information independently under their own privacy policies.

Information collected via our website

ICS may collect personal information provided voluntarily through website forms or enquiries.

ICS does not collect personal information through our website, unless provided by an individual.

ICS may also collect non‑identifiable and technical information, and in some cases information that may be personal information, for website administration and analytics purposes, including:

• date and time of visits
• pages viewed and interactions
• device and browser information
• approximate location data
• IP address

ICS may use cookies and remarketing technologies through third‑party providers such as Google. Users can manage cookie preferences through browser settings and Google Ads Settings.

No warranty

ICS cannot ensure or warrant the security of any information sent to us. While no system can be guaranteed to be completely secure, ICS takes reasonable steps to protect personal information once it is received.

Access and correction

Individuals may request access to, or correction of, personal information held by ICS. Proof of identity is required. Access may be refused in limited circumstances permitted by law. Where access is refused, reasons will be provided unless it would be unreasonable to do so.

Privacy concerns and complaints

If you have questions or concerns about privacy, please contact:
Privacy Officer:

Infinity Community Solutions Ltd.
PO Box 3212, Darra QLD 4076
Phone: (07) 3198 2498
Email: privacy@infinitycs.org.au
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) or relevant state oversight bodies.

Changes to this Privacy Statement

ICS may update this Privacy Statement from time to time. The current version will be published on our website.