Privacy Policy

We are committed to ensuring the privacy of your personal information, such as your full name, address, e-mail address, telephone number or other identifying information.

Purpose

  1. Greenpeace Australia Pacific Limited (‘we’, ‘us’) is an independent campaigning
    organisation that uses non-violent direct action to expose global environmental
    problems and to force solutions that are essential to a green and peaceful future.
  2. Just as we campaign to protect the environment, we care about protecting our
    supporters and their information:

    1. We try to only collect the information we need from you for the particular
      function or activity we are carrying out.
    2. We will not intentionally collect Sensitive Information (such as Health
      Information) from you, except in exceptional circumstances (see 16 below).
    3. We may disclose your Personal Information to third parties acting on our behalf
      (see 21 – 24 below), but only where you consent, or it is for the purpose of
      continuing to engage with you about our work, and we are confident they will
      protect your information.
    4. You can always opt out from receiving our communications.
    5. We ensure that Personal Information is held securely.
    6. We take reasonable steps to ensure that when the information is no longer
      needed, it is destroyed, de-identified or put beyond use (meaning we can no
      longer access or share the information).
  3. Greenpeace Australia Pacific is committed to ensuring that your privacy is protected
    and that Personal Information that it collects from you will be used in accordance with
    this policy. Greenpeace Australia Pacific respects and upholds your rights to privacy
    protection under the Privacy Act 1988, including the Australian Privacy Principles
    (APPs), regarding how we collect, use, disclose and hold your Personal Information.
  4. The purpose of this privacy policy is to govern how Greenpeace Australia Pacific deals
    with Personal Information, and to inform members of the public (and in particular
    Supporters) (‘you’, ‘your’):

    1. what kind of information we may collect from you and how we collect it;
    2. how we may use that information;
    3. how we store that information;
    4. whether we will disclose it to anyone else;
    5. how you may access or correct this information; and
    6. how you can contact us.

Access to this Policy and Provision of Donor Collection Notice

  1. The current version of this policy will at all times be available on Greenpeace Australia
    Pacific’s website.
  2. At the time of collection of Personal Information (or, if not practicable, as soon as
    practicable after) from donors and prospective donors, Greenpeace Australia Pacific will
    provide donors and prospective donors with the Donor Collection Notice in Schedule 1. 1
  3. At the time of collection of Personal Information (or, if not practicable, as soon as
    practicable after) from participants in campaign activities (for example persons who sign
    a petition) Greenpeace Australia Pacific will provide those persons with the Participant
    Collection Notice in Schedule 2. 2

1 APP 5.2.
2 APP 5.2.

Data collection

  1. At all times we try to only collect the information we need for the particular function or
    activity we are carrying out.
  2. Greenpeace Australia Pacific collects Personal Information from you where it is
    reasonably necessary for one or more of our functions or activities, in particular
    soliciting or accepting donations to support our campaign work, or engaging with
    members of the public in respect of that work.
  3. The types of Personal Information that we may collect include your name, address,
    telephone number, e-mail address, date of birth and bank/credit card details.
  4. We collect Personal Information from you in a number of ways, including:
    1. online or by telephone when you make a donation to Greenpeace Australia
      Pacific;
    2. online when you purchase Greenpeace Australia Pacific merchandise;
    3. online or in-person when you register to learn more or participate in a campaign
      or action with Greenpeace Australia Pacific, such as by signing a petition; and
    4. from third parties that have provided us with lists to identify prospective donors.
  5. By giving your Personal Information to Greenpeace Australia Pacific in these and similar
    circumstances you consent to the collection of that information.
  6. When we collect Personal Information from you, we expect you will only provide
    information that is accurate, complete and up to date. We will only collect Personal
    Information by lawful and fair means.
  7. Occasionally we may also collect data from third parties by lawful means and always in
    accordance with our obligations under the Spam Act 2003.
  8. Where it is lawful and practicable to do so, Greenpeace Australia Pacific will offer you
    the option of interacting with us anonymously or by using a pseudonym.
  9. Greenpeace Australia Pacific will not intentionally collect Sensitive Information from you,
    other than in exceptional circumstances, where we request the provision of Health
    Information because it is reasonably necessary to verify a request for a refund (to
    protect against fraud). In those circumstances, we will only collect Sensitive Information
    with the documented consent of the person or their appointed Attorney.
  10. We ask that you do not otherwise provide us with unsolicited Sensitive Information
    (including for example by leaving a comment on our social media posts that discloses
    your racial or ethnic origin, political opinion, religious beliefs or affiliations, philosophical
    beliefs or sexual preferences). If you do share Sensitive Information with us then we
    may, in our sole discretion, delete that information.
  11. If you think that we may have collected Sensitive Information from you other than in the
    circumstances referred to in paragraph 16, please contact us at [email protected] and we will delete it.

Use of data

  1. By giving your Personal Information to Greenpeace Australia Pacific you consent to our
    use of that information for the purpose for which it was collected and for related
    purposes such as:

    1.  to process your donations and to provide you with receipts;
    2. to communicate with you about campaigns and events;
    3. to ask you to participate in campaigns and events;
    4. to customise your digital experience with us;
    5. to inform you of how your gifts are helping us to reach our goals; and
    6. to update your Personal Information.
  2.  If you choose not to provide us with certain Personal Information, we may not be able to
    perform certain services, including processing your requests and payments,
    communicating with you or giving you full access to your supporter history (for example,
    donation history or previous campaign support).

Disclosure

  1. We may disclose your Personal Information to third parties acting on our behalf, where
    it is required or allowed by law, or where you have otherwise consented.
  2. We may disclose your Personal Information to third parties acting on our behalf for the
    purpose of continuing to engage with you, including:

    1. Where we engage data analysts to assist us to provide you with a better
      experience;
    2. Where we engage external parties to communicate with you for the purpose of
      fundraising or to provide information about campaign work you are supporting;
      or
    3. If you purchase products from our online shop, we may need to disclose your
      Personal Information to third parties to fulfill your order, for example for postage
      services. This will only happen when it is required to provide the service for
      which you originally disclosed your Personal Information
      and in all such circumstances we will ensure there is a written contract between
      Greenpeace Australia Pacific and the external party that includes conditions that protect
      data privacy and security.
  3. Greenpeace Australia Pacific may also disclose information about a donor’s donation
    history to third parties for the purposes of improving the efficacy of fundraising or
    campaigning, but will do so on a de-identified basis so that Personal Information is not
    disclosed.
  4. We will not disclose your Sensitive Information to third parties unless it is required by law or you instruct us in writing to do so.

Opting Out

  1. We will always offer you an opportunity to Opt-Out of receiving communications from
    Greenpeace Australia Pacific or change your communication preferences. Should you choose to Opt-Out, we will take steps to ensure your details are excluded from all internal marketing lists and future campaigns.

Data security and credit card security online

  1. Greenpeace Australia Pacific takes reasonable steps to ensure that the Personal Information it holds is accurate, complete and up-to-date.
  2. Greenpeace Australia Pacific will at all times take reasonable precautions to maintain
    the confidentiality of all the information that it holds about you, and will endeavour to
    protect the information from misuse, interferences and loss, and unauthorised access,
    modification or disclosure.
  3. All Personal Information is securely held by Greenpeace Australia Pacific.
  4. Greenpeace Australia Pacific holds data inside and outside of Australia with
    Greenpeace Australia Pacific and third party servers located in North America (United
    States); Europe (Ireland, Germany, United Kingdom and France); Asia-Pacific (Hong
    Kong; India; Japan; Singapore); South America (Brazil) and Middle East and Africa
    (South Africa).
  5. Greenpeace Australia Pacific uses secure server software that is the industry standard
    and is among the best software available for secure commerce transactions. It encrypts
    all of your Personal Information, including credit card number, name and address so
    that it cannot be read as the information travels over the Internet.

Visiting our website / Cookies

  1. When you visit our website:
    1. We will not collect Personal Information from you other than what you supply to us on a voluntary basis and your IP address;
    2. We may collect and store your computer’s assigned IP address, and non-personally identifying data such as the date and time of your visit, the information accessed and the referring page.
  2. Greenpeace Australia Pacific uses internet analytics tools such as Google Analytics to analyse our website records to improve the value of the content available on our website. Information shared with these tools may include your IP address, but is otherwise not personally identifiable.
  3. Like many websites, our website uses ‘cookies’ and other techniques such as pixels and tags to record non-Personal Information such as the date, time or duration of your visit, or the pages accessed, for website administration, statistical and maintenance purposes, as well as advertising to show you more content from Greenpeace Australia Pacific we believe from your activity you may be interested in.
  4. You have the ability to accept or decline cookies and other techniques by modifying your choice of browser or the settings in your browser. Please note that some parts of the website may not function fully for users that disallow cookies.
  5. When you visit our website and provide Personal Information, for example to make a donation or sign a petition:
    1. that information may be saved so that next time you visit our website that information can be prefilled. Payment information is never saved in this manner;
    2. to help customise and improve your online experience, we may share an anonymised (also known as hashed) version of your Personal Information with a trusted third party platform (such as Facebook). The hashed information is used to match with the third party’s own hashed information, allowing us to deliver you a more personalised experience across these platforms.
  6. When a supporter donates on our website, Personal Information including banking details is collected as follows:
    1. Banking details are collected by a secure third party payment platform and are not available are to Greenpeace Australia Pacific;
    2. Other Personal Information is collected by Greenpeace Australia Pacific and securely stored in our donor database.

Access, correction, destruction and complaints

  1. Greenpeace Australia Pacific will provide you with access to information we hold about
    you where this is possible and where it is necessary and lawful for us to do so. We will
    also take reasonable steps to update the information so that it is accurate, complete
    and current.
  2. We take reasonable steps to ensure that when the information is no longer needed, it is
    destroyed or put beyond use.
  3. If you want to change or destroy any information that you have previously given to us,
    or if you have any complaints relating to privacy issues, please contact our Privacy
    Officer using the contact information provided at the end of this privacy policy.
  4. When you contact us, please include your email address, name, address, and telephone
    number and clearly describe your request or complaint. We will respond within a
    reasonable period.
  5. We reserve the right to charge you a reasonable fee for access to your information.
    These charges will be limited to the cost of recouping our expenses for providing you
    with your information, such as document retrieval, photocopying, labour and delivery.
  6. If we decline your request to access your Personal Information or to correct it we will
    provide you with written notice setting out why your request has been refused and the
    mechanisms available to complain about the refusal. If you are not satisfied with our
    response, you may, at any time, refer your complaint to the Office of the Australian
    Information Commissioner (www.oaic.gov.au).

Privacy Officer

  1. Greenpeace Australia Pacific’s Privacy Officer in respect of information collected under
    this Policy is the Director of Fundraising and Technology.
  2. The Privacy Officer is responsible for ensuring that: 3
    1. privacy obligations are considered when designing and implementing systems
      or infrastructure for the collection and handling of Personal Information;
    2. employees and volunteers receive appropriate training and communications
      about Greenpeace Australia’s information handling policies and practices;
    3. procedures are established and maintained to receive and respond to requests
      for access and correction, complaints and other inquiries;
    4. Procedures are established to identify and manage privacy risks and compliance
      issues.

3 Australian Privacy Principles, 1.2, Fundraising Institute of Australia Privacy Compliance Manual for
Charitable Institutions (May 2019) (FIA Privacy Manual), [4.1.6].

Contact Us

  1. For further information about our privacy policy, please contact our Privacy Officer on
    the following details:

Greenpeace Australia Pacific Limited
Privacy Officer
GPO Box 2622
Sydney NSW 2001
Australia
Phone toll free – 1800 815 151
Email – [email protected]

Other Relevant Resources

  1. Privacy Act 1988, including the Australian Privacy Principles
  2. Spam Act 2003 (Cth)
  3. Do Not Call Register Act 2006 (Cth)
  4. Fundraising Institute of Australia Privacy Compliance Manual for Charitable Institutions
    May 2019

Definitions

  1. The following words have the following meaning in this policy:
    1. Health Information means: information or an opinion about:
    1. the health or a disability (at any time) of an individual; or
    2. an individual’s expressed wishes about the future provision of health
      services to him or her; or
    3. a health service provided, or to be provided, to an individual;
  1. that is also personal information.
    1. Personal Information means information or an opinion about an identified
      individual, or an individual who is reasonably identifiable, whether true or not,
      and includes:

      1. an individual’s name, signature, address, phone number or date of birth;
      2. Sensitive Information;
      3. banking details;
      4. employee record information;
      5. photographs;
      6. internet protocol (IP) addresses
    2. Sensitive Information means: 6
      1. information or an opinion about an individual’s:
        1. racial or ethnic origin; or
        2. political opinions; or
        3. membership of a political association; or
        4. religious beliefs or affiliations; or
        5. philosophical beliefs; or
        6. membership of a professional or trade association; or
        7. membership of a trade union; or sexual orientation or practices;
          or
        8. criminal record;
        • that is also Personal Information; or
      2. Health Information about an individual.

4 Privacy Act 1988 s 6.
5 Privacy Act 1988 s 6.
6 Privacy Act s 6