Privacy Policy

THRIV3 (Indigenous Corporation) ("THRIV3", "we", "us", "our") is a not-for-profit Aboriginal Controlled Organisation registered under the Corporations (Aboriginal and Torres Strait Islander) Act 2006 (ICN 10165, ABN 90 515 247 153). We deliver programs and services to communities across Australia, including under Commonwealth contracts and grants.

We are committed to protecting your privacy. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains what we collect, why, how we hold it, and your rights.

• Contact details you give us, such as your name, email address and phone number, when you use our enquiry form, email us or call us.
• Your email address when you subscribe to our newsletter.
• Booking and purchase details when you book or pay for our services online. Payment card details are processed by our secure payment provider and are not stored by THRIV3.
• Information about program participants, which may include sensitive information such as health information or whether a person identifies as Aboriginal or Torres Strait Islander. We only collect sensitive information with consent, or where the law permits or requires it.
• Website usage information collected automatically through cookies and analytics, such as your IP address, device type, pages visited and time on site.

We collect information directly from you through our website forms, by email, by phone, and in person through our programs. We collect website usage information automatically through cookies and analytics tools.

We hold personal information in secure, access-controlled systems. We take reasonable steps to protect it from misuse, interference, loss, and unauthorised access, modification or disclosure, and to destroy or de-identify it when it is no longer needed.

• To respond to your enquiries.
• To deliver our programs and services and process bookings and payments.
• To send you our newsletter and updates, where you have subscribed.
• To report to Commonwealth and state funding bodies where our funding agreements require it. We de-identify information wherever possible.
• To improve our website and services.
• To meet our legal obligations.

We only send marketing emails, including our newsletter, with your consent, in line with the Spam Act 2003 (Cth). Every email identifies THRIV3 as the sender and includes a working unsubscribe link. You can opt out at any time.

Our website uses cookies and analytics tools to understand how visitors use the site. You can disable cookies in your browser settings, though some parts of the site may not work as intended. Analytics information is collected in a way that does not directly identify you.

• Service providers who help us run our organisation, such as IT, website hosting, email and payment providers.
• Commonwealth and state government agencies and funding bodies, where our agreements or the law require it.
• Anyone else where required or authorised by law.

We never sell personal information.

Some of our service providers, including analytics and email platforms, may store or process information overseas, including in the United States. Where this occurs, we take reasonable steps to ensure your information is handled consistently with the Australian Privacy Principles.

You may ask for access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date or incomplete. Contact us using the details below. We will respond within 30 days. Access is free or provided at reasonable cost.

If you believe we have breached the Australian Privacy Principles, please contact us first using the details below. We will acknowledge your complaint promptly and aim to resolve it within 30 days.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC): www.oaic.gov.au | 1300 363 992 | GPO Box 5288, Sydney NSW 2001.

We comply with the Notifiable Data Breaches scheme. If a data breach is likely to result in serious harm, we will notify affected individuals and the OAIC as required by law.

We may update this policy from time to time. The current version will always be published on this page with its effective date.