The Commission protects the privacy of your personal information. We endorse fair information handling practices and use of information in compliance with our obligations under the Privacy and Data Protection Act 2014 (Vic) and the Health Records Act 2001 (Vic).
Website Privacy Statement
Personal information will be used only for the intended purpose. Where the intention includes confidentiality, information will be treated as such unless otherwise required by law.
This privacy statement explains how your personal information (being information capable of identifying you as an individual) will be treated as you access and interact with this website. The practices outlined in this privacy statement are subject to any rights we may have to handle personal information in accordance with the privacy legislation.
The personal information we collect via this website may include:
- the content in electronic forms that you submit via this website
- messages or comments, including personal information such as name, email address and telephone number, you submit to us via this website. For example, that you submit to email addresses displayed on this website.
- email addresses on this site will only be used to respond to specific user queries and will not be added to any mailing lists, nor disclosed to any other party without users' knowledge and consent, unless required by law.
Use and disclosure of your personal information
Where we collect personal information from you via our website, a privacy disclaimer will indicate which third parties we might share your information with (if any). In addition to providing our services to you and carrying out your requests, we may use or disclose personal information that we collect about you for purposes including the following:
- for the purpose that we have collected the information
- purposes related to our research, planning, product and service development, security and testing
- purposes connected with the operation, administration, development or enhancement of this website
- where we suspect that fraud or unlawful activity has been, is being or may be engaged in
- any other purposes required or authorised by law.
We may share personal information with the Department of Health and Human Services and with third parties. The types of third parties to whom we may disclose your personal information includes our contracted service providers who assist us in providing this website and delivering our services.
We have implemented technology and security policies, rules and measures to protect the personal information that we have under our control. However, you should be aware that there are risks in transmitting information across the Internet. So while we strive to protect such information, we cannot ensure or warrant the security of any information transmitted to us online and individuals do so at their own risk. Once any personal information comes into our possession, we will take reasonable steps to protect that information from misuse and loss and from unauthorised access, modification and disclosure. If you are concerned about conveying sensitive material to us over the Internet, you might prefer to contact us by telephone or mail. We will remove personal information from our system where it is no longer required (except where archiving is required and in order to fulfil our obligations under the Public Records Act 1973 (Vic)).
We take additional steps to protect the security of your personal information, such as strong 128-bit SSL encryption. Before using these facilities, you should ensure that you are using a web browser that supports 128-bit encryption. In many web browsers, you can confirm that your session is encrypted by the appearance of a locked padlock symbol located in the browser status bar at the foot of the browser.
Feedback, information request form and email
We may preserve the content of any feedback form, information request form, email or other electronic message that we receive. Any personal information contained in that message will only be used or disclosed in ways set out in this Website Privacy Statement. We will not use that information to add you to a mailing list without your consent.
Website statistical data collection
This website uses several online tools to measure website use, which are provided by third party software vendors. We use these tools to help us make our site better.
We use software by third parties, including:
For further information on how these third party software vendors handle your personal information, please review their privacy policies. Personal information may be provided to third parties when accessing this website. Information that may be shared to third parties includes:
- network location and IP address
- the date and time of your visit to our website
- the types of web browser (e.g. Internet Explorer, Google Chrome, Safari) and operating system (e.g. Windows 10, Mac OS X etc.) you are using
- Referring site details (such as the URL that you came through to arrive at our website)
- Page visited and the time spent on each page
- Documents downloaded and search terms used
- The forms accessed on our website
- Unique device identifier
- Cookies and data about which page you visited
- Device information, hardware model, operating system information, app version, app usage, debugging information, browser information
- Geo location information (if enabled by user)
- May assign a unique user identifier
The information we disclose to some of our third-party vendors may travel outside Victoria. We take steps to ensure that when your personal information travels, privacy protections travel with it.
Third party software vendors may alter how they collect and handle personal information at any time.
Use and disclosure
Use of web analytics data
We use web analytics data for statistical purposes, such as to analyse, measure, and report on data about our website traffic and visits. This information helps us understand general user trends at an aggregate level, and improve our website, content, and user experience.
We also use web analytics data as part of information campaigns to assess the effectiveness of our information campaigns and to provide information to users of our website.
We may also use this information for security audits to protect against threats from hackers or other security purposes.
We do not use this information to identify you or match it with any other personal information that we may collect from you, unless required to do so as part of an internal investigation or for a law enforcement-related purpose, in accordance with the PDP Act.
Your site visit data is collected under the authority of Information Privacy Principle 1.1 of the PDP Act for the purposes stated above.
Disclosure of web analytics data
Apart from the third party tools described in this Privacy Statement, we do not disclose your site visit data to any other third parties without your consent, unless we are required or authorised to do so by law. In the event of an investigation into suspected unlawful or improper activity, a law enforcement or government agency may use its legal authority to inspect our web server’s records (e.g. in relation to hacking or abusive messages).
Can I opt out of the collection of web analytics data?
You cannot opt out of the automatic collection of information that is used for analytical purposes, however you may choose to disable cookies or delete any individual cookie. Cookies are small data files that a website is able to place on a user’s hard drive to record aspects of that user’s experience of the website. If you choose to disable cookies, the website may not function fully and your ability to browse, read, and download information contained on our website may be impaired. However, you may still access our services by contacting our office via other methods such as telephone, email, or mail.
You can enable a “Do Not Track” setting on your browser to help protect your privacy. When Do Not Track is tuned on, your browser will send a Do Not Track request to the sites you visit, and to the third parties whose content is hosted on those sites. However, many websites will still collect and use your browsing data regardless of the Do Not Track Request. This depends on individual sites’ privacy practices. Sending a Do Not Track request does not guarantee privacy protection.
Instructions on how to enable the Do Not Track setting:
You can also opt out of tracking and website analytics using a Google browser plugin.
While you can browse this website anonymously, without disclosing your personal information, we may not be able to provide the full range of services through this website if we are not provided with the information outlined above.
Links to external websites
This privacy statement does not extend beyond this website. When following links to other sites from this website, we recommend that you read the privacy statement of that site to familiarise yourself with its privacy practices.