Effective Date: 1 July 2026

Introduction

Goodradigbee Cultural & Heritage Aboriginal Corporation (GCAHAC) (“we”, “us”, “our”) is committed to protecting the privacy, confidentiality and security of personal information. We recognise the importance of protecting personal, family, cultural and community information and are committed to handling information respectfully, confidentially and in a culturally safe manner.

This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you visit our website, access our services, or interact with us.

GCAHAC is committed to managing personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Information We Collect

We may collect personal information that is reasonably necessary for the delivery of our services, operation of our website, and management of our organisation.

The types of information we may collect include:

Personal Information

• Full name
• Postal address
• Email address
• Telephone number
• Date of birth
• Emergency contact details
• Information provided through forms, enquiries or correspondence

Sensitive Information

Where necessary and permitted by law, we may collect sensitive information, including:

• Aboriginal and Torres Strait Islander status
• Health and medical information
• Disability information
• Cultural information
• Family and household information
• Child protection or care-related information
• Information relating to support needs and service delivery

Sensitive information will only be collected with your consent or where otherwise authorised or required by law.

Website Information

When you visit our website, we may collect:

• IP address
• Browser type and version
• Device information
• Operating system
• Pages visited
• Date and time of access
• Referring websites

This information helps us improve website functionality, security and user experience.

How We Collect Information

We may collect information through:

• Website contact forms
• Email correspondence
• Telephone enquiries
• Program registrations and referrals
• Service applications
• Surveys and feedback forms
• Meetings and consultations
• Social media interactions
• Third-party referrals where authorised

How We Use Your Information

We use personal information to:

• Deliver programs, services and supports
• Respond to enquiries and requests
• Manage referrals and service delivery
• Communicate with clients, families, stakeholders and community members
• Improve our website and services
• Conduct reporting and quality assurance activities
• Meet legal, contractual and funding requirements
• Protect the safety and wellbeing of clients, staff and community members
• Comply with applicable laws and regulations

Where you have provided consent, we may also send information about programs, events, services and community activities.

Children’s Information

GCAHAC provides services to children, young people and families. We may collect personal information relating to children and young people where necessary for service delivery.

Where appropriate, consent will be obtained from a parent, guardian, authorised representative, or as otherwise permitted by law.

Cookies and Website Analytics

Our website may use cookies and similar technologies to improve user experience and analyse website traffic.

Cookies help us:

• Understand how visitors use our website
• Improve website performance
• Enhance website security
• Tailor website content

We may use analytics tools such as Google Analytics to collect anonymous information about website usage.

You can disable cookies through your browser settings; however, some website functionality may be affected.

Disclosure of Personal Information

We do not sell, rent or trade personal information.

We may disclose personal information to:

• Employees, contractors and authorised representatives
• Service providers assisting with website hosting, IT support or administration
• Funding bodies and government agencies where required
• Professional advisers including auditors, accountants and legal advisers
• Child protection, law enforcement or regulatory authorities where required by law
• Other organisations or service providers with your consent

We will only disclose personal information where it is lawful and appropriate to do so.

Data Security

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure.

Security measures may include:

• Secure electronic systems
• Password protection and access controls
• Staff confidentiality obligations
• Secure storage of records
• Regular monitoring and maintenance of systems

While we take reasonable precautions, no method of electronic transmission or storage is completely secure and we cannot guarantee absolute security.

Data Retention

We retain personal information only for as long as necessary to fulfil the purpose for which it was collected, meet legal and contractual obligations, and comply with record-keeping requirements.

When information is no longer required, it will be securely destroyed or de-identified in accordance with applicable laws and organisational procedures.

Access and Correction

You have the right to request access to personal information we hold about you and request corrections if the information is inaccurate, incomplete or out of date.

Requests should be submitted using the contact details below.

We may require verification of identity before providing access to personal information.

Marketing Communications

If you have subscribed to receive updates, newsletters or promotional communications, you may opt out at any time by:

• Clicking the unsubscribe link in email communications; or
• Contacting us directly.

Third-Party Websites

Our website may contain links to external websites.

We are not responsible for the privacy practices, security or content of third-party websites. We encourage users to review the privacy policies of any external websites they visit.

Privacy Complaints

If you believe your privacy has been breached or you have concerns about how we have handled your personal information, please contact us.

We will investigate complaints and respond within a reasonable timeframe.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC):

Website:www.oaic.gov.au

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legislation, organisational practices or service delivery.

Any updates will be published on this page and will take effect from the date of publication.

Contact Us

Goodradigbee Cultural & Heritage Aboriginal Corporation

Address: Suite 2, 83–85 Henry Street, Penrith NSW 2750

Phone: (02) 4729 1671

Email: info@gcahac.org.au

Website: www.gcahac.org.au