Neddy4Nurses is a social movement that supports initiatives related to Australian nurses and related campaigns and events, including Mudgee4Nurses, Cuppa4Nurses and Pier2Pier. In this policy, “Neddy4Nurses”, “we”, “us” and “our” refer to that entity.
This policy explains how we collect, hold, use, disclose and protect personal information when you visit our website, contact us, subscribe for updates, donate, fundraise, volunteer, sponsor or support us, register for or attend an event, enter a vehicle, provide goods or services, apply to become an ambassador, interact with our social media or otherwise deal with us.
It applies to information collected online and offline through our websites, campaign pages, forms, email, telephone, social media, events and third-party platforms used on our behalf. Separate event terms, waiver forms, fundraising platform terms and collection notices may also apply. If there is an inconsistency, the more specific notice will apply to that particular collection or activity.
We are committed to handling personal information responsibly and, where applicable, in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), the Notifiable Data Breaches scheme and other applicable Australian laws. If an exemption applies to us, we intend to follow the standards in this policy as a matter of good practice, except where doing so would be unlawful or impracticable.
Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not and whether it is recorded in a material form or not.
Sensitive information is a category of personal information that includes health information, racial or ethnic origin, religious or philosophical beliefs, political opinions, sexual orientation, criminal records and membership of certain associations. We only collect sensitive information where it is reasonably necessary for our activities and we have consent or another lawful basis to do so.
The information we collect depends on how you interact with us and may include:
We usually collect personal information directly from you when you complete a website or event form, create a fundraising page, donate, subscribe, contact us, sign an agreement or waiver, apply to volunteer, provide goods or services, attend an event, respond to a survey or interact with us on social media.
We may also collect information from:
If we receive unsolicited personal information, we will decide whether we could lawfully have collected it. If not, and where lawful and reasonable, we will destroy or de-identify it.
Where practical, you may interact with us anonymously or using a pseudonym. For example, you may browse most of the website without identifying yourself and may be able to make a donation without public recognition. We may need your correct details where identification is required to issue a receipt, process a payment, register you safely for an event, verify eligibility, enter into an agreement, meet insurance or legal requirements, or respond properly to your request.
We may collect, hold, use and disclose personal information to:
We may use aggregated or de-identified information for planning, evaluation, research, reporting and advocacy where individuals are not reasonably identifiable. We do not sell or rent personal information or donor lists.
You do not have to provide personal information unless required by law or the relevant activity. However, if you do not provide information we reasonably need, we may be unable to process a donation or receipt, register you for an event, accept a vehicle entry, place you in a volunteer role, address safety or accessibility needs, provide requested information, or enter into a sponsorship or supplier arrangement.
Funds raised through Neddy4Nurses initiatives and projects are donated to the Australian College of Nursing Foundation (ACNF). Neddy4Nurses is an independent initiative and does not represent or act on behalf of the ACNF, although the ACNF endorses and supports the initiative and may handle funds and approved expenses directly.
Donations may be made through a fundraising or payment platform operated by or for the ACNF. The ACNF and the platform may collect and handle your personal and payment information under their own privacy policies and terms. Depending on the campaign settings and your choices, we may receive your name, contact details, donation amount, donor message, receipt status and communication preferences. We do not normally receive or store your complete payment card details.
You should review the privacy policy shown on the donation page before donating. Requests about tax-deductible receipts, payment processing, chargebacks or information held only by the ACNF or its platform may need to be directed to them. If you ask us, we will help identify the appropriate contact where reasonably possible.
If you select an anonymous option, we will not intentionally publish your identity in donor recognition materials. The ACNF, payment provider and authorised administrators may still need to know your identity to process the transaction, prevent fraud, issue a receipt or comply with law.
For events and volunteer activities, we collect only the information reasonably required to administer participation, confirm eligibility, allocate roles, provide access or dietary arrangements, manage vehicles and site operations, communicate changes, respond to incidents and meet safety, insurance or legal requirements.
Emergency contact information is collected for use in an emergency or where reasonably necessary for safety. If you give us another person’s details, you must have authority to do so and should tell them that their information has been provided to us and direct them to this policy.
Health, accessibility, dietary, screening and incident information may be sensitive information. We will seek consent where required, limit access to people who need the information for their role, and use or disclose it only for the relevant safety, participation, insurance, legal or emergency purpose, unless another use is permitted by law.
We may photograph, film or record our events and activities. We will use reasonable steps to notify attendees, such as through registration terms, signage or announcements. We will seek specific consent where reasonably appropriate, particularly for interviews, testimonials, identifiable feature stories, close-up promotional content and content involving children or sensitive circumstances.
Images and recordings may be used on our websites, social media, newsletters, reports, media releases, fundraising materials and other communications. They may be viewed, copied or shared by people in Australia and overseas once published online.
You may tell the event team if you do not wish to be photographed or contact us to withdraw consent for future uses. We will take reasonable steps to respect the request, but we may not be able to remove material already lawfully printed, published, archived, shared by third parties or incorporated into completed productions. Crowd and background images may not always identify or single out individuals.
Our website is intended for a general audience and is not designed to collect personal information directly from children without appropriate involvement from a parent or guardian. Children and young people may attend family or community events subject to the relevant event terms and supervision requirements.
Where we knowingly collect personal information about a child or young person, we will take reasonable steps appropriate to their age and circumstances. This may include providing a clear collection notice, assessing whether they can understand and give valid consent, seeking consent from a parent or guardian where appropriate, limiting collection to what is necessary, and applying additional care to photographs, stories, health information and public recognition.
If you believe a child has provided personal information to us without appropriate consent, contact us so we can investigate and, where appropriate, delete or de-identify it.
We may disclose personal information, where reasonably necessary for the purposes described in this policy, to:
Service providers may handle information only to provide services to us or for purposes permitted by their agreements and applicable law. We do not give sponsors or unrelated organisations personal information for their own marketing unless you consent or we are otherwise permitted by law.
Some technology, cloud, analytics, email, social media, fundraising and payment providers may store or process personal information outside Australia or allow authorised support staff overseas to access it. The countries may include the United States and [INSERT ANY OTHER CONFIRMED COUNTRIES]. Locations can change as providers update their infrastructure.
Where the Privacy Act applies, we will take reasonable steps required by APP 8 before disclosing personal information to an overseas recipient, unless an exception applies. Where practicable, we use reputable providers, review privacy and security terms, limit the information shared and apply access controls. You may contact us for current information about likely overseas locations relevant to your information.
Our website and third-party services may use cookies, pixels, tags, local storage and similar technologies. These technologies may collect device and usage information and may be used to:
The technologies used may include [CONFIRM AND LIST, FOR EXAMPLE: Google Analytics 4, Google Tag Manager, Meta Pixel, reCAPTCHA, embedded social media tools and email tracking]. These providers may combine information collected through our site with information they hold under their own privacy policies.
You can manage cookies through our cookie preference tool, where available, and through your browser or device settings. Blocking cookies may affect website functions. You can also use provider opt-out settings or advertising controls. We will seek consent before using non-essential technologies where consent is required, and we will not intentionally configure tracking technologies to collect sensitive information without express consent.
Our website may contain links to social media pages, fundraising platforms, ticketing services, partner websites and other third-party services. Those services are controlled by third parties and their privacy policies apply to information they collect. We are not responsible for their privacy practices, security or content.
Information you post publicly on social media or public fundraising pages may be visible to others and may be copied or shared beyond our control. Please avoid posting sensitive or unnecessary personal information in public comments or donor messages.
With your consent, or where otherwise permitted by law, we may send newsletters, fundraising appeals, event announcements, surveys, campaign updates and other communications. We will identify ourselves and provide a simple way to unsubscribe from marketing messages.
You can opt out at any time by using the unsubscribe link or instructions in the message, changing your preferences where available, or contacting us. We will action electronic marketing unsubscribe requests within the period required by the Spam Act 2003 (Cth), generally within five working days. We may retain minimal information on a suppression list so we do not contact you again against your wishes.
Opting out of marketing does not prevent us from sending non-marketing communications that are reasonably necessary for a donation, registration, event, safety matter, agreement, complaint or other existing relationship.
We take reasonable steps to ensure the personal information we collect, use and disclose is accurate, up to date, complete and relevant. Please contact us if your details change or you believe information we hold is inaccurate.
We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure. Measures may include role-based access, password and multi-factor authentication controls, secure hosting and transmission, backups, system updates, malware and spam protection, confidentiality requirements, staff and volunteer guidance, provider due diligence, and incident response procedures.
Despite these measures, no method of transmission or storage is completely secure. If you believe your interaction with us or your information has been compromised, contact us promptly using the details below.
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, a related permitted purpose, our governance and operational needs, dispute or insurance requirements, or a period required or authorised by law. Retention periods vary according to the type of record. For example, financial and donation records may need to be retained for statutory recordkeeping periods; incident and insurance records may be retained for relevant claim and limitation periods; marketing records may be held until you unsubscribe; and suppression records may be retained to respect your opt-out.
When personal information is no longer required, we take reasonable steps to destroy it securely or de-identify it, unless it is contained in a record we must retain by law. Copies may remain temporarily in secure backups until those backups are overwritten in the ordinary course.
You may request access to personal information we hold about you or ask us to correct it. Contact our Privacy Contact using the details below and describe the information concerned. We may need to verify your identity and authority before acting.
We will respond within a reasonable time. We will not charge you for making a request, although we may charge reasonable costs of providing access where permitted by law and advised in advance. In limited circumstances, we may refuse access or correction where permitted or required by law. If we do, we will generally provide written reasons and explain available complaint options, unless it would be unlawful or unreasonable to do so.
If requested and required by law, we will take reasonable steps to notify relevant third parties of a correction.
If you believe we have mishandled your personal information, please contact our Privacy Contact. Include your contact details, a description of the issue and the outcome you are seeking. We will acknowledge the complaint, investigate it fairly and aim to provide a written response within 30 days. If we need more time, we will explain why and provide an updated timeframe.
If you are not satisfied with our response, you may be able to complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au. The OAIC generally expects you to complain to the organisation first and allow a reasonable time for a response. Depending on the information and location involved, a State or Territory privacy or health complaints regulator may also be able to assist.
We maintain procedures to identify, contain, assess and respond to suspected data breaches. If a breach is likely to result in serious harm and the Notifiable Data Breaches scheme applies, we will notify affected individuals and the OAIC as required by law. We may also notify service providers, insurers, police or other regulators where appropriate.
We do not currently use personal information in automated decision-making that solely, or substantially and directly, makes a decision that could reasonably be expected to significantly affect an individual’s rights or interests. If this changes, we will update this policy and provide the information required by applicable law before or when the relevant process begins.
We may use ordinary software tools to help administer communications, registrations, spam filtering, analytics or recordkeeping. We will take reasonable steps to avoid entering personal or sensitive information into generative artificial intelligence tools unless the use is approved, necessary, appropriately protected and permitted by law.
We may update this policy when our activities, technology, service providers or legal obligations change. The current version will be published on our website with the “last updated” date. If a change is material, we may also provide notice through the website or our usual communication channels.
Click here to contact us for questions and concerns.
