Privacy Policy

Schedule 1 – Donor Collection Notice

Schedule 2 – Participant Collection Notice

Schedule 3 – Sensitive Information Collection Notice

Purpose

  1. Greenpeace Australia Pacific Limited (‘we’, ‘us’) is an independent campaigning organisation that uses non-violent direct action to expose global environmental problems and to force solutions that are essential to a green and peaceful future.
  2. Just as we campaign to protect the environment, we care about protecting our supporters and their information:
    1. We try to only collect the information we need from you for the particular function or activity we are carrying out.
    2. We will not intentionally collect Sensitive Information (such as Health Information) from you, except in exceptional circumstances (see 16 below).
    3. We may disclose your Personal Information to third parties acting on our behalf (see 21 – 24 below), but only where you consent, or it is for the purpose of continuing to engage with you about our work, and we are confident they will protect your information.
    4. You can always opt out from receiving our communications.
    5. We ensure that Personal Information is held securely.
    6. We take reasonable steps to ensure that when the information is no longer needed, it is destroyed, de-identified or put beyond use (meaning we can no longer access or share the information).
  3. Greenpeace Australia Pacific is committed to ensuring that your privacy is protected and that Personal Information that it collects from you will be used in accordance with this policy. Greenpeace Australia Pacific respects and upholds your rights to privacy protection under the Privacy Act 1988, including the Australian Privacy Principles (APPs), regarding how we collect, use, disclose and hold your Personal Information.
  4. The purpose of this privacy policy is to govern how Greenpeace Australia Pacific deals with Personal Information, and to inform members of the public (and in particular Supporters) (‘you’, ‘your’):
    1. what kind of information we may collect from you and how we collect it;
    2. how we may use that information;
    3. how we store that information;
    4. whether we will disclose it to anyone else;
    5. how you may access or correct this information; and
    6. how you can contact us.

Access to this Policy and Provision of Donor Collection Notice

  1. The current version of this policy will at all times be available on Greenpeace Australia Pacific’s website.
  2. At the time of collection of Personal Information (or, if not practicable, as soon as practicable after) from donors and prospective donors, Greenpeace Australia Pacific will provide donors and prospective donors with the Donor Collection Notice in Schedule 1. 1
  3. At the time of collection of Personal Information (or, if not practicable, as soon as practicable after) from participants in campaign activities (for example persons who sign a petition) Greenpeace Australia Pacific will provide those persons with the Participant Collection Notice in Schedule 2. 2
1 APP 5.2.
2 APP 5.2.

Data collection

  1. At all times we try to only collect the information we need for the particular function or activity we are carrying out.
  2. Greenpeace Australia Pacific collects Personal Information from you where it is reasonably necessary for one or more of our functions or activities, in particular soliciting or accepting donations to support our campaign work, or engaging with members of the public in respect of that work.
  3. The types of Personal Information that we may collect include your name, address, telephone number, e-mail address, date of birth and bank/credit card details.
  4. We collect Personal Information from you in a number of ways, including:
    1. online or by telephone when you make a donation to Greenpeace Australia Pacific;
    2. online when you purchase Greenpeace Australia Pacific merchandise;
    3. online or in-person when you register to learn more or participate in a campaign or action with Greenpeace Australia Pacific, such as by signing a petition; and
    4. from third parties that have provided us with lists to identify prospective donors.
  5. By giving your Personal Information to Greenpeace Australia Pacific in these and similar circumstances you consent to the collection of that information.
  6. When we collect Personal Information from you, we expect you will only provide information that is accurate, complete and up to date. We will only collect Personal Information by lawful and fair means.
  7. Occasionally we may also collect data from third parties by lawful means and always in accordance with our obligations under the Spam Act 2003.
  8. Where it is lawful and practicable to do so, Greenpeace Australia Pacific will offer you the option of interacting with us anonymously or by using a pseudonym.
  9. Greenpeace Australia Pacific will not intentionally collect Sensitive Information from you, other than in exceptional circumstances, where we request the provision of Health Information because it is reasonably necessary to verify a request for a refund (to protect against fraud). In those circumstances, we will only collect Sensitive Information with the documented consent of the person or their appointed Attorney.
  10. We ask that you do not otherwise provide us with unsolicited Sensitive Information (including for example by leaving a comment on our social media posts that discloses your racial or ethnic origin, political opinion, religious beliefs or affiliations, philosophical beliefs or sexual preferences). If you do share Sensitive Information with us then we may, in our sole discretion, delete that information.
  11. If you think that we may have collected Sensitive Information from you other than in the circumstances referred to in paragraph 16, please contact us at [email protected] and we will delete it.

Use of data

  1. By giving your Personal Information to Greenpeace Australia Pacific you consent to our use of that information for the purpose for which it was collected and for related purposes such as:
    1. to process your donations and to provide you with receipts;
    2. to communicate with you about campaigns and events;
    3. to ask you to participate in campaigns and events;
    4. to customise your digital experience with us;
    5. to inform you of how your gifts are helping us to reach our goals; and
    6. to update your Personal Information.
  2.  If you choose not to provide us with certain Personal Information, we may not be able to perform certain services, including processing your requests and payments, communicating with you or giving you full access to your supporter history (for example, donation history or previous campaign support).

Disclosure

  1. We may disclose your Personal Information to third parties acting on our behalf, where it is required or allowed by law, or where you have otherwise consented.
  2. We may disclose your Personal Information to third parties acting on our behalf for the purpose of continuing to engage with you, including:
    1. Where we engage data analysts to assist us to provide you with a better experience;
    2. Where we engage external parties to communicate with you for the purpose of fundraising or to provide information about campaign work you are supporting;
      or
    3. If you purchase products from our online shop, we may need to disclose your Personal Information to third parties to fulfill your order, for example for postage services. This will only happen when it is required to provide the service for which you originally disclosed your Personal Information and in all such circumstances we will ensure there is a written contract between Greenpeace Australia Pacific and the external party that includes conditions that protect data privacy and security.
  3. Greenpeace Australia Pacific may also disclose information about a donor’s donation history to third parties for the purposes of improving the efficacy of fundraising or campaigning, but will do so on a de-identified basis so that Personal Information is not disclosed.
  4. We will not disclose your Sensitive Information to third parties unless it is required by law or you instruct us in writing to do so.

Opting Out

  1. We will always offer you an opportunity to Opt-Out of receiving communications from Greenpeace Australia Pacific or change your communication preferences. Should you choose to Opt-Out, we will take steps to ensure your details are excluded from all internal marketing lists and future campaigns.

Data security and credit card security online

  1. Greenpeace Australia Pacific takes reasonable steps to ensure that the Personal Information it holds is accurate, complete and up-to-date.
  2. Greenpeace Australia Pacific will at all times take reasonable precautions to maintain the confidentiality of all the information that it holds about you, and will endeavour to protect the information from misuse, interferences and loss, and unauthorised access, modification or disclosure.
  3. All Personal Information is securely held by Greenpeace Australia Pacific.
  4. Greenpeace Australia Pacific holds data inside and outside of Australia with Greenpeace Australia Pacific and third party servers located in North America (United States); Europe (Ireland, Germany, United Kingdom and France); Asia-Pacific (Hong Kong; India; Japan; Singapore); South America (Brazil) and Middle East and Africa (South Africa).
  5. Greenpeace Australia Pacific uses secure server software that is the industry standard and is among the best software available for secure commerce transactions. It encrypts all of your Personal Information, including credit card number, name and address so that it cannot be read as the information travels over the Internet.

Visiting our website / Cookies

  1. When you visit our website:
    1. We will not collect Personal Information from you other than what you supply to us on a voluntary basis and your IP address;
    2. We may collect and store your computer’s assigned IP address, and non-personally identifying data such as the date and time of your visit, the information accessed and the referring page.
  2. Greenpeace Australia Pacific uses internet analytics tools such as Google Analytics to analyse our website records to improve the value of the content available on our website. Information shared with these tools may include your IP address, but is otherwise not personally identifiable.
  3. Like many websites, our website uses ‘cookies’ and other techniques such as pixels and tags to record non-Personal Information such as the date, time or duration of your visit, or the pages accessed, for website administration, statistical and maintenance purposes, as well as advertising to show you more content from Greenpeace Australia Pacific we believe from your activity you may be interested in.
  4. You have the ability to accept or decline cookies and other techniques by modifying your choice of browser or the settings in your browser. Please note that some parts of the website may not function fully for users that disallow cookies.
  5. When you visit our website and provide Personal Information, for example to make a donation or sign a petition:
    1. that information may be saved so that next time you visit our website that information can be prefilled. Payment information is never saved in this manner;
    2. to help customise and improve your online experience, we may share an anonymised (also known as hashed) version of your Personal Information with a trusted third party platform (such as Facebook). The hashed information is used to match with the third party’s own hashed information, allowing us to deliver you a more personalised experience across these platforms.
  6. When a supporter donates on our website, Personal Information including banking details is collected as follows:
    1. Banking details are collected by a secure third party payment platform and are not available are to Greenpeace Australia Pacific;
    2. Other Personal Information is collected by Greenpeace Australia Pacific and securely stored in our donor database.

Access, correction, destruction and complaints

  1. Greenpeace Australia Pacific will provide you with access to information we hold about you where this is possible and where it is necessary and lawful for us to do so. We will also take reasonable steps to update the information so that it is accurate, complete and current.
  2. We take reasonable steps to ensure that when the information is no longer needed, it is destroyed or put beyond use.
  3. If you want to change or destroy any information that you have previously given to us, or if you have any complaints relating to privacy issues, please contact our Privacy Officer using the contact information provided at the end of this privacy policy.
  4. When you contact us, please include your email address, name, address, and telephone number and clearly describe your request or complaint. We will respond within a reasonable period.
  5. We reserve the right to charge you a reasonable fee for access to your information. These charges will be limited to the cost of recouping our expenses for providing you with your information, such as document retrieval, photocopying, labour and delivery.
  6. If we decline your request to access your Personal Information or to correct it we will provide you with written notice setting out why your request has been refused and the mechanisms available to complain about the refusal. If you are not satisfied with our response, you may, at any time, refer your complaint to the Office of the Australian Information Commissioner (www.oaic.gov.au).

Privacy Officer

  1. Greenpeace Australia Pacific’s Privacy Officer in respect of information collected under this Policy is the Director of Fundraising and Technology.
  2. The Privacy Officer is responsible for ensuring that: 3
    1. privacy obligations are considered when designing and implementing systems or infrastructure for the collection and handling of Personal Information;
    2. employees and volunteers receive appropriate training and communications about Greenpeace Australia’s information handling policies and practices;
    3. procedures are established and maintained to receive and respond to requests for access and correction, complaints and other inquiries;
    4. Procedures are established to identify and manage privacy risks and compliance issues.
3 Australian Privacy Principles, 1.2, Fundraising Institute of Australia Privacy Compliance Manual for
Charitable Institutions (May 2019) (FIA Privacy Manual), [4.1.6].

Contact Us

  1. For further information about our privacy policy, please contact our Privacy Officer on the following details:

Greenpeace Australia Pacific Limited
Privacy Officer
GPO Box 2622
Sydney NSW 2001
Australia
Phone toll free – 1800 815 151
Email – [email protected]

Other Relevant Resources

  1. Privacy Act 1988, including the Australian Privacy Principles
  2. Spam Act 2003 (Cth)
  3. Do Not Call Register Act 2006 (Cth)
  4. Fundraising Institute of Australia Privacy Compliance Manual for Charitable Institutions May 2019

Definitions

  1. The following words have the following meaning in this policy:
    1. Health Information means: 4 information or an opinion about:
    2. the health or a disability (at any time) of an individual; or
    3. an individual’s expressed wishes about the future provision of health services to him or her; or
    4. a health service provided, or to be provided, to an individual;
  2. that is also personal information.
    1. Personal Information means 5 information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether true or not, and includes:
      1. an individual’s name, signature, address, phone number or date of birth;
      2. Sensitive Information;
      3. banking details;
      4. employee record information;
      5. photographs;
      6. internet protocol (IP) addresses
    2. Sensitive Information means: 6
      1. information or an opinion about an individual’s:
        • racial or ethnic origin; or
        • political opinions; or
        • membership of a political association; or
        • religious beliefs or affiliations; or
        • philosophical beliefs; or
        • membership of a professional or trade association; or
        • membership of a trade union; or sexual orientation or practices;
        • or
          criminal record;
          • that is also Personal Information; or
      2. Health Information about an individual.
4 Privacy Act 1988 s 6.
5 Privacy Act 1988 s 6.
6 Privacy Act s 6

More of our polices and guidelines

Privacy Policy
Privacy Policy (Our People)
Refund Policy
Direct Debit Request Service Agreement
Donor Charter
Complaints
Social Media
Our Integrity
Copyright