When you trust us with your personal information, you expect us to protect it and keep it safe. We are bound by the Privacy Act 1988 (Cth) (Privacy Act) and other privacy laws and have strict obligations to protect your personal information in accordance with the Australian Privacy Principles (APPs). These principles govern how we can collect, use, hold and disclose your personal information, as well as ensuring the quality and security of your personal information. In some cases, we may be exempt from some or some aspects of these laws, in which case we may rely on those exemptions despite this policy. For example, the Privacy Act includes an exemption for the handling of employee records in some circumstances.
Lighthouse makes this Policy available free of charge and can be downloaded from our website www.lighthouseinfrastructure.com
This Policy explains how we manage your personal information. Upon collection, we may provide further details on how we will manage your personal information.
If you would like more information about how we protect your privacy, please contact us at firstname.lastname@example.org
Personal information includes any information or opinion, about an identified individual or an individual who can be reasonably identified from their information. The information or opinion will still be personal information whether it’s true or not and regardless of whether we have kept a record of it.
The information that we seek to collect about you will depend on the products or services that we provide. If you do not allow us to collect all of the information we request, we may not be able to deliver all of those services effectively.
The kinds of personal information we collect and hold about individuals include name, address, date of birth, contact details (e.g. phone numbers, email addresses), occupation, payment details (e.g. bank account), taxation information, identification details (e.g. drivers’ licence), and details of your transactions, interactions and communications with us.
For job applicants, we may also collect information about qualifications, skills, experience, character and screening checks (including health, reference, background, directorship, financial probity, identity, eligibility to work, vocational suitability and criminal record checks). For staff, in addition to these, we may collect information about training, emergency contact details, performance, conduct, use of our IT and communications resources, payroll matters, drug/alcohol tests, leave and tax/financial affairs.
The collection of sensitive information is restricted by the Privacy Act. This includes information about your religion, racial or ethnic origin, political opinions, criminal record and sexual orientation. It also includes health information and biometric information. Generally, we only collect this sort of information if it necessary to provide you with a specific product or service and you have consented to that collection. Under the APPs, Lighthouse may also collect sensitive information where an exception applies, e.g if the collection is required or authorised by law or necessary to take appropriate action in relation to suspected unlawful activity or serious misconduct.
The main reason we collect, use, hold and disclose personal information is related to providing our products and services. This includes:
We collect most personal information directly from you. We may also collect personal information about you from other people or organisations. This may include but is not limited to the following methods:
We are required or authorised to collect:
The personal information we may collect and hold includes (but is not limited to) personal information about clients, potential clients, service providers or suppliers, prospective employees, employees and contractors and other third parties who we may have contact with.
We may use and disclose personal information for the primary purposes for which it is collected, for reasonably expected secondary purposes which are related to the primary purpose and in other circumstances authorised by the Privacy Act.
We may use and disclose sensitive information only for the purpose for which it was provided or a directly related secondary purpose, unless the individual agrees otherwise, or where certain other limited circumstances apply (e.g. if required by law).
We engage other people to perform services for us, which may involve that person handling personal information we hold. In these situations, we are required to implement appropriate steps to protect the information where the Privacy Act applies, for example we may need to prohibit that person from using the personal information except for the specific purpose for which we supply it.
We may disclose personal information to:
We may also collect personal information from these organisations and individuals, and will deal with that information in accordance with this Policy.
Some of the third parties to which we disclose personal information are located outside Australia. These recipients may be located in the United States, United Kingdom, South Korea, Japan, United Arab Emirates and Singapore.
Under the Privacy Act, where applicable, we must not send personal information to recipients outside of Australia unless:
Lighthouse recognises how important the security of personal information is to clients and individuals. We will at all times seek to take appropriate steps designed to protect the personal information we collect and hold from interference, misuse or loss, and unauthorised access, modification or disclosure. Lighthouse employees must respect the confidentiality of the personal information we collect.
Personal information is held in paper files and electronically, both at our premises and with the use of service providers. The steps we take to protect the security of personal information depend on the circumstances, but may include secure areas for paper files, system access controls (e.g. passwords), encryption of transmitted data and printing restrictions.
Where we no longer require personal information for a permitted purpose, the APPs, where applicable, require us to take reasonable steps to destroy or de-identify it.
Lighthouse is subject to the Notifiable Data Breaches scheme under the Privacy Act. A Notifiable Data Breach occurs when there is unauthorised access to, unauthorised disclosure of, or loss of the personal information held by Lighthouse, and where the breach is likely to result in serious harm to an individual.
In accordance with the Notifiable Data Breaches scheme, Lighthouse has implemented the Data Breach Response Procedure, which requires Lighthouse to:
We may use your personal information to offer you a product and services we believe may interest you, but we will not do so if you tell us not to. These products and services may be offered by a member of the Lighthouse Group or one of its preferred suppliers.
We may offer you products and services by various means, including by mail, telephone, email, SMS or other electronic means such as through social media or targeted advertising through Lighthouse or non-Lighthouse Group websites.
We may also disclose your personal information to companies outside of Lighthouse who assist us to market our products and services to you. If you don’t want to receive marketing offers from us please contact us at email@example.com
You can request access to your personal information we hold about you. You can also ask for corrections to be made. To do so, please contact us. There is no fee for requesting that your personal information is corrected or for us to make corrections. In processing your request for access to your personal information, a reasonable cost may be charged. This charge covers such things as locating the information and supplying it to you.
There are some circumstances in which we are not required to give you access to your personal information. If we refuse to give you access to or to correct your personal information we will give you a notice explaining our reasons except where it would be unreasonable to do so.
If we refuse your request to correct your personal information, you also have the right to request that a statement be associated with your personal information noting that you disagree with its accuracy. If we refuse your request to access or correct your personal information, we will provide you with information about how you can complain about the refusal.
If you would like more information about how we handle your personal information or our approach to privacy, or to make a complaint please contact the Privacy Compliance Officer at:
What if I am not satisfied with the response?
If you are not satisfied with the result of your complaint to Lighthouse you can also refer your complaint to the Office of the Australian Information Commissioner as set out below: