This Privacy Policy applies to everyone who interacts with CPL – Choice, Passion, Life (CPL), our related entities, our agents and contractors. We are committed to protecting your privacy and collect, store, use and disclose personal information responsibly and transparently when we deliver our services and conduct our businesses. This Privacy Policy will tell you how we may collect, hold, use and disclose personal information about you, in accordance with the requirements under the Privacy Act 1988 (Cth) (Act) and other applicable legislations. Please be sure to read this entire Privacy Policy before submitting personal information to us, our agents or contractors. In this Privacy Policy, “we” and “us” refers to the CPL group of companies and “you” refers to any individual about whom we collect personal information.
The CPL group of companies comprises of CPL – Choice, Passion, Life, Access Arts (CPL) Ltd, and Cootharinga North Queensland.
Personal information is any information about an individual, such as name, age, telephone number, email address, profession or occupation. If the information we collect personally identifies you, or you are reasonably identifiable from it, the information will be considered personal information.
The type of personal information we collect and hold may include:
If you are receiving services from us, all information we collect from you is classified as “sensitive information” under the Act. We will collect, use and/or disclose your personal information with your consent, or otherwise as permitted by law.
If you are not a client, we will collect, use and/or disclose your personal information in accordance with the Act.
When you visit any of CPL Group’s websites and other online resources, our quality and performance software and internet service providers record anonymous information for statistical purposes only, including:
Our quality and performance software uses cookies when collecting this information.
No attempt is or will be made to identify you or to use or disclose your personal information except where required under a law, for example, a law enforcement agency may exercise a warrant to inspect our service providers’ logs.
We collect your personal information in a number of ways, including:
We may also collect your personal information from:
We may also collect information about you from your employers, family members, a carer, an attorney, a guardian or other authorised person.
We require personal information to operate as a business. Non-disclosure or withholding some of your personal information may mean we are unable to meet your request or provide our services to you.
The personal information you provide us may be used for a number of purposes connected with our business operations, which include to:
Please note if you are receiving regular email or SMS communication services from the CPL Group as part of your services delivery, they are not considered as direct marketing communications.
We may send our clients direct marketing communications and information about our products or services from time-to-time, that we consider may be of interest to you. These communications may be sent in various forms, including email, SMS and mail in accordance with applicable marketing laws, such as the Spam Act 2003 (Cth).
We will not use or disclose your personal information we hold for the purpose of direct marketing unless you have provided your consent to us, or alternatively as authorised by law.
You always have the right to opt out of receiving this information and if you would like us to stop, please call 1800 275 753 or contact info@cpl.org.au and we will remove your contact details from our marketing database within 30 days and for free.
We may disclose your personal information in certain circumstances, such as where we are required or authorised by law or where you have consented to us doing so.
We may also disclose your personal information to:
When making such a disclosure we will take reasonable steps to ensure that the recipient is bound by privacy obligations.
Without your consent, we will not disclose your personal information to third parties.
We will only send your personal information outside Australia:
You have the right to access the personal information that we hold about you. For enquiries regarding access to your personal records, please contact us as specified under “how to contact us” below.
Any requests for information will be processed within a reasonable timeframe (usually within 15 business days). If the retrieval of information involves accessing archived information and will take longer than normal, we will endeavour to provide you with an estimated timeframe.
You may also request to change the personal information about you. We will take reasonable steps to correct any information that is inaccurate, incomplete, out-of-date or misleading.
If the information retrieval process requires us to allocate additional staff or resources to meet your request, we reserve the right to charge a reasonable fee for the costs of retrieval and supply of any requested information.
Under some circumstances, we may refuse you access to personal information where denying access is required or authorised by law, for example if access would pose a threat to life or the health of anyone, where the request for access is regarded as frivolous or vexatious, or where information relates to anticipated or legal proceedings. If you are denied access to your information, we will explain why.
We will take all reasonable precautions to safeguard your information from loss, misuse, unauthorised access, modification, disclosure or destruction. We may store your files on paper format and/or electronically. We implement a range of physical and electronic security measures to protect the personal information that we hold, including physical access restrictions, password protection, multifactor authentications, access being restricted to authorised personnel and encryption of personal information before sending to 3rd party storage providers.
Information security is critical to the success and ongoing viability of CPL. Our core security principle is to ensure the confidentiality, integrity, security and availability of the information we manage on behalf of our employees, clients, customers and business partners (including donors and vendors), as well as our own information. Read our Information Security Principle in full here.
In the event of any loss or unauthorised access or disclosure of your personal information that is likely to result in serious harm to you, we will:
If you have any questions or concerns about our collection, use or disclosure of personal information, or if you believe we have not complied with this Privacy Policy or the Act, please contact us as set out below. Our Privacy Officer will investigate the complaint and determine whether a breach has occurred and what action, if any, to take.
CPL will take any privacy complaint seriously and will aim to resolve any such complaint in a timely and efficient manner, and our target response time is less than 30 days.
CPL expects our procedures will deal fairly and promptly with your complaint. However, if you remain dissatisfied, you can also make a formal complaint with the Officer of the Australian Information Commissioner (which is the regulator responsible for privacy in Australia):
Office of the Australian Information Commissioner (OAIC)
Complaints must be made in writing
* Director of Compliance
Office of the Australian
Information Commissioner
GPO Box 5218
Sydney NSW 2001
To access and update your personal information, or should you have any questions or concerns about this Privacy Policy or our information practices please contact our Privacy Officer:
Privacy Officer
Phone: 1800 275 753
Email: privacy@cpl.org.au
Postal: Level 2, 340 Adelaide Street, Brisbane QLD 4000
Our Privacy Policy may change from time to time as updated on the CPL website: Privacy Policy. Before providing us with personal information, please check this Privacy Policy on our website for any changes.
This Privacy Policy was last updated on 31 March 2021.
Our Privacy Policy is also available in Easy English: Easy English Privacy Policy
