A policy document setting out how your business collects, uses, discloses, shares and stores personal information, including ‘sensitive’ information such as your client’s health information.

• All Australian businesses.
• All states and territories.
• Drafted for health professionals but can be easily adapted to suit any industry.

In Australia, you are legally required to have a Privacy Policy if:

• Your business generates more than $3million in annual turnover;
• Your business generates less than $3million in annual turnover BUT you:
  • provide a health service and hold health information (other than in an employee record);
  • buy or sell personal information; or
  • are a contracted service provider for a Commonwealth contract.

(note: other tests may apply, always speak to a lawyer if you are unsure)

Therefore if you provide a health service and hold health information, you must comply with the Privacy Act, and Australian Privacy Principles (APP’s), which include having a Privacy Policy. Fines and penalties may apply if you do not comply with the Privacy Act and APP’s.

Even if you are not legally required to have a privacy policy , it is always best practice to do so. The benefits are:

• your business is transparent about its privacy practices;
• your clients/customers have confidence and trust in you;
• better for marketing purposes (google ranking etc).

• The types of personal information you collect and hold;
• How you collect personal information;
• the purposes for which you collect hold, use and share personal information;
• to whom do you share personal information with;
• how an individual may access and correct their personal information;
• how an individual may make a complaint and how you will handle their complaint; and
• whether you are likely to disclose personal information to overseas recipients, and if so, to which countries.

No. This policy only complies with Australian Privacy law and APP’s. If you require a GDPR-compliant privacy policy, please contact us.

Once you have completed our Privacy Policy template, you can publish it on your website as a new page and link to it in the footer, usually along with your Website Terms of Use.

Whereas a privacy policy sets out your general policy for collecting personal information, a collection notice, is a short summary designed to notify parties at the time you are collecting personal information from them that you are doing so.

A collection notice is specific to the circumstance in which you are collecting the information.

While you only have one privacy policy, you may have several shorter collection notices.

For example, if someone is purchasing a water filter from your website, you may set out in a collection notice on the purchase page:

• that you are collecting personal information for the purposes of processing their order and shipping them the water filter;
• who you are likely to disclose the information to;
• whether you are likely to disclose the information to an overseas recipient; and
• where they can find your privacy policy.

Yes, it is suitable for use in all states and territories in Australia.

This template is designed for those doing business in Australia complies with Australian privacy laws. While similar principles may apply in your jurisdiction, please consult with a lawyer qualified in your jurisdiction.

It sure is! It is drafted by qualified Australian lawyers and is legally binding.

Word.doc

All our templates come with instructions on how to complete them. You complete the highlighted text in the template in order to personalise to suit your business needs, then you save, delete any explanatory comments in the template, remove any remaining highlight and you are ready to use it. Feel free to add your branding and logo. We think your legals should fit seamlessly into your business branding.

Approximately 5-10 mins.