03 Feb Privacy Policy

Privacy Policy

The Digital Finance Cooperative Research Centre (DFCRC) is governed by the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). The APPs regulate how personal information is handled by the DFCRC. ‘Personal information’ means information or an opinion about an identified individual, or an individual who is reasonably identifiable. The DFCRC’s Privacy Policy applies to personal information collected and/or held by the DFCRC. We will review this policy regularly, and we may update it from time to time.

The types of personal information we collect and hold

We collect personal information about our customers, members, students, industry partners and collaborators, as part of our routine activities. We also collect personal information about our staff, contractors, and suppliers, as well as the contact details of individuals who work for current, past and prospective customers, suppliers, and other types of professional associates and personal contacts.

How we collect personal information

Information that you specifically give us: we may ask you to provide us with certain types of personal information if you wish to obtain a particular service or product from us. This might happen over the telephone, through our website, by filling in a paper form, or meeting with us face-to-face. You might also provide your personal information to us, without us directly asking for it, for example if you engage with us on social media.

Information that we collect from others

If you attend an event, apply for a job or scholarship, or enter into a contract with us, we collect personal information about you. We may also check some details about our suppliers from publicly available sources, such as the Australian Business Register and ASIC databases, checking a student’s past academic history from another university; using the Document Verification Service to check whether identity documents are valid; conducting reference checks.

Information that we generate ourselves

We maintain records of the interactions we have with customers, members, students, industry partners and collaborators, including the products and services we have provided to you.

We collect limited information about users of our website, for diagnostic and analytic purposes. We use cookies and gather IP addresses to do so, but we do not trace these back to individual users.

The types of personal information we collect

The types of personal information we collect about customers, members, students, industry partners and collaborators include:

• Name and contact details including phone number and e-mail address; and
• Details of the academic records of our students if they apply for a scholarship

Links to other sites

On our website, we may provide links to third party websites. These linked sites are not under our control, and we cannot accept responsibility for the conduct of companies linked to our website. Before providing your personal information via any other website, we advise you to examine the terms and conditions of using that website and its privacy policy.

How we use personal information

We may use your personal information for the following purposes:

• to provide the service or product you have requested
• to provide technical or other support to you
• to answer your enquiry about our services, or to respond to a complaint
• to manage our employment, scholarship or business relationship with you
• to promote our other programs, products or services which may be of interest to you (unless you have opted out from such communications)
• to comply with legal and regulatory obligations
• if otherwise permitted or required by law, or
• for other purposes with your consent unless you withdraw your consent.

We will keep personal information about you, to use for the above purposes, for as long as it is required for the purpose for which it is collected.

When we disclose personal information

Our third-party service providers: the personal information of customers, members, students, industry partners and collaborators, staff, suppliers and other contacts may be held on our behalf outside Australia, including ‘in the cloud’, by our third-party service providers. Our third-party service providers are bound by contract to only use your personal information on our behalf, under our instructions.

Our third-party service providers are Amazon Web Services, Google, MailChimp, Xero, Atlassian, Microsoft and third-party payment providers.

Other disclosures and transfers

We may also disclose your personal information to third parties for the following purposes:

• if necessary to provide or administer the service or product you have requested;
• if otherwise permitted or required by law; or
• for other purposes with your consent.

Accessing or correcting your personal information

You have the right to request access to the personal information the DFCRC holds about you. Unless an exception applies, we must allow you to see the personal information we hold about you, within a reasonable time period, and without unreasonable expense. You also have the right to request the correction of the personal information we hold about you. We will take reasonable steps to make appropriate corrections to personal information so that it is accurate, complete and up to date. Unless an exception applies, we must update, correct, amend, or delete the personal information we hold about you within a reasonable time period. We do not charge for making corrections.

To seek access to, or correction of, your personal information, please contact our Privacy Officer. To seek to exercise any of those rights, please contact our Privacy Officer.

To contact our Privacy Officer

If you have an enquiry or a complaint about the way we handle your personal information, or to seek to exercise your privacy rights in relation to the personal information we hold about you, you may contact our Privacy Officer as follows:

If you have an enquiry or a complaint about the way we handle your personal information, or to seek to exercise your privacy rights in relation to the personal information we hold about you, please contact our Privacy Officer, at privacy@dfcrc.com.

While we endeavour to resolve complaints quickly and informally, if you wish to proceed to a formal privacy complaint, we request that you make your complaint in writing to our Privacy Officer, by mail or email as above. We will acknowledge your formal complaint within 10 working days.

Mailing Address:

Level 9, Gateway, 1 Macquarie Street, Sydney NSW 2000.