This statement outlines the School’s policy on how the school collects, uses and manages personal information relating to use of the Oxford Falls Grammar School Alumni & Community (or ‘website’). The School is bound by the Australian Privacy Act of 1988. We are committed to protecting and respecting your privacy and this Policy sets out what information we collect about you, where and how we use (“process”) it. We may change this Policy from time to time. If we make any significant changes, we will advertise this on the website or contact you directly with the information. Please check this page occasionally to make sure you are happy with any changes.
Oxford Falls Grammar School maintains a database in order to stay in touch with our community. The School keeps you updated about reunions, news, events and activities of Oxford Falls Grammar School which may include appeals for charities or for the school. Some of our database (but not all) choose to join and become members of our online community by registering on this website and creating an online profile. In both instances (individuals with offline database records and individuals with online profiles), we collect and store personal information (or “data”) about you.
. All enquiries for the Alumni can be directed to email@example.com What type of personal information we collect
The information we have about you depends on where we collect it, but may include:
Where we collect information from
- First name
- Last name
- Date of birth
- Family relationships
- Years at Oxford Falls Grammar School
- Higher education and work details
- Participation in our events, emails, competitions, surveys and other activities
- Donations made to Oxford Falls Grammar School
- Geo-location data (your geographical location based on your IP address)
- Log-ins and activity on the website
- A record of payments made via the website (but we do not store your credit/ debit card details as these are processed securely externally by a third-party payment provider) which could include event tickets, shop purchases or online donations
- Consent options and communication preferences
- Content (such as announcements, stories, photos, documents, comments, events, jobs) that you post on this website or provide to us by other means
- Messages that you send to other community members via the direct messaging system when logged in to this website
We collect personal information when you:
How we use your information
- visit this website
- create or update your online profile
- post content on to this website or other websites and social media sites managed by Oxford Falls Grammar School
- take part in an event
- attend a meeting with us and provide us with information
- contact us in any way including online, email, phone, SMS, social media or post
- open an email sent from this website
- send a message via the direct messaging system on this website
- leave Oxford Falls Grammar School and we transfer some basic details about you from the main Oxford Falls Grammar School database into our Oxford Falls Grammar School Alumni & Community database
We will use your personal information in a number of ways, always with a legal basis for processing your data. These may include:
Our legal basis for processing your information
- providing you with the information or updates that you have asked for
- sending you communications (with your consent if required) that may be of interest, including invites to events, newsletters and fundraising campaigns
- delivering our obligations under any contract between us
- seeking your views on the services or activities we carry out, so that we can make improvements
- updating our database records and ensuring we know how you prefer to be contacted
- analysing your engagement with our website and other content to help us improve our services for you
- running our mentoring programme/ club activities/ reunion events/ sports fixtures
- disclosure of your personal information to organisation’s that assist in the School’s fundraising activity for example the School’s Foundation.
The use of your information for the purposes set out above is lawful because one or more of the following applies:
Updating your consent preferences
- it is being used for the primary purpose for which it was collected
- it is being used for such other secondary purposes that are related to the primary purpose of collection
- It is reasonably expected
- you have given us your consent for the information to be used
- it is necessary for us to hold and use your information to carry out our obligations under a contract entered into with you
- it is necessary for our legitimate interests to hold and use your information and we are not impacting your privacy by doing so
If you have an online profile on this website you can update your consent options by logging-in and clicking on “My Settings” in your profile. Scroll down to find your ‘Consent options’ where you will see a list of consents and the options “opt-in”, “opt-out” and “unspecified”.
Via ‘My Settings’ you can also choose to hide your profile from Google, limit access to your profile so that it’s only viewable to your connections and adjust some of the automatic notifications that you receive from this website. Please note that your name (but not
full profile) may appear in various places around the community website, such as a ‘Recent Joiners’ box and in ‘Search’ results irrespective of the privacy settings you have selected.
If we are using consent as our legal basis for processing your data, we must have an explicit “opt-in” from you for this specific type of processing. If we are using legitimate interests as our legal basis for processing your data, we will process your data responsibly in a way that you would reasonably expect, and you can opt-out at any stage.If you click ‘unsubscribe’ at the bottom of one of our emails sent you will be automatically opted-out of these types of email communications in the future. If you want to contact us about your consent preferences please contact the Alumni & Community Manager by email at firstname.lastname@example.org How we keep your information safe
We understand the importance of keeping your personal information secure and take appropriate steps to safeguard it.
Your data is stored on a dedicated, secure cloud server hosted by Amazon Web Services (AWS) in Sydney Australia and managed by our website provider, ToucanTech
. Industry standard firewalls, anti-virus, encryption and back-up methods are in place, as well as strict data handling protocols.
We always ensure only authorised persons have access to your information, which means only our approved employees and contractors, and that everyone who has access is appropriately trained in data management.
If you have an online profile for this website you are responsible for keeping your login details (email and password) confidential and we ask that you do not share your password with anyone.
No data transmission over the internet can be guaranteed to be completely secure. So, whilst we strive to safeguard your information, we cannot guarantee the security of any information you provide online and you do this at your own risk. Who has access to your information?
- Third parties who provide services for us, for example a printer and/or mailhouse to contact you via your mailing address. We select our third-party service providers with care. We provide these third parties with the information that is necessary to provide the service and we will have an agreement in place that requires them to operate with the same care over data protection as we do.
- Third parties if we run an event in conjunction with them. We will let you know how your data is used when you register for any event
- Web hosting, email hosting, analytics and search engine providers that enable us to run our community database and improve our website and its use
- Third parties in connection with restructuring or reorganisation of our operations, for example if we merge with another business. In such event, we will take steps to ensure your privacy rights will be protected by the third party
Other than this, we will not share your information with other organisations without your consent. Keeping your information up to date
Please would you let us know if your contact details change. Online members can update your details directly by logging-in to the website and clicking on ‘My Settings’ under your profile. You can also update your details by contacting the Alumni & Community Manager by email at email@example.com Cookies
Please refer to our Cookies PolicyHow long we keep your information for
We will hold your personal information for as long as it is necessary for the relevant activity.
Where we rely on your consent to contact you for direct email marketing/ fundraising purposes, we will treat your consent as lasting only for as long as it is reasonable to do so. We may periodically ask you to renew your consent.
If you ask us to stop contacting you, we will keep a record of your contact details and limited information needed to ensure we comply with your request. If you ask us to remove your personal data from our database we will delete all the information we hold out apart from your name and the dates that you attended Oxford Falls Grammar School and archive your record in our database. Your rights
You have the right to request details of how we use your personal information through making a subject access request. Such requests have to be made in writing by contacting the School Office. You also have the following rights:
- to request rectification of information that is inaccurate or out of date;
- to erasure of your information (the “right to be forgotten”);
- to restrict the way in which we are dealing with and using your information;
- to request that your information be provided to you in a format that is secure and suitable for re-use (the “right to portability”);
- in relation to automated decision making and profiling.
All of these rights are subject to certain safeguards and limits or exemptions. To exercise any of these rights, you should contact [details] at the above address. Enquiries and Complaints
If you would like further information about the way the School manages the personal information it holds, or wish to complain that you believe that the school has breached the Australian Privacy Principles, please contact the Principal in writing. If the complaint is unable to be resolved at a school level, the Information Commissioner may investigate the complaint.
This Policy was last updated in June 2019