Website privacy statement

Our office is dedicated to ensuring appropriate protection of personal information.

Our privacy policy sets out how our staff (and any relevant consultants or contractors) protect any personal information collected or held by our office.

Find out more by reading our privacy and confidentiality page.

Website privacy statement

This website privacy statement explains how your personal information will be protected when accessing and interacting with our website.

We are dedicated to ensuring appropriate protection of personal information. For general information about how we collect, use and disclose personal information, please refer to our privacy policy.

If you visit our website regularly, we recommend that you carefully read this statement because it is updated from time to time.

Our website may contain links to other sites for general information. While we take reasonable care in linking to other websites, we are not responsible for the privacy compliance or the content of these other websites. When following links to other sites, we recommend that you read the privacy statement of that site.

Collection of personal information on our website

You will usually know if we are collecting personal information from you because you will be requested to provide it. We recommend reading our privacy policy to understand how we collect, use and disclose personal information for further information.

Some personal information is automatically collected when you visit our website (see ‘Statistical data’).

Online form

We use a web form hosted by our third-party case management system to allow you to, for example, make an enquiry or complaint or apply for a FOI review online. The information you provide through this form is hosted by the provider of our case management system and is accessed through this system by NHPO staff.

Email and form

Our website includes links to allow you to email or call us.

Although people may choose to remain anonymous when interacting with us, emails or telephone calls may result in providing us with personal information such as a name, email address or telephone number. This personal information may be about the person who contacted our office or others.

Statistical data

Our website automatically collects information about you when you visit it. This information helps us to understand how our website is working and how it can be improved, including for security purposes.

We will not attempt to identify you based on this information, except if required by law. For example, if a law enforcement agency exercises a legal authority to inspect Internet Service Provider logs.

Clickstream data

Our website’s web server automatically records non-personal clickstream data.

The following clickstream data are automatically recorded by our website’s web server for statistical and system administration purposes only:

• IP address
• domain name (for example, gmail.com, hotmail.com)
• the date and the time of the visit to the site
• the pages accessed and files downloaded
• the address of the last site visited
• operating system
• the type of browser.

Cookies

Like many sites, our website may use cookies. Cookies are small data files that a website places on your hard drive to record aspects of your experiences on the website. For example, we may use cookies to record that you visited a particular section of the website.

Cookies do not need to identify you or record any personal information.

The default settings of browsers like Chrome, Firefox, Internet Explorer and Safari may allow some or all cookies.

You can take steps to erase cookies from your hard drive, block all cookies or receive a warning before a cookie is stored. However, some parts of sites may not work as expected if you disallow cookies.

Third-party software vendors

We use third-party software to collect information about you and your interaction with our website to measure its use and help make it better.

When you visit our website, your web browser automatically sends certain information to the following third-party services:

• Google Analytics
• Google Tag manager
• Google Search console.

We do not and will not use this information to identify you or match it with any other personal information that we may collect from you, unless required to do so by law.

For further information on how these third-party web vendors handle your information, please review their privacy policies.

You can opt out of the automatic collection of information by our third-party web vendors. See how to do this at Google – Turn "Do Not Track" on or off.

Use and disclosure of your personal information

We use statistical data from our website to analyse, measure, and report on data about our website traffic and visits. This information helps us understand how our website is being used and how it can be improved.

Apart from the third-party web vendors and website support services described in this privacy statement, we do not disclose your site visit data to any other third parties without your consent, unless we are required or authorised to do so by law.

Disclosure of statistical data to third-party web vendors

We may disclose the following information to third-party web vendors Google Analytics, Google Tag manager and Google Search console

• network location and IP address
• the date and time of your visit to our website
• the type of web browser (e.g. Internet Explorer, Google Chrome, Safari)
• Flash version, JavaScript support, screen resolution and screen colour processing ability
• referring site details (such as the URL that you came through to arrive at our website)
• page visited and the time spent on each page (if more than one page visited)
• documents downloaded, forms accessed and search terms used
• cookies
• unique device fingerprint
• device information, hardware model, operating system information, app version, app usage, debugging information
• geo location, based on IP address, unless more accurate information is directly supplied by you.

The information we disclose to some of our third-party vendors may travel outside of Australia.

For further information on how these third-party web vendors handle your information, please review their privacy policies.

Website support services

We also engage website service providers to facilitate the improvement of our website.

Website service providers are engaged by the NHPO and must abide by our website privacy statement, privacy policy and other relevant policies.

Security

We have implemented technology and security policies, rules and measures to protect the personal information that we have under our control.

Once any personal information comes into our possession, we will take reasonable steps to protect that information from misuse and loss and from unauthorised access, modification and disclosure.

Access to systems, applications, and the information that we collect is limited to authorised personnel only.

However, it is important to be aware that there are risks in transmitting information across the internet. So, while we strive to protect such information, we cannot ensure or warrant the security of any information transmitted to us online and individuals do so at their own risk.

If you are concerned about conveying sensitive material over the internet, you may prefer to contact us by telephone or mail.

We will remove personal information from our system where it is no longer required (except where archiving is required and in order to fulfil our obligations under the Archives Act 1982 (Cwlth) or any equivalent state or territory law).

Access and correction

You may request access to, or correction of, documents that contain your personal information which we possess. For information on how to request access or a correction, please contact us.

We are committed to protecting personal information. However, we encourage all website users to share any concerns about our handling of personal information by contacting us.