Introduction

The purpose of the Privacy Policy is to outline ACE’s obligations for and commitment to the responsible management of personal information held about employees and individuals with whom it interacts. This policy applies to all collection, use, disclosure, storage and destruction of personal information by Australian Ceramics Engineering Pty Ltd. This Policy applies to all employees, contractors, visitors and suppliers.

ACE is committed to the responsible management of Personal Information. This commitment arises not only from a wish to comply with its legal obligations but also in recognition of and commitment to information privacy.

 

Policy Definitions

 

The following are the Policy definitions:

  • Contractor: a company or an individual engaged to provide services to ACE. Contractors include consultants.
  • Collection: includes any means by which ACE obtains Personal Information including information that is volunteered, incidentally obtained or gathered from another organisation.
  • Privacy Statement: a statement by ACE when collecting, using, disclosing and otherwise managing Personal Information collected in the course of its activities, which is provided at or near the time such information is collected.
  • Personal Information: as defined in the Privacy and Responsible Information Sharing Act 2024 (WA) is information or an opinion (including information or an opinion forming part of a database), that is recorded in any form and whether true or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion.
  • Privacy complaint: a complaint by an individual about an act or practice of ACE in relation to the individual’s Personal Information which the individual believes is contrary to or inconsistent with the Information Privacy Principles set out in the Privacy and Responsible Information Sharing Act 2024 (WA) or the Health Privacy Principles set out in the Health Services Act 2016 (WA).
  • Employee: any person employed by ACE.

 

Privacy Officer

 

ACE will appoint a Privacy Officer to:

  • Provide advice and training on issues related to information privacy
  • Develop information privacy resources in the company
  • Liaise with the Office of the Information Commissioner
  • Receive enquiries about privacy at ACE
  • Receive and co-ordinate the investigation of privacy complaints

 

Collection of Information

Personal information must only be collected where necessary and relevant to ACE functions and activities and where there is a specific and immediate need to do so in a lawful and fair manner. When collecting Personal Information directly from an individual, whether by verbal, written or electronic means, ACE will take all reasonable steps to ensure that the individual providing such information is made aware of how their information will be used and with whom it might be shared or communicated.

 

Use and Disclosure of Information

ACE will use Personal Information it collects in the course of its activities only for the primary purpose of collection or where authorised by law. ACE employees can only access Personal Information to the extent necessary to perform their job. ACE employees must seek advice from the Privacy Officer prior to any use or disclosure which is not for the primary purpose of collection or a use which would be reasonably anticipated by the individual.

 

Security and Disposal

ACE will ensure that Personal Information is kept secure and protected from misuse, loss, unauthorised access, modification or disclosure and destroyed or permanently de-identified when it is no longer needed ACE subject to obligations under the State Records Act 2000 (WA) and other legislation.

 

Access and Correction

An individual may request that ACE provide access to or the opportunity to correct their Personal Information held by ACE. Requests for access and correction will be managed in accordance with the provisions of the Freedom of Information Act 1992 (WA).

 

Complaints Process

Privacy complaints are to be dealt with in a timely and responsive manner.

 

Consultation

All ACE staff must be made aware of this policy and have access through the ACE business management system.

 

Policy Approval

The Policy is subject to review by the Board as required by the ACE business management system. Any amendments to the Policy must be approved by the Managing Director. The Managing Director is responsible for administering the Privacy Policy.

 

Breach of Policy

Any breach relating to this policy is to be reported to the Managing Director. Advice of breaches shall outline proposed actions to rectify the breach or alternatively will seek temporary approval for the breach. Approval may be provided by the Managing Director. ACE will not tolerate any deliberate or negligent breaches of the Policy.