1. Purpose

Junction collects only the information that is relevant to the services we provide. Junction is committed to protecting the personal information we collect, including through our websites, phone calls, emails and in‑person services. You have the right to choose what information you share with us, although withholding some details may affect our ability to support you effectively. We are bound by the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs) and other relevant privacy laws that govern the collection, use, disclosure, storage and management of personal information (“Applicable Privacy Laws”), ensuring that we handle your personal information in an open, transparent, responsible and secure manner. We also comply with the Child Information Sharing Scheme, the Family Violence Information Sharing Scheme, and the MARAM Framework, where applicable.

2. Whose personal information do we collect?

We collect personal information from individuals who interact with us in various settings. This may include:

• individuals who seek information about, apply for, or participate in our services, programs and initiatives, along with their family members and/or carers
• individuals who apply for employment or volunteer roles with Junction
• our staff members
• our donors and supporters
• participants in our sector-specific training, professional development programs and workshops
• visitors to our website, social media platforms and other digital channels

3. What personal information do we collect?

We collect personal information when it is reasonably necessary to personally identify you for one of our functions or activities, and we do so by lawful and fair means. The type of personal information we collect depends on how you interact with us and may include:

• name, address, telephone number, email address and other contact details
• gender, date of birth, marital status, information about disability and support needs
• Medicare number and other identifiers used by government agencies or other organisations
• Financial and billing information, including details of funding, payment methods and donations
• Records of interactions, including case notes, progress notes and surveys
• Information relating to the services we provide to individuals
• Health and medical information, sexual orientation, gender identity, intersex status and preferred pronouns
• Information relating to job applications or volunteer applications, including cover letters, resumes, referee reports, police checks, Working With Children Checks, and right‑to‑work documentation
• Cookies and online data associated with visits to our websites

Where any collected information constitutes sensitive information or health information, we apply the additional privacy protections required under Applicable Privacy Laws, including obtaining necessary consent.

4. How do we collect personal information?

We collect information in a respectful and inclusive manner, ensuring your privacy and dignity are maintained at all times. We typically collect personal information directly from you via:

• conversations, meetings and assessments
• application forms and referrals
• electronic communications
• our websites and online tools

We may also collect information from:

• carers, guardians, trustees or authorised representatives
• other service providers

• government agencies
• publicly available sources

Where services involve children, we may collect personal information from their parents or legal guardians as permitted under relevant laws.

5. How do we use the personal information we collect?

We use personal information only for the primary purposes for which it was collected. Personal information is to:

• provide information about, assess eligibility for, and deliver our services and programs
• support participation in education, advocacy, community engagement and fundraising
• manage recruitment, HR processes, workforce development and employee administration
• coordinate volunteer involvement
• receive and process donations and other contributions
• maintain internal administration, reporting and organisational management
• conduct service evaluation, research and quality improvement activities

We may also use information for other lawful purposes with your consent or as permitted by Applicable Privacy Laws.

6. To whom do we share or disclose personal information?

We may disclose personal information to individuals or organisations where required for service delivery, administration or legal compliance, including:

• program funders
• contractors and subcontractors
• information‑sharing entities under the Child Information Sharing Scheme and Family Violence Information Sharing Scheme
• healthcare and allied health professionals
• government and regulatory bodies
• referees and former employers (for recruitment purposes)
• professional advisors such as auditors, accountants and lawyers
• authorised representatives such as legal guardians, trustees and nominees
• third‑party service providers including mailing houses, IT providers and financial institutions
• law enforcement agencies, courts, tribunals and oversight bodies

Except as outlined above, we will not disclose your personal information without your consent unless permitted under Applicable Privacy Laws.

We generally do not disclose personal information to overseas recipients unless required for service delivery or permitted by law.

7. How do we store and protect personal information?

We store personal information securely, either locally or through approved data storage service providers. Physical records are kept in locked cabinets with access limited to authorised staff. Digital information is protected using secure systems that follow industry best practices, including access controls, authentication measures, and regular monitoring. 

We manage your information in accordance with the Privacy and Data Protection Act 2014 (Vic), including Part 4: Protective Data Security, to protect personal information from:

• misuse
• loss
• interference
• unauthorised access, modification or disclosure

This includes:

• password‑protected systems
• secure electronic environments
• locked physical storage
• restricted access to authorised personnel only

We also take reasonable steps to ensure the personal information we hold is accurate and up‑to‑date. You may request updates at any time (see Section 10).

8. How can you access or seek correction of your personal information?

You have a right to seek access to information held about you by Junction, and to correct it if it is inaccurate, incomplete, misleading or not up to date.

You may request access to or correction of the personal information we hold by contacting our Privacy Officer (see Section 10). We will respond within a reasonable time (generally within 30 days) and may require identity verification.

9. What are our privacy complaints procedures?

You may lodge a complaint about how your personal information has been collected or handled by writing to our Privacy Officer. We will treat all complaints seriously, respond impartially and aim to provide a response within 30 days.

If you are not satisfied with our response, you may escalate your complaint to one of the following:

• Office of the Australian Information Commissioner (OAIC)
• Office of the Victorian Information Commissioner (OVIC)
• Victorian Health Complaints Commissioner