Riverview Church | Thursday 15 November 2018
Riverview Church Inc Riverview Community Services Inc Riverview Foundation Inc
Riverview Media Inc Regent College Inc
(Collectively referred to as Riverview, we, our, us)
What is your personal information?
What personal information do we collect and hold?
We may collect the following types of personal information:
We may collect health and sensitive information from you if we are providing you with pastoral care or community services. We will only collect the sensitive information that is necessary for us to provide you with the relevant care and services.
We may also collect some information that is not personal information because it does not identify you or anyone else. For example, we may collect anonymous answers to surveys or aggregated information (for example, when we carried out the online survey with our congregation for them to inform us of their preferred weekend celebration time).
How do we collect your personal information?
We collect your personal information directly from you unless it is unreasonable or impracticable to do so. When collecting personal information from you, we may collect in ways including:
We may also collect your personal information from third parties including:
If it is unclear whether you consented to the disclosure of your personal information to us, we will take reasonable steps to contact you and ensure that you are aware of the collection and the purposes for which we collected your personal information.
We may receive unsolicited personal information where we did not request for the information. Unsolicited personal information includes misdirected mail received, correspondence sent to us by the public, employment and volunteer applications sent on an individual’s own initiative and not in response to our advertised vacancy, promotional flyers containing personal information and comments on our social media. We reserve the right to assess all unsolicited personal information received and to de-identify or destroy it within a reasonable time period in accordance to Australian Privacy Principle 4.
What happens if we can’t collect your personal information?
If you do not provide us with the personal information described above, some or all of the following may happen:
There may be times when you have the right not to identify yourself or to use a pseudonym when you contact us. For example, if you would like to request prayer for yourself or someone you know. The right to anonymity or to use a pseudonym will be decided on a case by case basis pursuant to Australian Privacy Principle 2.
For what purposes do we collect, hold, use and disclose your personal information?
We collect personal information about you so that we can invite you to attend our weekend celebrations and our events to do life and faith together in a community.
We collect personal information about you so that we can assist you within our community services area to provide you with the support that you require through our various programs. We also collect personal information about you so that we can communicate to you the various impact and field trips that we organise to developing countries as part of our children’s foundation area.
We collect, hold, use and disclose your personal information for the following purposes:
We may access, aggregate and use non-personally identifiable data that we collected from you. This data will in no way identify you or any other person. We may use this aggregated non-personally identifiable data to:
To whom may we disclose your information?
We may disclose your personal information to:
Direct marketing materials
We may send you information about our weekend celebrations and events that we consider may be of interest to you. The information may be sent in various forms, including mail, SMS and email, in accordance with applicable marketing laws, such as the Spam Act 2003 (Cth). If you indicate a preference for a method of communication, we will endeavour to use that method whenever practical to do so. In addition, at any time you may opt-out of receiving information from us by contacting us (see the details below) or by using opt-out facilities provided in the method of communication used and we will then ensure that your name is removed from our mailing list. We do not provide your personal information to other organisations for the purposes of marketing.
How can you access and correct your personal information?
You may request access to any personal information we hold about you at any time by updating your details on Elvanto . Elvanto refers to our web-based church management software. It is your responsibility to keep your password to Elvanto safe. You should notify us as soon as possible if you become aware of any misuse of your password, and immediately change your password within Elvanto or via the Forgot username or password process on Elvanto. Alternatively, you may also request access to any personal information we hold about you at any time by contacting us directly (by telephone, at our Information Desk at our weekend celebrations, at our Church reception during the week) or to the contact details nominated below. Where we hold information that you are entitled to access, we will try to provide you with suitable means of accessing it (for example, by mailing or emailing it to you). We will not charge you any fees in providing the information to you or for making any corrections to your personal information.
There may be instances where we cannot grant you access to the personal information we hold. For example, we may need to refuse access if granting access would interfere with the privacy of others or if it would result in a breach of confidentiality. If that happens, we will give you written reasons for any refusal. If you believe that personal information we hold about you is incorrect, incomplete or inaccurate, then you may request us to amend it. We will consider if the information requires amendment. If we do not agree that there are grounds for amendment then we will add a note to the personal information stating that you disagree with it.
We will only keep your personal information for as long as we require it to provide you with information and services that you need. However, we may also be required to keep some of your personal information for specified periods of time pursuant to specific laws relating to companies, not-for-profit organisations and financial reporting legislation.
What is the process for complaining about a breach of privacy?
If you believe that your privacy has been breached, please contact us by sending your complaint to firstname.lastname@example.org and provide written details of the incident so that we can investigate it. After we receive all the information we need from you, allow us approximately 28 days to address your complaint.
If you are not satisfied with our response to your complaint, please contact the Australian Information Commissioner (www.oaic.gov.au).
Do we disclose your personal information to anyone outside Australia?
We may disclose personal information to our service providers located overseas for some of the purposes listed above. We take reasonable steps to ensure that the overseas recipients of your personal information do not breach the privacy obligations relating to your personal information. We disclose your personal information to our data hosting service providers located outside of Australia, including America, New Zealand and European Union. We note that our data hosting service providers may store data in several other countries.
Storage and Security
We take reasonable steps to ensure your personal information is protected from misuse and loss and from unauthorised access, modification or disclosure. We may hold your information in either electronic or hard copy form. Your personal information is stored on secure servers that have SSL Certificates issued by leading certificate authorities such as Go Daddy and Let’s Encrypt, and all information transferred between you and us is encrypted. The secure servers are located in countries including but not limited to Australia, America and European Union. We also utilize an email filtering host using third party provider Microsoft which is stored on servers in America and the European Economic Area.
Your personal information is collected and stored on our church management system, Elvanto maintained by cloud hosting service providers. Hard copy information is stored in our offices which are secured to prevent entry by unauthorized persons. All personal information that is not active is archived with a third party provider of secure archiving services. We take reasonable steps to ensure that the third party provider maintains the security of the information. Your personal information remains on our church management system, Elvanto, until you advise us that you would like it removed or if we destroy or de-identify it according to privacy law principles.
As our website is linked to the internet, and the internet is inherently insecure, we cannot provide any assurance regarding the security of transmission of information you communicate to us online. We also cannot guarantee that the information you supply will not be intercepted while being transmitted over the internet. Accordingly, any personal information or other information which you transmit to us online is transmitted at your own risk. We will advise you at the first reasonable opportunity upon discovering or being advised of a security breach where your personal information is lost, stolen, accessed, used, disclosed, copied, modified, or disposed of by any unauthorized persons or in any unauthorized manner.
We take particular care when dealing with your health and sensitive personal information, collecting only the necessary information for us to provide you with the services that you require. We take reasonable steps to protect your personal information, including ensuring that access to this information is restricted to specific staff members. We also take reasonable steps to destroy or de-identify your personal information once it is no longer needed for the reason it was collected. Personal information is destroyed or de-identified when no longer needed.
Our website may contain links to other websites operated by third parties. We make no representations or warranties in relation to the privacy practices of any third party website and we are not responsible for the privacy policies or the content of any third party website. Third party websites are responsible for informing you about their own privacy practices.
For all privacy concerns, please contact our Business Operations Manager at:
Riverview Church Post: PO Box 524 Victoria Park WA 6979 Tel: (08) 9416 0000 Email: email@example.com