1. Our Promise
The SHIFT Project Byron Inc. (SHIFT) respects your privacy. We collect only the information we need. We store it carefully. We share it only when necessary or required by law. Many women we work with have experienced trauma or violence. Privacy is part of safety and dignity.

2. What This Policy Covers
This policy explains what information we collect, why we collect it, how we keep it safe, when we may share it, what to do if something goes wrong, and your rights. This policy applies to clients and program participants, donors and sponsors, members, website visitors, prospective staff and staff, volunteers, and consultants.

3. The Law We Follow
We follow Australian privacy law, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). You can read more here: https://www.oaic.gov.au/privacy/australian-privacy-principles

4. What Information We Collect
We may collect your name and contact details, emergency contact details, donation or payment records, membership details, program or case information if you use our services, and health or wellbeing information only when needed for safety or support. We try not to collect sensitive information unless it is necessary.

5. How We Collect Information
We collect information when you contact us, join a program or service, make a donation, sign up as a member or volunteer, apply for a job with us, or use our website or email us. We usually collect information directly from you.

6. Why We Collect Information We use information to provide services and support, keep people safe, manage donations and memberships, meet legal and reporting duties, and improve our services. We do not sell your information.

7. Consent
Where possible, we ask for your consent. Consent may be written, spoken, or implied, for example when you give us information yourself. You can withdraw consent at any time where practical.

8. How We Keep Information Safe
SHIFT is a very small organisation with only a few administration staff members. We use simple but strong protections, including password-protected computers and phones, secure email accounts, limited staff access so only those who need information can see it, locked storage for paper files, updated software and security tools, and trusted IT support when needed. We do not store sensitive information on open or unsafe systems. We keep personal information only for as long as it is needed for the purpose it was collected, or as required by law. When information is no longer needed, we securely delete or destroy it.

9. When We Share Information
We share information only with your consent, when required by law, to prevent serious harm to someone, or with trusted services involved in your safety or care. Examples include medical or emergency services, and child protection or police where required by law. We share the minimum information needed.

10. Website, Email and Online Safety
We take care with online information. However, the internet is never 100% secure. We use secure systems where possible, avoid collecting unnecessary online data, and limit what we store online. We are mindful of the influence and growth of Artificial Intelligence and take care with its use in our operations. Our website may collect limited technical information such as IP address, browser type, or pages visited, usually through basic analytics. This information helps us understand how our website is used and improve it. We do not use this information to identify individuals.

11. Data Breaches and Hacking
A data breach is when personal information is lost, accessed without permission, shared by mistake, or hacked. If a breach happens, we act quickly to stop further harm, assess the risk, and if there is a high risk of serious harm, we will tell affected people as soon as possible and notify the Australian Privacy Commissioner. This follows the Notifiable Data Breaches Scheme. More information is available at https://www.oaic.gov.au/privacy/notifiable-data-breaches

12. Your Rights
You have the right to ask what information we hold about you, ask for corrections, ask questions about privacy, and make a complaint. We welcome direct contact first. Our members provide us with information about their residential addresses, but not everyone has to provide this in order to have information or support from us. You have a right not to provide your residential address for early interest in joining our program or social enterprise workplaces or projects. To access or correct your information, please contact us using the details below. We may need to confirm your identity before releasing information. We aim to respond within a reasonable time and will let you know if there are any limits under the law.

13. How to Contact Us About Privacy
If you have concerns or questions, please contact us at info@shiftproject.org.au with the subject line “Privacy Concern”. We will respond as soon as we can, usually within seven days.

14. If You Are Not Satisfied
If you are not happy with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at https://www.oaic.gov.au/privacy/privacy-complaints or by phone on 1300 363 992. They oversee privacy law in Australia.

15. Changes to This Policy
We may update this policy from time to time. The latest version will always be on our website.

16. A Final Word Privacy
It is not just a legal duty. At SHIFT, it is about respect, safety, and trust. If you are unsure about anything, please ask us.