Mardom Foundation Inc. Privacy Policy

Version 1 – 2024

Mardom Foundation Inc. (“we,” “us,” or “our”) is committed to providing quality services while respecting your privacy. This Privacy Policy outlines our ongoing obligations to you regarding the collection, use, disclosure, storage, and security of your Personal Information. Additionally, we aim to comply with the General Data Protection Regulation (GDPR) and the Australian Privacy Principles (APPs) as contained in the Privacy Act 1988 (Cth).

Data Controller Information

• Company Name: Mardom Foundation Inc.
• Contact Information: Contact Form / contact@mardomfoundation.org 
• Data Protection Officer: The secretary of Mardom Foundation at secretary@mardomfoundation.org
• Address: PO BOX 2135

Service Provider

means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service, or to assist the Company in analyzing how the Service is used. For the GDPR, Service Providers are considered Data Processors. 

What is Personal Information?

Personal Information is information or an opinion that identifies an individual. Personally identifiable information may include, but is not limited to: names, addresses, email addresses, phone, usage date, and facsimile numbers.

How Do We Collect Personal Information?

We collect Personal Information in many ways, including:

• Through registration forms, polls, votes, emails and other secured digital channels.
• From our website, apps, cookies, and third parties.
• From media and publications, or other publicly available sources.

Why Do We Collect Personal Information?

We collect your Personal Information for the following primary purposes:

• Providing our services to you.
• Providing information to our members, research, analysis, and marketing.
• Maintaining membership records.
• To contact you or  manage your requests
• To fulfil other purposes such as data analytics and reporting
• To provide you with news if you opt-in

Your information will not be exposed unless you sign a separate form granting us permission. You may unsubscribe from our mailing/marketing lists or cancel your membership by contacting us in writing. Use our contact form for unsubscribing from our mailing/marketing list. Use our resignation form to cancel your membership.

Sensitive Information

Sensitive Information is defined by the Privacy Act to include details such as an individual’s racial or ethnic origin, political opinions, religious or philosophical beliefs, and other similar information. We use Sensitive Information only for:

• The primary purpose for which it was obtained.
• A secondary purpose directly related to the primary purpose.
• With your consent or when required by law.

Usage Data

These data are either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit). 

Usage Data is collected automatically when using the Service. Usage Data may include information such as Your Device’s Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

We may also collect information that Your browser sends whenever You visit our Service or when You access the Service by or through a mobile device.

We use Cookies and similar tracking technologies to track the activity on Our Service and store certain information. Tracking technologies used are beacons, tags, and scripts to collect and track information and to improve and analyse Our Service. 

We use both Session and Persistent Cookies for the purposes set out in our services.

Third Parties 

Where reasonable and practicable, we collect your Personal Information only from you. However, in some cases, we might be provided with information by third parties. We will take reasonable steps to ensure you are aware of this. 

Disclosure of Personal Information

We do not disclose your Personal Information unless we receive your written permission, or it is required or authorised by law. 

We may store your personal information such as email within a Service Providers platform or tools for the purpose of data processing such as  email marketing, data analytics reporting and so on. If we do share data with those third parties app, we ensure they meet GDPR standards for privacy and data protection. 

Data Security and Retention

We take appropriate technical and organisational measures to secure your Personal Information from misuse, loss, or unauthorised access. When your Personal Information is no longer needed for its original purpose, we take steps to destroy or permanently de-identify it. Most data related to our members’ or volunteers’ are stored in our files, kept for a minimum of 6 months after they leave or resign then will be deleted. We keep our financial and legal records for 7 years.

We may also retain Usage Data for internal analysis purposes.

All of your data is stored in a secure cloud environment, protected by passwords and multi-factor authentication. 

In case of a data breach or unauthorised access, we will promptly investigate and notify you as required by law, along with measures to contain the breach and prevent future occurrences.

Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

• Right to Access: Request a copy of your personal data.
• Right to Rectification: Request corrections to your personal data.
• Right to Erasure (“Right to be Forgotten”): Request deletion of your data.
• Right to Restriction of Processing: Request limited processing of your data.
• Right to Data Portability: Request your data in a portable format.
• Right to Object: Object to processing for legitimate interests or direct marketing.
• Right to Withdraw Consent: Withdraw consent at any time.

To exercise these rights, please contact us in writing at members@mardomfoundation.org or use our contact form. No fees apply for exercising these rights.

Keeping Your Information Up-to-Date

It is important to us that your Personal Information is accurate. If you find our records are incorrect or outdated, let us know so we can update them promptly.

Children’s Privacy 

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from anyone under the age of 13 without verification of parental consent, We take steps to remove that information from Our servers.

Policy Updates

This Policy may change from time to time. Any significant changes will be communicated through our website. Always check for the latest version of the policy.

Contact and Complaints

If you have any questions or complaints about this Privacy Policy, or believe your GDPR rights have been violated, please contact us at contact@mardomfoundation.org. You can also contact your local data protection authority to lodge a complaint.