1. Introduction

Privacy is about the right of people to know of and to control information recorded about them as individuals. All people have a right to have access to such information and to have a say on what happens to information they reveal about themselves. They have a right to withhold information but for many reasons there is often a need to reveal facts about themselves. If they do reveal information about themselves they have a right to know how such information is to be used and that it will be respected. They are entitled to know why the information is required, who has access to it and how it is to be kept. They are entitled to know what information is held about them and whether that information is correct. If the information held is incorrect, they are entitled to have any errors rectified.

Orana Inc. is committed to the protection of personal privacy and has adopted this Privacy Policy in accordance with the National Privacy Principles as contained in the Commonwealth's Privacy Act 1988.

The amendments to the Act, regulate the way private sector organisations can collect, store, hold, use, disclose or disseminate personal information. The Act gives clients, members, customers, suppliers and others the right to know why an organisation is collecting their personal information, what information is being held, how the information will be used and who else will get the information.

Orana Inc. acknowledges its obligation to comply with the national Privacy Act and its Principles, and accordingly this Policy has been developed to ensure that Orana's management and staff recognise the rights of clients, members, customers and others to privacy and to ensure that those rights are respected.

2. Scope

Orana's Privacy Policy applies to all areas and functions of the organisation which collect, use, disclose, and/or provide access to personal information , including sensitive information, health information and financial information , and includes the areas and functions listed below:

• Client admissions
  Client care and support
  Vocational and individual program plans
  Health and infection control
  Client assets, property and resources
  Financial and trading arrangements
  Information systems, computers and technology
  Human resources
  Member details
  Occupational Health & Safety
  Security
  Organisation Records
  Purchasing and contract management
  Professional advice

Our Policy covers all information collected and held by Orana where such information may fall within any of these areas. The Policy covers all records maintained by Orana, and staff, contractors, clients and others who do or may have reason to use any information collected and held by the organisation are bound by the Policy.

3. Orana's Commitment to the National Privacy Principles

Orana Inc. is committed to the protection of personal privacy and in accordance with the National Privacy Principles Orana will ensure that:

3.1 the only personal information collected and held by Orana is information which is required by the organisation for the purpose of effectively and properly providing a service to the individual, client, member or customer.

3.2 any personal information which needs to be collected is collected lawfully, fairly, openly, and where possible, directly from the individual concerned.

3.3 the person or persons from whom the personal information is collected know the reason for the information being requested, including any secondary purpose, and that any information collected will only be used or disclosed for the purpose for which it was collected unless with the person's consent.

3.4 to ensure that all persons from whom personal information is collected are informed of the identity of the organisation and how to contact the organisation with any concerns on privacy matters.

3.5 that all persons from whom personal information is collected are informed of their rights to access that information and their rights to correct the information which is being held.

3.6 that there is no unauthorised use or disclosure of personal information.

3.7 that all personal information held by the organisation whether in hard copy form or on electronic records, is accurate, complete and up-to-date and is kept secure at all times.