1. Who we are 

Injury Reporting Pty Ltd ACN 635 559 705.  

2. Who this policy applies to 

This privacy policy applies to: 

• All individuals whose personal information is collected by us in the course of our functions and activities.  

3. The types of personal information we may collect 

The types of personal information we may collect depends on our relationship with you, and may include: 

• identifying information such as name, date of birth and address;  

• identification of injuries you or others have received;  

• contact information such as home address, home and mobile phone numbers and email address, and in some cases your work contact details;  

• sensitive information, including:  

o information about your health;  

o lifestyle, diet, exercise and health related information that you self input into our wellbeing app;  

• information about your activities, including sporting and other lifestyle interests; • information about involvement in other programs you participate in or memberships you may have;  

4. How we collect your personal information We will only collect personal information about you by lawful and fair means. We may collect personal information from you at various times, including: 

• when you or an authorised person download and install our app;  

• when you or an authorised person open and start to complete - or complete - an injury report application form or other type of form in relation to our products and services; and 

• when you contact us in person, by phone, mail, email or online. 

We may collect your personal information from you, from a person authorised to provide us with your personal information on your behalf, or from an agency or organisation on whose behalf we are providing you with services (a first aid agent). 

We may also collect information about you from other sources, such as an employer, educational institution, government agency or adviser who has dealt with you (or their authorised representatives);  

5. How your personal information is stored  The information such as your name, date of birth, address, contact number and injury history will be collected and stored on the application, saved on the individual phone. Should the application be deleted from the individual phone, the information will be erased. 

The information is not being stored on any external server.   

6. When and how we dispose of your personal information  

We seek to keep your personal information for only as long as it is required in order to provide you with products and services or to legitimately comply with our business and legal obligations and requirements. 

When it is no longer needed for these purposes, we may destroy or permanently de-identify this personal information. Consequently, if you request access to your old personal information, we may not be able to provide you with your records where they have been destroyed or de-identified.  

7. Using your personal information 

We may use your personal information for these purposes, including to: 

• manage our relationship with you; 

• identify and communicate with you; 

• provide you with requested information, products or services; 

• analyse, investigate, pursue and prevent suspected fraudulent activities; 

• manage and develop our business and operational processes and systems; 

• obtain feedback, and engage in analytic and research activities (inclusive of a wide range of analytics and customer behavioural research projects); 

• manage and resolve any legal, clinical or commercial complaints or issues; 

• perform other functions and activities relating to our business; 

• comply with our legal obligations or enforce our legal rights; and 

• as otherwise required or authorised by law, including the Privacy Laws. 

We will use your personal information, including call recordings for training, coaching and development purposes unless you ask us not to.  

8. If your personal information is hacked or inadvertently disclosed 

If we become aware that we have inappropriately used or disclosed your personal information, or that the security of your personal information has been compromised (a data breach), and we are unable to rectify the data breach without any potential adverse effect on your privacy, we may contact you to inform you, and to work with you to minimise or mitigate the consequences of the data breach. 

Pursuant to the Notifiable Data Breaches scheme (under Part IIIC of the Privacy Act 1988), we may be required to notify you of a data breach as soon as we practicably can if we consider you are reasonably likely to be at risk of serious harm (including financially or to your mental or physical wellbeing). 

Where reasonably practicable we will give you details of the data breach and, where possible, steps you could take to lower the risk of harm to you. 

We may make a public notification for a data breach affecting a large number of customers, before we contact you directly or in place of direct contact.