Skip to content
Kirrip

Privacy Policy

Your Privacy Matters. Your Trust Is Our Responsibility. Learn how Kirrip Aboriginal Corporation collects, uses, and safeguards your personal information to maintain the trust and safety of our community.
Privacy Policy

Your Privacy Matters to Us

Kirrip Aboriginal Corporation ("Kirrip") respects the privacy of the people we work with and the communities we serve. This policy explains how we collect, hold, use, disclose and protect personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and the Health Records Act 2001 (Vic). We are guided by the principles of Indigenous Data Sovereignty — community information stays under community control.

Information We Collect
Members Name, contact details, date of birth, Aboriginal or Torres Strait Islander identity, membership number and status
Website and portal users Login credentials (encrypted), forum posts, private messages, sign-in records, notification preferences
People who use our services Information necessary to provide the service, including health information and household circumstances
Sensitive information Health information and Aboriginal or Torres Strait Islander origin, collected only with consent or as required by law
Directors, staff, contractors and volunteers Information required for employment, engagement, governance and regulatory reporting
Cookies and website tracking Functional cookies only. No advertising cookies, tracking pixels, or third-party analytics services are used
How We Use Your Information
Service Delivery

To provide our services and programs, maintain member registers required under the CATSI Act, and confirm eligibility for membership.

Communication

To communicate with you about Kirrip activities, events and news, and to operate the members portal and forum.

Compliance & Reporting

To meet our reporting obligations to ORIC and funding bodies, and to meet our obligations under other laws.

Data Protection

All information is stored on Australian servers with role-based access, encrypted connections, and regular backups. We do not disclose information overseas.