The type of personal information CDS collects depends on the nature of your dealings with CDS and the reason for collecting it.

Personal information CDS collects about you may include your name and contact details, your employment details, industry expertise, areas of interest, your credit card, debit card or bank account information, details of your dealings with CDS, and any other information reasonably necessary to provide you with CDS’ goods and/or services.

In particular CDS will collect specific information with respect to but not limited to:

• all information provided with respect to the I-CAN database and associated assessment reports;
• details of any information which you may provide in enrolling for any courses conducted by CDS or any related registered training organisation (RTO).
• Information obtained from research participants or clinic clients;
• Any data provided for support for physical and mental health and wellbeing, behavioural matters and details required to provide support to enable individuals and families to participate in daily living and community activities.

CDS may collect your personal information if you:

• ask CDS to provide you with goods and/or services;
• are an employee of one of CDS’ clients or partners;
• are one of CDS’ suppliers or contractors or one of their employees;
• are a subscriber to CDS’ mailing list or newsletter;
• attend an event or seminar organised by CDS; or
• submit a job application.

To provide goods and/or services to you or CDS clients, CDS may collect your name, contact details, your employment details, and details of your dealings with CDS.  To make a payment to CDS, CDS may collect your credit card, debit card or bank account information.

If you are one of CDS’ suppliers or contractors, or one of their employees, CDS may collect your name, contact details and position in the organisation.

If you are a subscriber to a CDS mailing list or newsletter, or attended an event or seminar organised by CDS, CDS may collect your name, contact details, job title, areas of interest and details of your dealings with CDS.

If you apply for a job with CDS, you may provide CDS with certain information, including your name, employment and educational background, and other personal information which CDS may require you to provide, or which you choose to provide CDS, in relation to your job application.  If you are an unsuccessful applicant for a position at CDS then CDS will destroy your application form and delete the application details from its database at the end of six (6) calendar months from the notification to you of your unsuccessful application, unless otherwise advised by you.

Generally, CDS does not collect sensitive information about you, such as health records, unless it is reasonably necessary for the purpose of providing you with goods and/or services or is otherwise permitted by law.

How CDS collects personal information also depends on the nature of your dealings with CDS.

If you are a client of one of our clients, they may provide CDS with your personal information to assist CDS to provide goods and/or services to them.

CDS collects personal information directly from you whenever it is reasonable and practical to do so, for example, when you set up a client account or provide personal information.  CDS may also collect personal information from third parties in the course of providing goods or services to you or to them.  Other examples of the way in which CDS may collect your personal information are:

• Any information provided through an application for an I-CAN application which will be placed on the I-CAN database which may be included in the assessment report;
• Enrolment information and any courses conducted by CDS or any related RTO;
• Information obtained from research participants or clinic clients;
• Any data provided for support for physical and mental health and wellbeing, behavioural matters and details required to provide support to enable individuals and families to participate in daily living and community activities.

Where your personal information is provided to CDS by a third party, CDS will take reasonable steps to let you know that CDS has your personal information, unless it is obvious from the circumstances that you know or would expect CDS to have the information.  Reasonable steps may include asking the person who gave CDS your information to let you know that CDS has that information.

If you are one of CDS’ suppliers or contractors, your personal information may be collected from you, your employer, employees, or third parties.

If you elect not to provide some personal information to CDS, this may affect our ability to provide goods and/or services to you.

Generally, the purpose for which CDS collects personal information will be apparent from the way in which CDS collects it, but your personal information may be used for:

• administering CDS’ relationships with you efficiently;
• providing you with goods and services or information regarding CDS’ goods and services;
• monitoring, evaluating and improving goods and services;
• for the purpose(s) you have provided the information;
• for a purpose you have consented to; or
• for a purpose otherwise permitted by law.

CDS may use your personal information for research and development of CDS’ goods and/or services or to send you information about other goods and/or services offered by CDS which may be of interest to you.  If you would prefer not to receive promotional or other material from CDS, please let CDS know by sending an email to the contact details below and CDS will respect your request.  Alternatively, simply select the “unsubscribe” option in any of the emails that you receive from CDS.

If you apply for a job with CDS, we will hold, use and disclose that information solely for the purpose of considering your application.  In particular, in considering your application, it may be necessary for CDS to disclose some of that information to third parties to verify the accuracy of that information.  In such circumstances, CDS will disclose only such information as is necessary in the circumstances.  In considering your application, CDS may also collect personal information about you from any third parties that you nominate as your referees in your application.

If at any time the purpose for which CDS is collecting your personal information is unclear, please raise your concerns with the person you are dealing with or contact CDS using the contact details below.

CDS stores CDS documents and your documents and the personal information collected from those documents as follows:

• on servers located in Sydney, NSW that are managed by either CDS or third party service providers protected by a digital security system;
• on a single cloud platform located in Glebe, NSW operated by the University of Sydney that stores CDS’s shared drive, the majority of CDS emails and manages CDS’ university email system (i.e. all emails sent to and from emails ending in sydney.edu.au) held pursuant to the University of Sydney Information Security Policy;
• on a server located in Christchurch, New Zealand operated by a third party service provider that stores CDS emails hosted through the cds.org.au website bound by the Information Security Standard as they are registered by https://www.auda.org.au/assets/pdf/2017PRP-03102017-directreg-issuespaper-WEB.pdf; or
• hardcopy documents are held in locked storage, for a period of seven (7) years, in Sydney, NSW in a facility managed by either CDS or third party service providers

CDS may disclose your personal information to related service entities or third party service providers and contractors who assist in CDS’ internal business and administrative operations.

Personal information disclosed to CDS may be accessed by permitted users.  In most circumstances, the personal information will be disclosed to people located in Australia.

When CDS engages the services of a third party, CDS takes reasonable steps to ensure they comply with the Privacy Act and maintain the confidentiality of any personal information to which they have access.

CDS shares your personal information only as set forth below:

• with CDS’ related entities (including affiliated or partnered businesses) where it is necessary to meet the purpose for which you have submitted the information;
• with third party agents and contractors who perform certain functions on our behalf of;
• in the event CDS chooses to buy or sell assets or businesses, customer information may be transferred in the transaction. In addition, if CDS, or substantially all of CDS’ assets, were acquired, customer information would be one of the assets that are transferred; or
• in the event that documents containing personal information are audited by an external agency. Any information obtained by external auditors [and copies thereof] will be destroyed upon written request or upon termination of the engagement of the auditing service with CDS.

If CDS is required to disclose personal information to an overseas recipient, CDS will take reasonable steps to ensure that the overseas recipient complies with the Australian Privacy Principles.

CDS may also use your contact information to keep you updated on developments on CDS’ business services and/or products or upcoming events which may be relevant to you.