Privacy (internal and external)

Policy statement

Privacy is not just a compliance issue; it’s a matter of dignity. Just Gold protects the personal, cultural, and sensitive information of staff, clients, partners, and communities. We align with Australian privacy law, but our standards often exceed legal minimums.

Our commitments

• Collect only what we need, and explain why.
• Store information securely, with access limited to authorised personnel.
• Seek informed, specific consent for data collection, storage, and use.
• Anonymise or deidentify personal data wherever possible.
• Delete or return data once no longer required.

Types of information covered

• Staff and contractor records
• Client and community data
• Research or impact evaluation responses
• Media assets (photos, interviews, transcripts)
• Cultural or community knowledge shared in confidence

Digital platforms

• We use encrypted platforms and secure project management tools.
• Access levels are role based, reviewed quarterly, and revoked upon exit.
• Personal or confidential information is not to be stored on unapproved devices or personal accounts.

Breach response

• Suspected breaches must be reported to the CEO within 24 hours.
• A preliminary review will determine severity, impact, and any external reporting obligations.
• Individuals affected by the breach will be notified promptly and respectfully.

Application

This policy applies to all projects, platforms, and interactions involving data. It also guides procurement of any digital tools or software with access to sensitive information.