WEBSITE PRIVACY POLICY

This Privacy Policy applies to all personal information collected by Chagoya Support Group (we, us or
our) via the website located at chagoyagroup.com.au (Website).

1. What information do we collect?
   The kind of Personal Information that we collect from you will depend on how you use the
   website. The Personal Information which we collect and hold about you may include:
   We collect the following personal information from website users: name, email address, phone
   number, company name, business details, IP address, browser type and version, device
   information, pages visited, time and date of visits, time spent on pages, referring website
   addresses, and any other information voluntarily provided through contact forms, consultation
   bookings, or service enquiries.
   For clients engaging our NDIS and allied health recruitment services, we may also collect
   information about NDIS support needs, medical histories, and other personal information such as
   email address, name, phone number, and addresses.
   For clients engaging our security recruitment services, we may conduct police checks,
   background checks, details about dwellings or principal places of business, educational
   information, and other information required to conduct security services in Australia, under
   Australian law.
2. Types of information
   The Privacy Act 1998 (Cth) (Privacy Act) defines types of information, including Personal
   Information and Sensitive Information.
   Personal Information means information or an opinion about an identified individual or an
   individual who is reasonably identifiable:
   (a) whether the information or opinion is true or not; and
   (b) whether the information or opinion is recorded in a material form or not.
   If the information does not disclose your identity or enable your identity to be ascertained, it will in
   most cases not be classified as “Personal Information” and will not be subject to this privacy
   policy.
   Sensitive Information is defined in the Privacy Act as including information or opinion about
   such things as an individual’s racial or ethnic origin, political opinions, membership of a political
   association, religious or philosophical beliefs, membership of a trade union or other professional
   body, criminal record or health information.
   Sensitive Information will be used by us only:
   (a) for the primary purpose for which it was obtained;

(b) for a secondary purpose that is directly related to the primary purpose; and
(c) with your consent or where required or authorised by law.

3. How we collect your Personal Information
   (a) We may collect Personal Information from you whenever you input such information into
   the Website, related app or provide it to Us in any other way.
   (b) We may also collect cookies from your computer which enable us to tell when you use the
   Website and also to help customise your Website experience. As a general rule, however,
   it is not possible to identify you personally from our use of cookies.
   (c) We will not deploy non-essential cookies (including analytics and marketing cookies)
   without your prior express consent. You may withdraw your consent at any time through
   our cookie management tool, and we will provide clear information about the types of
   cookies used and their specific purposes in our Cookie Policy.
   (d) We generally don’t collect Sensitive Information, but when we do, we will comply with the
   preceding paragraph.
   (e) Where reasonable and practicable we collect your Personal Information from you only.
   However, sometimes we may be given information from a third party, in cases like this we
   will take steps to make you aware of the information that was provided by a third party.
4. Purpose of collection
   (a) We collect Personal Information to provide you with the best service experience possible
   on the Website and keep in touch with you about developments in our business.
   (b) We customarily only disclose Personal Information to our service providers who assist us in
   operating the Website. Your Personal Information may also be exposed from time to time to
   maintenance and support personnel acting in the normal course of their duties.
   (c) By using our Website, you consent to the receipt of direct marketing material. We will only
   use your Personal Information for this purpose if we have collected such information direct
   from you, and if it is material of a type which you would reasonably expect to receive from
   use. We do not use sensitive Personal Information in direct marketing activity. Our direct
   marketing material will include a simple means by which you can request not to receive
   further communications of this nature, such as an unsubscribe button link.
5. Security, Access and correction
   (a) We store your Personal Information in a way that reasonably protects it from unauthorised
   access, misuse, modification or disclosure. When we no longer require your Personal
   Information for the purpose for which we obtained in, we will take reasonable steps to
   destroy and anonymise or de-identify it. Most of the Personal Information that is stored in
   our client files and records will be kept for a maximum of 7 years to fulfill our record
   keeping obligations.
   (b) The Australian Privacy Principles:

(i) permit you to obtain access to the Personal Information we hold about you in
certain circumstances (Australian Privacy Principle 12); and
(ii) allow you to correct inaccurate Personal Information subject to certain exceptions
(Australian Privacy Principle 13).

(c) Where you would like to obtain such access, please contact us in writing on the contact
details set out at the bottom of this privacy policy.

6. Complaint procedure
   If you have a complaint concerning the manner in which we maintain the privacy of your Personal
   Information, please contact us as on the contact details set out at the bottom of this policy. All
   complaints will be considered by Martin Ariel and we may seek further information from you to
   clarify your concerns. If we agree that your complaint is well founded, we will, in consultation with
   you, take appropriate steps to rectify the problem. If you remain dissatisfied with the outcome,
   you may refer the matter to the Office of the Australian Information Commissioner.
7. Overseas transfer
   Your Personal Information will not be disclosed to recipients outside Australia unless you
   expressly request us to do so. If you request us to transfer your Personal Information to an
   overseas recipient, the overseas recipient will not be required to comply with the Australian
   Privacy Principles and we will not be liable for any mishandling of your information in such
   circumstances.
8. How to contact us about privacy
   If you have any queries, or if you seek access to your Personal Information, or if you have a
   complaint about our privacy practices, you can contact us through:
   info@chagoyagroup.com.au.