Privacy Policy
PURPOSE AND SCOPE
This Privacy Policy explains how we collect and use information that is provided to us through our website or otherwise in the usual course of our dealings with you as a client, potential client, or stakeholder. This policy applies to all personal information that we collect, whether in hard copy or electronic format.
POLICY STATEMENT
Sussex Street recognises our legal obligations, together with our ethical responsibility, to protect and uphold the right to privacy of our clients, employees, volunteers, and stakeholders. We will seek to ensure that:
● we meet our legal and ethical obligations as a service provider and employer in relation to protecting the privacy of clients and organisational personnel, including by complying with the Australian Privacy Principles;
● clients are informed about the personal information that we collect from them, how we store and use that information, and how they can ask to see or amend it;
● all staff, volunteers, contractors and Board members have an appropriate level of understanding regarding privacy to ensure we can meet our obligations (including, where appropriate and possible, receiving targeted training and signing a Confidentiality Agreement); and
● the necessary supporting procedures are in place to meet the requirements of this policy.
DEFINITIONS
Personal information Refers to information or an opinion about an identified individual, or an individual who is reasonably identifiable. Personal information held by Sussex Street may include:
● an individual’s name, signature, address, phone number or date of birth;
● sensitive information;
● staff records (e.g. terms and conditions of employment, details of performance or conduct, taxation, banking or superannuation details);
● Information about assets, liabilities, or income;
● photographs, videos, or artwork; and
● case studies involving our clients (typically deidentified).
Sensitive information
Includes race or ethnic origin, sexual orientation or practices, health or genetic information, criminal record, biometric data (fingerprints, facial recognition), religious affiliation and political opinions.
DEALING WITH PERSONAL INFORMATION
In dealing with personal information, Sussex Street’s staff, volunteers and students will:
● only collect and store personal information that is necessary for the functioning of the organisation and its activities;
● use fair and lawful ways to collect personal information;
● collect personal information only by consent from an individual;
● be transparent about the sort of personal information is held, what purposes it is held it for, how it is collected, used and disclosed, and who will have access to it;
● ensure privacy for clients, staff, volunteers and Board members when they are being interviewed or discussing matters of a personal or sensitive nature;
● seek to make copies of important documents and return the originals to the client;
● ensure that personal information collected or disclosed is accurate, complete and up-to-date, and provide access to any individual to review information or correct wrong information about themselves;
● take reasonable steps to protect all personal information from misuse and loss and from unauthorised access, modification or disclosure; and
● destroy or permanently de-identify personal information that is no longer required, in accordance with our Record Retention and Disposal Policy.
TYPES OF PERSONAL INFORMATION COLLECTED
The type of information that we collect includes personal information concerning clients, potential clients who contact us, as well as other service providers, consultants, employees, applicants for employment, and volunteers. The personal information we collect may include:
● names;
● contact details including phone numbers, postal and/or residential addresses and email addresses;
● dates of birth;
● photographs;
● any facts or opinions that are connected to an enquiry that we are conducting on behalf of a client or potential client;
● information regarding assets, liabilities, or income; and
● personal information provided through our website.
If we receive your Information from third parties, we will seek to protect it in accordance with this Policy and take reasonable steps to ensure you are aware that we have collected the information about you and the circumstances of the collection.
MANAGING PERSONAL INFORMATION
All Sussex Street employees are responsible for the management of personal information to which they have access, and in the conduct of their research, consultation, or advocacy work.
The CEO and the Principal Solicitor are responsible for content in our publications, communications and on our website, and must ensure the following:
● informed consent is obtained for the inclusion of any personal information about any individual, including Centre workers;
● information that is provided by other agencies or external individuals conforms to privacy principles; and
● the website contains a Privacy Statement which is explicit about any collection of personal information from the public as a result of their use of the website.
The CEO is responsible for safeguarding personal information relating to Sussex Street staff, Board members, volunteers, students, and contractors.
PRIVACY CONTACT
The Privacy Contact Officer is the CEO of Sussex Street, who will be responsible for:
● ensuring that all staff are familiar with this policy, along with the administrative procedures for handling personal information;
● ensuring that clients and other stakeholders are provided with information about their rights regarding privacy; and
● handling queries or complaints about a privacy issue.
If you have a privacy enquiry, please email sscls@sscls.asn.au
DISCLOSURE OF PERSONAL INFORMATION
Sussex Street will only use or disclose your personal information in accordance with the purposes(s) for which it was collected (i.e. to provide you with legal services). There are three notable exceptions:
● Where it is required by law. Sussex Street may be required to produce, in whole or in part, certain records in response to a subpoena, court order, or under certain legislative requirements. This is a legal requirement that cannot be ignored.
● For ethical reasons. Where there is a clear possibility of harm, either to the person to whom the information pertains or to others, Sussex Street may have an ethical obligation to release certain information.
● Where there is prior informed consent. Sussex Street may release information to third parties (such as another service provider) where we have prior informed written consent.
● Where it is required by our funders. Because we are a government-funded service, we are required to collect some service-use information for our funders (reported anonymously). Occasionally, we are also required to provide case studies that demonstrate client outcomes. Case studies do not include any identifiable information about any of the persons involved in a matter. To further protect our clients’ identity, the names, ages, gender, locations and other identifiable details of all persons profiled in the case study are changed.
In any of the above cases, all personal information must be reviewed by either the Principal Solicitor or the CEO prior to being disclosed.
CLOUD COMPUTING
Sussex Street may utilise cloud computing services for e-mail storage and to store information that we collect. Confidentiality of Information is of a paramount concern to us, so we seek confirmation that such service providers comply with the Australian Privacy Principles, or are subject to a binding law or scheme that offers substantially similar protection.
WEBSITE
We may collect information on website activity such as the number of people who visit our website, the date and time of visits, the number of pages viewed and location. We do not use this information to identify individuals. This information is used to help us analyse and improve our website.
EMBEDDED CONTENT FROM OTHER WEBSITES
Articles on this site may include embedded content (e.g. videos, images, articles). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Sussex Street does not have any control over those third-party websites and is not responsible or liable for the protection and privacy of any information you provide whilst visiting those third-party websites. Your interaction with such third-party websites is not governed by this Policy.
AMENDMENTS
This Policy may be amended from time to time, at our sole discretion. A hard copy of the latest version will be available at our offices.
Last updated: January 2026