Who we are
‘We’, ‘us’, ‘our’, and ‘Coolibah’ refer to Mandurah Retirement Village, ABN 79817156681 and our related businesses.
This Privacy Policy is Coolibah official online privacy policy and it applies to all personal information collected by Coolibah. In this policy we explain how and why we collect your personal information, how we use it, and what controls you have over our use of it.
Coolibah is committed to complying with Commonwealth legislation governing privacy of personal information by businesses and to protecting and safeguarding your privacy when you deal with us.
Our website address is: https://www.coolibah.org.au.
What personal data we collect and why we collect it
Comments
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Online forms
When the forms are used on the site, the data collected will include your name and email address. We store user input data sent through the forms on this website, along with meta information about the submissions, including the time stamp, the origin IP address, and the user agent (browser).
We use the Gravity Forms plugin to manage contact form and Coolibah online forms submissions such as enquiries. The information is sent as email messages that only a select few are allowed to access. Form submissions (entries) are saved to the Coolibah WordPress database.Gravity Forms utilizes WordPress authentication for session management alongside a simple implementation of OAuth 1 with HMAC-SHA1 signatures which is used by external clients for session-less connections to the Gravity Forms API.
Cookies
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction with the embedded content if you have an account and are logged in to that website.
Third Party Links
Our website may contain links to other websites provided by third parties not under our control. When following a link and providing information to a 3rd-party website, please be aware that we are not responsible for the data provided to that third party. This privacy policy only applies to the websites listed at the beginning of this document, so when you visit other websites, even when you click on a link posted on WordPress.org, you should read their own privacy policies.
Additional Information
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where we send your data
Visitor comments may be checked through an automated spam detection service.
Who we share your data with
Visitor comments may be checked through an automated spam detection service. Coolibah will not rent or sell potentially personally-identifying and personally-identifying information to anyone. Other than to project administrators, employees, contractors, and affiliated organisations, as described above, Coolibah discloses potentially personally-identifying and personally-identifying information only when required to do so by law, if you give permission to have your information shared, or when Coolibah believes in good faith that disclosure is reasonably necessary to protect the property or rights of Coolibah, third parties, or the public at large.
Security and Storage
We have security measures in place to attempt to protect against the loss, misuse and alteration of personal information under our control. Personal information is de-identified or destroyed securely when no longer required by us. Coolibah retains the information you provide to us including possibly your contact details to retain adequate records for legal and accounting purposes. Information stored within our computer systems can only be accessed by those entrusted with authority and computer network password sanctions.No data transmission over the Internet can be guaranteed to be 100 per cent secure. As a result, while we strive to protect user’s personal information, Coolibah cannot ensure or warrant the security of any information transmitted to it or from its online services, and users do so at their own risk. Once Coolibah receives your transmission, it makes every effort to ensure its security on its systems.Ultimately, you are solely responsible for keeping your passwords and/or account information secret. You should be careful and responsible whenever you are online.
How we protect your data
What data breach procedures we have in place
Coolibah has a Data Breach Response Plan in place. The Data Breach Response Plan (DBRP) give effect to Coolibah’s response to suspected or actual data breaches as outlined in the GVP06 Privacy Policy (“the policy”).
These guidelines applies to all data and information collected and held by Coolibah Care and is to be adhered to on an organisation-wide level. These guidelines also extends to third party service providers, contractors and volunteers.
Industry regulatory disclosure requirements
Complaints
If you have a complaint about our Privacy Policy or the collection, use or safe disposal or destruction of your personal information, your complaint should be directed in the first instance to us. We will investigate your complaint and attempt to resolve any breach that might have occurred in relation to the collection, use or destruction of personal information held by us about you in accordance with the Commonwealth Privacy legislation. If you are not satisfied with the outcome of this procedure then you may request that an independent person (usually the Commonwealth Privacy Officer) investigate your complaint.
Acceptance
You accept that your use of this site includes your acceptance of this Privacy Policy.