Privacy
General information
This Privacy Statement details how we collect, use and store your information, and the processes we use to protect your privacy.
The Energy Security Corporation must comply with the Privacy and Personal Information Protection Act 1998 (PPIP Act), the NSW Department of Climate Change, Energy, the Environment and Water’s Privacy Management Plan (PMP) and the department’s Data Breach Policy.
Information that identifies you may be gathered when you use the Energy Security Corporation’s digital channels such as the website, or when you contact us or use our services through other means such as phone, email or in-person.
Providing information to us is voluntary, however, if you don’t provide your information, we may not be able to provide our services to you.
Information we collect from you
We aim to limit the types of personal information collected to that which is necessary for the intended purpose. We may directly collect personal information such as your name, contact details or job title. However, there may be circumstances where we may collect your personal information indirectly. There may also be circumstances when information is collected automatically through cookies on our website.
Information collected from websites and other digital services
When you use this website, we may collect the following information:
- your IP (internet protocol) address or host name e.g. 123.123.123.12 or xxx.yyy.com.au
- your top-level domain name
- the address of your server
- the date and time of your visit to the site
- the pages accessed and documents downloaded
- the previous site visited
- the type of browser and operating system you used.
Information collected when you subscribe to updates
We offer subscription and update services. These services are offered on an ‘opt in’ basis. You can opt out at any time by selecting the ‘Unsubscribe’ link at the bottom of the email or via our online contact form and we will promptly process your request.
When you subscribe to services such as email newsletters, we will use your personal information to provide the content to you. We may also use your personal information to tell you about associated services, public information campaigns or web content we think you might be interested in, but only if you have indicated that you are happy to receive this information.
Information we collect when you contact us
When you contact us, we may collect the following information from you:
- full name
- job title
- business name
- phone number
- email address.
Providing this information is voluntary, however, we may be unable to help you with your enquiry if you do not provide the information.
Google Analytics
The Energy Security Corporation uses Google Analytics a reporting service provided by Google Inc. (Google) and its subsidiaries. Google Analytics uses cookies to help the Energy Security Corporation analyse how users use our website. The information generated by the cookie about your use of our website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of our website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage.
Google may also transfer this information to third parties, where required to do so by law or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, but this may mean you will not be able to use the full functionality of the website. For more details visit www.google.com/analytics/terms/us.html.
Why do we collect personal information?
The ways that we may use or disclose your personal information are outlined below.
| Purpose | How your information is used |
|---|---|
| Provide services | We use your personal information to deliver services including:
|
| Manage our operations | We use your information to manage our operations including:
|
| Managing security, risk and fraud prevention | We use your information to:
|
| To meet our legal obligations | Where required we may disclose information to comply with the law and our regulatory obligations including:
|
How we store and protect your information
We will retain the information you have provided for a period that is appropriate for the purpose for which it was provided. Your information will be archived and disposed of in accordance with our policies, legislative requirements and guidelines based on the NSW State Records Act 1998.
We take all reasonable steps to protect information during transfer and storage. Physical measures, such as building and equipment security, are used in conjunction with digital technology, such as data encryption and firewalls, to help prevent unauthorised access to information.
We use third-party systems to collect and store your personal information for email lists, registrations and feedback. For example, we use:
- Campaign Monitor (to send emails)
- FormAssembly (to collect information from forms)
Some information is stored on servers located outside Australia. The 2015 NSW Government Cloud Policy states that it is essential that any engagement with a cloud service provider guarantees the security of data and provides for notification of breaches. Legislation requires agencies to maintain control over the accessibility of their data, and cloud service providers should be able to demonstrate compliance with PPIPA, HRIPA, GIPAA, the State Records Act 1998, and any other applicable laws (e.g. the Privacy Act 1988 (Cth)).
Access and accuracy
We take reasonable steps to ensure all personal information we collect is accurate, up to date, and complete. This includes updating your personal information when you advise us that it has changed, and at other times as necessary.
If you wish to have access to or amend any information that we hold about you please contact us via our online contact us form.
We will have to verify your identity before meeting your requests, which we will process in a reasonable time.
Complaints
If you have a concern about personal information held by us, which may include a breach of our obligations in relation to your privacy you should contact [email protected]. If you are not satisfied with our response, we will advise you on your options for further progressing any complaint.