Privacy Policy

Privacy Policy

Ngalgarra Resources Indigenous Corporation (NRIcorp)

Ngalgarra Resources Indigenous Corporation (NRIcorp), its affiliates and agents (collectively referred to as NRIcorp, we, us, or our) is committed to protecting your privacy. We take the responsibility of managing and safeguarding your personal information very seriously.

NRIcorp is bound by the Australian Privacy Principles in the Privacy Act 1988 (Cth) and the Information Privacy Principles in the Privacy and Data Protection Act 2014 (Vic) (together, Privacy Law). These laws regulate how we collect, use, disclose, and handle your personal information. In some cases, NRIcorp may also be bound by additional contractual privacy obligations.

This Privacy Policy outlines how we manage your personal information, including sensitive information, and how we protect your privacy. From time to time, this policy may be reviewed and updated. Any updates will be published on our website: www.nricorp.com.au.

This policy should be read alongside any other privacy notices or collection statements provided to you when we collect your personal information.

In this policy:

• we, us, and our refer to NRIcorp.
   
• you and your refer to individuals whose personal information we may collect.
   
• personal information means information or an opinion about an identified individual, or an individual who is reasonably identifiable.
   
• sensitive information includes details about your racial or ethnic origin, political opinions, religious beliefs, health information, or criminal record.
   

NRIcorp will only collect personal information that is relevant and reasonably necessary for us to carry out our work, which includes:

• your personal details (e.g. name, date of birth, gender, Aboriginal or Torres Strait Islander identification);
   
• your contact details (e.g. address, email address, phone number);
   
• employment and professional information (e.g. qualifications, work history, training records, or project involvement);
   
• information collected through our websites, forms, and community engagement activities; and
   
• photographs or recordings from NRIcorp events (where consent has been provided or notice given).
   

We may collect sensitive information in limited circumstances, such as when it relates to Aboriginal or Torres Strait Islander identification or when required to support employment, training, or program participation. NRIcorp will always obtain your consent when collecting sensitive information unless otherwise permitted by law.

You may choose to remain anonymous or use a pseudonym when communicating with us, where lawful and practicable. However, this may limit our ability to provide certain services or engage you in NRIcorp programs and activities.

We may collect personal information in several ways, including:

• when you contact us by phone, email, or through our website;
   
• when you complete application forms, surveys, or program registrations;
   
• during the course of providing employment, training, consulting, or project services;
   
• when you participate in our events or initiatives; and
   
• from publicly available sources or third parties, where appropriate and lawful.
   

When information is collected from a third party, we will take reasonable steps to inform you of that collection and its circumstances.

We collect, hold, and use personal information to support NRIcorp’s work, which includes:

• delivering employment, training, and consulting services;
   
• managing projects and administrative functions;
   
• supporting community and cultural initiatives;
   
• managing grants, strategic planning, and partnerships;
   
• maintaining contact lists and communication with stakeholders;
   
• sending news, updates, and information about NRIcorp programs and services; and
   
• meeting legal and contractual obligations.
   

We use or disclose personal information only for the purposes for which it was collected, or for a related secondary purpose that you would reasonably expect or to which you have consented.

We may disclose your information to:

• service providers engaged by NRIcorp (e.g. IT, communication, or data management providers);
   
• government agencies or funding bodies, where required by contract or law;
   
• consultants, auditors, or legal advisers assisting with NRIcorp operations; and
   
• other parties where required by law (for example, in response to a court order or subpoena).
   

NRIcorp does not sell or rent personal information to marketing organisations. We take reasonable steps to ensure third parties handle your information securely and in accordance with Privacy Law.

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure.

These steps include:

• secure electronic systems and password-protected files;
   
• restricted access to authorised personnel only; and
   
• secure disposal or de-identification of information no longer required.
   

If a notifiable data breach occurs that is likely to result in serious harm, NRIcorp will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with Privacy Law.

We take reasonable steps to ensure that your personal information is accurate and up to date. You may request access to, or correction of, your personal information by contacting our Privacy Officer.

Requests must be in writing and may require verification of identity. Access may be denied where permitted under Privacy Law, and reasons will be provided if so.

Our website may contain links to third-party websites. When you access those links, you leave our website and this Privacy Policy no longer applies. NRIcorp is not responsible for the privacy practices or content of third-party websites.

Our website may use tools such as Google Analytics to understand how visitors interact with our site. This may involve the collection of information such as your IP address, browser type, device information, and pages visited. This data is generally aggregated and not used to personally identify users.

For more information about how Google collects and processes data, visit:
www.google.com/policies/privacy/partners

If you believe that NRIcorp has breached your privacy, you may lodge a complaint.

Procedure:

1. Send your complaint in writing to our Privacy Officer (details below).
    
2. Include specific details of the alleged breach.
    
3. The Privacy Officer will review your complaint and provide a written response within 45 days.
    
4. If a breach is found, NRIcorp will take appropriate steps to remedy it.
    

If you are dissatisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) or the Office of the Victorian Information Commissioner (OVIC):

• www.oaic.gov.au
   
• https://ovic.vic.gov.au
   

Privacy Officer
Ngalgarra Resources Indigenous Corporation (NRIcorp)
📧 Email: info@nricorp.com.au
📞 Phone: 0424 990 947