CATA Privacy Policy


1       What is this Privacy Policy?
(a)       In this Privacy Policy, “we”, “us” or “our” means Creative Art Therapy Australia ABN 51 008 991 194. We are a not-for-profit organisation that provides programs centred on creative art therapy for the expression, experience and understanding of personal trauma for children and adolescents. We also operate a website at (our Website) which features our work and programs and provides the opportunity for visitors to make a donation.
(b)       We are committed to protecting and respecting your privacy. We believe it is important for you to understand how we collect, use and disclose your personal information.
(c)       This Privacy Policy sets out the basis on which any personal information we gather from you will be collected, used, processed, stored, transferred or otherwise handled by us.
(d)       We may modify or amend this Privacy Policy from time to time.  We will display a notice on our Website indicating when any such revisions have been made.  This Privacy Policy was last updated on 06/03/2019.
2       What is personal information?
Personal information is information or an opinion about an individual, or an individual who is reasonably identifiable, whether true or not and whether recorded in material form or not.  This includes contact information (such as your name, address, email, and contact telephone/facsimile numbers), payment information and other similar information.
3       What personal information do we collect?
(a)       We may collect personal information from you when you donate to us, sign up to volunteer with us, participate in our programs, sign up for our distribution list or otherwise contact us by any method, such as telephone, email, social media, post, facsimile or in person.
(b)       When you donate to us, we will collect the personal information you provide to us during the donation process.  Such personal information may include details such as your name, phone number, and email address. We do not retain your payment details following a donation.
(c)       When you access and use our Website we will record and log for statistical purposes certain information about such access and use, including your IP address, the date and time of your visit, the parts of our Website you access during your visit, your actions on our Website, and the browser you are using (see section 5 for more details). Where you donate through our Website, this information may be associated with you.
(d)       As well as collecting information directly from you, there may be occasions when we collect information about you from a third party. For example, we may collect information from a third party where they donate on your behalf. In such instances, we will determine whether we would have been entitled to collect such information from you under this section 3, and to the extent we would not have been entitled to do so, we will destroy or de-identify such information as soon as reasonably practical.
(e)       The type of personal information that we collect about you will depend on the type of dealings you have with us. For example, if you:
(i)        Contact us through our Website or any other method, we may collect your name, email address, contact number and details of your enquiry; or
(ii)       Sign up to volunteer with us, we may collect the information included in your application, including your name, email address and compliance documents such as a Working With Children Check (WWCC).
(iii)      If you make a donation to us, we will process your donation using PayPal. When you make a donation:
(A)        You may be required to give PayPal information including your name, address, telephone number and email address; and
(B)        PayPal may share with us some of your personal information, including information about whether a particular registered individual has made payment. We do not receive your financial information.
4       Anonymity
You do not have to provide us with any personal information if you choose not to.  You may use our Website without registering, in which case we will not be able to personally identify you unless you choose to, donate to us, sign up to volunteer with us or you otherwise provide us with your identity.
5       Cookies
(a)       If you use our Website, some of the personal information referred to in section 3 may be collected through the use of cookies. The cookie assigns you an identification number, which allows us to recognise you when you return to our website.
(b)       Most browsers are set by default to accept cookies.  However, if you do not wish to receive any cookies you may set your browser to either prompt you whether you wish to accept cookies on a particular site, or by default reject cookies. 
(c)       Please note that rejecting cookies may mean that some or all of the functions on our Website will not be available to you. 
6       How is your personal information used?
The main purposes for which we collect, hold use and disclose personal information are set out below:
(a)       The personal information that we collect is generally used to provide services to you, and, if you use our Website, to track your usage and to evaluate performance of our Website. 
(b)       Information collected by us may also be used for the following purposes:
(i)        to provide you with information in relation to the work we do;
(ii)       to maintain membership lists;
(iii)      to manage donor and supporter lists;
(iv)      to co-ordinate and manage volunteers;
(v)       to account for activities or expenses;
(vi)      to provide supporting evidence when seeking grants or other funding;
(vii)    to respond to your questions or suggestions;
(viii)   to improve the quality of our services; or
(ix)      to improve the quality of your visit to our Website.
(c)       You may opt out of receiving such information by notifying us accordingly, or using any unsubscribe facility we provide for that purpose.
7       Disclosure of your personal information
(a)       We do not sell, rent or trade personal information to or with any other third parties.
(b)       We will not otherwise disclose your personal information to any third party unless:
(i)        that third party is a contractor engaged to provide goods or services to us (including goods or services that assist us in providing our Website).  Our agreements with such contractors require that they keep your personal information confidential, and that they only use or disclose your personal information for the purposes of providing those goods or services to us;
(ii)       such disclosure is in connection with the sale of some or all of our business or assets; or
(iii)      you have consented for us to share the information for a specific purpose, or the disclosure is authorised by the Privacy Act including:
(A)        to lessen or prevent a serious threat to life or health;
(B)        to protect the personal safety of users of our Website or the public;
(C)        if authorised or required by law;
(D)        if we have reason to suspect that unlawful activity has been, is being or may be engaged in;
(E)        to enforce the law or where necessary to investigate a suspected unlawful activity; or
(F)        you would reasonably expect or we have told you that your personal information is usually used or disclosed to third parties in this way,
(c)       At this time, the third parties referred to in paragraph (b) are located within Australia, however this may change in the future and if it does we will update this privacy policy accordingly.
8       Access and correction of your personal information
(a)       We will, on request, provide you with access to the information we hold about you, including for the purpose of correcting or updating that information, unless there is an exception to such disclosure which applies under the Australian Privacy Principles (APPs).
(b)       If you require access to your personal information, please email Before we provide you with access to your personal information we will require some proof of identity.  For most requests, your information will be provided free of charge, however, we may charge a reasonable fee if your request requires a substantial effort on our part.
(c)       If we refuse to provide you with access to the information, we will provide you with reasons for the refusal and inform you of any exceptions relied upon under the APPs (unless it would be unreasonable to do so).
(d)       We take reasonable steps to ensure that your personal information is accurate, complete, and up-to-date whenever we collect or use it.  If the personal information we hold about you is inaccurate, incomplete, irrelevant or out-of-date, please contact us and we will take reasonable steps to either correct this information, or if necessary, discuss alternative action with you.
9       How we hold and secure your personal information
The security of your personal information is important to us.  We take reasonable steps to prevent the personal information we hold about you from misuse, interference or loss, and from unauthorised access, modification or disclosure.  This includes the use of technologies and processes such as access control procedures, network firewalls, encryption and physical security to protect the privacy of your personal information.  We do not retain any credit card details you provide to us from our servers once an order is processed.
10    Links to other websites
Sometimes our Website contains links to other websites.  When you access a website other than our Website, we are not responsible for the privacy practices of that site.  We recommend that you review the privacy policies of each website you visit. 
11    How to contact us
(a)       If you have any queries or complaints with regard our collection, use or management of your personal information, please contact:
A:    Creative Art Therapy Australia
PO Box 8254, Northland VIC 3072
T:     +61 3 8470 9525
(b)       If you wish to make a complaint about an alleged breach of the Privacy Act, we ask that you send us your complaint in writing to the email address listed above.  We endeavour to respond to complaints within a reasonable period (usually 30 days).  If you are not satisfied with our response, you are entitled to make a complaint to the Office of the Australian Information Commissioner by phoning 1300 363 992 or by email at