BPC staff are required to respect the confidentiality of personal information and the privacy of individuals.
5.1 Updating personal information
BPC endeavours to ensure that the personal information it holds is accurate, complete, and up to date. Persons may seek, and are encouraged, to update their personal information held by BPC by primarily accessing their data stored on the BPC CCB site. You can view your information by contacting the Church Office (firstname.lastname@example.org) and requesting access to that information..
BPC has procedures in place to ensure that it conducts reviews of the personal information that it holds to ensure that the personal information it has collected or proposes using or disclosing is actually complete and up to date.
BPC makes every effort not to store personal information longer than necessary. The time required to store information may change in relation to the type of information stored and any legal obligations through the Act.
5.2 Security of Personal Information
BPC has in place steps to protect the personal information it holds from misuse, loss, unauthorised access, modification or disclosure by use of various methods which as a minimum standard includes storing paper records in locked cabinets and pass-word protected access rights to computers which contain computerised records of personal information.
BPC will take reasonable steps to destroy or de-identify personal information if it does not need it for any purpose for which it may have been used or disclosed.
BPC holds some information (such as name and address details, group involvement and attendance records) about members of the church congregation on servers provided by Church Community Builder (CCB).
CCB maintains personal information in a manner that complies with the Act and the National Policy Principles.
CCB uses servers that reside in the United States and the privacy of the information is subject to a Service Agreement between BPC and CCB as well as law relating to the US State and Federal Laws. The service agreement does not allow CCB to monitor, edit, use, distribute or disclose any of the data without BPC' express written permission or as may be required by law. The services provided by CCB ensure data is protected through encrypted links and secured services and is fully maintained and backed up.
BPC Staff will not place medical information on a web-based server, although this information may be required to be stored in other forms.
Personal financial account information, such as bank account details, credit card details, or giving records may be required to be stored within web based servers located within financial institutions for the purposes of direct debit procedures or other financial transactions.
5.3 You have the right to check what personal information BPC holds about you
Under the Act, and with some exceptions, an individual has the right to obtain access to any personal information that BPC holds about them, and to advise BPC of any perceived inaccuracy. Children will have access to their personal information through their parents and/or guardians.
To make a request to access any information BPC holds about you or your child, please contact BPC Office (email@example.com) and request that we send you a 'Request for Personal Information Form’, which must be completed before BPC can give access to you to personal, sensitive or health information. BPC may require you to verify your identity and specify what information you require.
There are exceptions as to when BPC may provide you with access to personal information. It will depend upon the circumstances surrounding your request as to whether BPC can disclose that personal information to you. As such, each request for access to personal information will be assessed on a case by case basis, either by the Senior Pastor/ Moderator, Pastor or, in some cases, the session of BPC (whichever is deemed to be the most appropriate by the Senior Pastor/ Moderator).
BPC will not charge you for applying to lodge a request for access.
If BPC denies you access to personal information, you will be given reasons for that denial.
5.4 Consent and right of access to the personal information of children
BPC respects every parent and/or guardian's right to make decisions concerning their children's spiritual upbringing and care. Generally, BPC will refer any requests for consent and notices in relation to personal information of a child to the parent and/or guardian. BPC will treat consent given by a parent and/or guardian as consent given on behalf of the child, and notices to parents and/or guardians will act as notices given to the child.
5.5 You have the right to have information removed from BPC storage.
It is your right to have information removed from storage by Bundoora Presbyterian Church, subject to any legal requirements that may be placed on that information. If you wish to have information deleted a request should be submitted to firstname.lastname@example.org. There may be cases where removal of information will exclude participation by a person in an event due to the requirements of BPC in discharging its duty of care (see also 2.1).