This summary sets out the key points about how the National Capital Authority (NCA) handles personal information. Our full privacy policy can be downloaded at the bottom of this page.
We collect, hold, use and disclose personal information to carry out our statutory functions. We also collect, hold, use and disclose information in relation to our role as an employer and statutory agency within the Australian Public Service.
Collection of your personal information
We may collect personal information such as your name, email address, telephone number and any other personal information you choose to share with us and our contracted providers when you reach out to us for information or support, give us feedback, participate in optional surveys, subscribe to marketing, attend our events, participate in product research or training or otherwise interact or communicate with us.
The NCA utilises the Intuit Platform (via Mailchimp) to manage and distribute its email marketing logistics. To view their Privacy Policy and Terms of Use, please refer to Global Privacy Statement | Intuit
Mailchimp stores subscriber data on servers outside Australia. Users should read the Privacy Policy and Terms of Use documents above and be aware of risks to their personal privacy.
INFORMATION RETENTION
You have the right to unsubscribe from the NCA database at any time. You can do this by going to the ‘unsubscribe’ link at the bottom of any email and following the instructions provided therein. If you unsubscribe we will retain your personal information unless you request in writing that we delete that data, which we will do subject to retention of such of your personal information as is necessary to comply with our data retention requirements and provide you with any services you receive from the NCA. We may be required to maintain your information for as long as necessary to:
1. comply with our legal, regulatory, compliance needs;
2. to exercise, establish or defend legal claims; and/or
3. to protect against fraudulent or inappropriate activity.
This means we may keep different information for different periods.
If you do not use your account for 6 months we may cancel your account, and if so we will delete, anonymise, or de-identify such of your personal information that we are not required to retain for the purposes noted above at that time.
There may be occasions where we are unable to fully delete, anonymise, or de-identify your information due to technical, legal, regulatory, compliance or other operational reasons. Where this is the case, we will take reasonable measures to secure your personal information until such time as we are able to delete, anonymise, or de-identify it.
Disclosure
We only use or disclose your personal information (including sensitive information):
for purposes for which it was collected; and/or
for other purposes either with your consent or as required or authorised by law.
We would only disclose personal information overseas so that we can properly handle your enquiry. Web traffic information we collect using Google Analytics may also be stored overseas.
Accessing and correcting your personal information
If you ask, in most cases we must give you access to the personal information that we hold about you, and take reasonable steps to correct it if we consider it is incorrect. We will try to make the process as simple as possible.
How to make a complaint
You can complain to us in writing about how we have handled your personal information. We will respond to the complaint within 30 days.
We acknowledge the Ngunnawal people as traditional custodians of the ACT and recognise any other people or families with connection to the lands of the ACT and region.
We acknowledge and respect their continuing culture and the contribution they make to the life of this city and this region.
