ECR is committed to protecting privacy and confidentiality of sensitive and/or personal
information, which it may receive or hold about staff, employees, and customers. ECR
appreciates the importance of protecting personal information and recognises the
moral and legal requirements for privacy and confidentiality.

ECR is bound by the Australian Privacy Principles (the APPs) under the Privacy Act 1988
(Cth) in the way we handle personal information. This Policy explains how we handle
personal information.

Definitions – Privacy and Confidentiality
The expression “personal information” is used in this policy to refer to information or
an opinion about an individual whose identity is apparent, or can reasonably be
ascertained, from information or opinion.

Collection – we will use the information that you provide to ECR: –
1. To complete any compliance obligations such as legal documentation /
accredited training
2. Insurance obligations

ECR will only collect information if it is necessary for the purposes outlined above. If
you choose not to provide personal information requested, ECR might not be able to
provide you with the services you require.

ECR will take reasonable steps to ensure that your personal information is protected
from misuse, loss and from unauthorised access, modification or disclosure.

ECR management is accountable to treat personal information with utmost
confidentiality.

ECR will destroy or permanently de-identify personal information if it is no longer
needed for any purpose for which ECR may use or disclose it. ECR will dispose of all
hard-copy documentation that contains personal information that is no longer needed
in a secure manner. ECR will delete all personal information stored in electronic form
that is no longer needed.

However, ECR will not be held responsible for events arising from unauthorised access
to personal information.

To raise a privacy related issue with ECR, or to discuss any issues about the Privacy
Policy, please contact ECR on 1300 978 331 or at Level 4, 260 Queen Street, Brisbane
QLD 4000.

Disclosure
ECR may disclose the personal information to third party organisations to:
1. Fulfil obligations required by statute and the Law
Access and correction of your personal information – ECR will take all reasonable steps
to ensure that your personal information is accurate, complete and up-to-date.

However, the accuracy of that information depends to a large extent on the
information you provide. If you would like to access and/or require correction of your
personal information, it is necessary that you make your request in writing for security
reasons.