Privacy Policy


The Organisation (Community Culture Ltd and its subsidiaries; Great Community Transport t/a Active Care Network and Peppercorn Services Inc) respects your privacy and is committed to protecting your personal information.


We comply with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), the Health Records and Information Privacy Act 2002 (NSW), the Notifiable Data Breaches (NDB) Scheme, and any additional requirements set by our funding partners, including the Department of Communities and Justice (DCJ NSW), the Department of Social Services (DSS), the Aged Care Quality and Safety Commission, and the NDIS Quality and Safeguards Commission.


This statement explains how we collect, use, store, and disclose your information when you visit our website or access our programs.


Information We Collect


We collect personal information when you:

  • Contact us through our website, phone, or email;
  • Make a booking, referral, or service enquiry;
  • Participate in our programs or surveys;
  • Apply for a role, volunteer, or training opportunity; or
  • Subscribe to newsletters or updates.


This may include your name, address, phone number, email, date of birth, gender, and information related to your service needs.


In some cases, we also collect sensitive information, such as cultural background, language, disability, or health information — but only where it’s necessary for us to deliver a service or meet funding obligations.


We also collect de-identified data for government reporting through:

  • the Data Exchange (DEX) for Department of Social Services - funded programs; and
  • Department of Communities and Justice Client and Service Delivery Reporting systems for NSW-funded programs.


All data provided to funders is de-identified and aggregated, meaning it cannot be used to identify individuals.


Cookies and Website Analytics


Our website uses cookies and similar technologies to enhance user experience and track how visitors use the site.
Cookies help us improve site performance, understand what content is most useful, and tailor information to our audience.


Cookies may collect:

  • Your IP address, browser type, and operating system;
  • The pages you visit and how long you stay; and
  • The referring website or search terms used.


You can disable cookies through your browser settings. However, doing so may limit functionality on some pages.

We also use Google Analytics and other third-party analytics services to collect aggregated, anonymous information about site usage. No personal data is shared with these providers.


How We Use Your Information


We use personal information to:

  • Provide services, manage bookings, and process referrals;
  • Comply with contractual obligations under DCJ, DSS, Aged Care, or NDIS funding agreements;
  • Evaluate program effectiveness through de-identified data reporting;
  • Communicate with clients, carers, and stakeholders; and
  • Promote service improvements and community initiatives.


We only use your information for the purpose for which it was collected, unless consent is provided or disclosure is required or authorised by law.


How We Protect Your Information


We take reasonable steps to safeguard personal information from misuse, interference, loss, unauthorised access, or disclosure.

Information is stored in secure systems, both electronic and physical, and accessible only to authorised personnel.

Where we use cloud-based platforms, we ensure they meet Australian data protection and privacy standards.

If information is stored or processed by third-party vendors, these providers are bound by confidentiality and privacy clauses consistent with the Australian Privacy Principles.


Sharing Information


We may share information with:

  • Government agencies such as DCJ, DSS, ACQSC, or the NDIS Commission for compliance and reporting;
  • Partner organisations involved in service delivery, where consent has been provided;
  • Law enforcement or emergency services where legally required or necessary to prevent harm; and
  • IT and support service providers who maintain our systems and infrastructure.


When we share data with funding bodies, it is aggregated and de-identified wherever possible.


Data Breaches


If a data breach occurs that is likely to result in serious harm, we will promptly notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches Scheme.

We will take immediate steps to contain the breach, assess risks, and implement corrective measures.


Access, Correction, and Complaints


You have the right to access and request correction of your personal information at any time.
If you believe your privacy has been breached, please contact us using the details below.


If you are not satisfied with our response, you may contact:


Contact Us


Privacy Officer – Community Culture Ltd
320 George Street, WINDSOR NSW 2756
Phone: 1300 646 444
Email: privacy@communityculture.org.au