Privacy Policy
The Alternative Board (TAB) is committed to protecting the privacy of your personal information. This Privacy Policy explains how we gather and use the information from this website. Amendments to this Privacy Policy may take place at any time and will always be posted on this website. Your continued use of this website constitutes your acceptance of this Privacy Policy.
Information Collected
As you navigate within this website, we will be collecting personal information by asking you to tell us something about yourself (such as your name, address or e-mail address) or by logging in using your username and password. This information is used to enhance your website experience or to contact parties interested in receiving more information about us. Your personal information will not be sold to third parties for any purpose.
At times, we may use remarketing and/or similar audiences to advertise to people who have previously visited our website. We use third party vendors (including Google) to show our targeted advertisements on websites across the Internet. These third party vendors may use cookies to produce advertisements based on your past website visits.
You may opt out of Google’s use of cookies at any time by visiting Google’s Ads Settings. You may also opt out of a third party vendor’s use of cookies by visiting the Network Advertising Initiative opt-out page.
All individuals who are the subject of personal data held by The Alternative Board Australia are entitled to:
- Ask what information the company holds about them and why.
- Ask how to gain access to it.
- Be informed how to keep it up to date.
- Be informed how the company is meeting its data protection obligations.
If an individual contacts the company requesting this information, this is called a subject access request.
Subject access requests from individuals should be made by email, addressed to the data controller at claire@thealternativeboard.com.au. The data controller can supply a standard request form, although individuals do not have to use this.
Individuals may be charged for the cost of providing this information. The data controller will aim to provide the relevant data within 14 days.
The data controller will always verify the identity of anyone making a subject access request before handing over any information.
Online Forums
We may provide chat rooms, forums and/or message boards to TAB Facilitators and TAB Members from time to time. Please remember any information disclosed in these forums becomes public and exercise caution with respect to your personal information.
Outside Links
This website may contain links to other websites. We are not responsible for the privacy practices or the content of such websites. If you want to know the privacy policies of the other websites, please refer to the company or organisation sponsoring the website.
Contact Us
If you have any questions about this Privacy Policy or this website, you may contact the data controller by emailing claire@thealternativeboard.com.au.
Scope and Use of Information Collected
The Alternative Board Australia only collects and retains the minimum amount of personal information necessary to fulfil legitimate business purposes.
- Personal information will not be collected or stored unless it is directly relevant to our services or required by law.
- Data retention periods are defined based on operational needs and legal obligations.
- Personal information that is no longer required will be securely destroyed or permanently de-identified in line with industry standards.
Where personal information may be disclosed to overseas recipients (such as cloud-based service providers or international franchise partners):
- The Alternative Board Australia will take reasonable steps to ensure that the overseas recipient provides a level of privacy protection substantially similar to that required under the Australian Privacy Principles.
Personal data is encrypted both in transit and at rest using industry-standard encryption protocols
We only engage cloud service providers that meet recognised international security and privacy certification and where available 2FA is used for all systems where personal data is stored.
Data Breach Response Statement
The Alternative Board Australia is committed to safeguarding personal information and ensuring transparency in the unlikely event of a data breach. While we are generally exempt from the mandatory Notifiable Data Breaches (NDB) scheme under the Privacy Act 1988 due to our size, we voluntarily uphold high privacy standards and have a documented Data Breach Response Plan.
If a data breach occurs that is likely to result in serious harm to individuals, we will:
Promptly contain the breach to prevent further unauthorised access or disclosure
Conduct a thorough assessment within 30 days to determine the nature and extent of the breach
Notify affected individuals as soon as practicable, providing:
A clear description of the breach
The type of information involved
Recommended steps individuals can take to protect themselves
Voluntarily notify the Office of the Australian Information Commissioner (OAIC), even though notification is not legally required for small businesses
Implement additional security measures and staff training to prevent recurrence
Our commitment to open communication means that, even for breaches not likely to cause serious harm, we may still inform affected individuals if we believe it is in their best interests.