PRIVACY POLICY

Riverview Church Inc, Riverview Community Services Inc

(Collectively referred to as Riverview, we, our, us)

Riverview recognises the importance of protecting individuals' privacy and rights regarding personal information. This Policy details how personal information is collected and managed.  Riverview is committed to rights established under the Privacy Act 1988 (Cth) (Act) and will comply with all of the Act's requirements regarding the collection, management, and disclosure of personal information.

PERSONAL INFORMATION COLLECTED AND RETAINED

Riverview may collect the following types of personal information:

  • contact information

  • date and place of birth

  • attendees’ details

  • employment details, including tax file numbers

  • health information

  • volunteer details

  • expertise and interests

  • family circumstances

  • financial information provided to Riverview, including credit card and debit card details

  • sensitive information (such as health, family and personal circumstances, criminal records check) that is provided, including but not limited to information shared during pastoral visits, prayer and when completing forms

  • personal and family Income levels, Centrelink card number and other information that are necessary to the delivery of community relief services

  • details of events or camps, together with any additional information necessary to run events or camps

  • any direct or indirect personal information provided through the use of its websites or online presence

  • any other information provided.

Riverview collects health and sensitive information when its pastoral and support teams provide pastoral care or community services support. Riverview will only collect the sensitive information necessary to provide relevant care and services.

Riverview also collects non-personal information. For example, anonymous online surveys with the congregation, volunteers or clients may be conducted periodically.

 

COLLECTION OF PERSONAL INFORMATION

Riverview will always collect personal information directly from individuals unless it is not possible or practical to do so. Collection of information from individuals may be done in the following ways:

  • forms (completed paper and electronic forms), including but not limited to event and course registrations

  • financial information collected via giving envelopes and electronic means, including but not limited to website, phone call and post

  • on sign up to use Planning Center Online via the Church Center mobile app

  • subscribing to Riverview communications via Mailchimp

  • SMS communications

  • access and use of website to register, give online or inquire

  • posting comments on social media, including but not limited to X, Instagram, Vimeo, YouTube and Facebook

  • access to services, events and programs

  • email or telephone

  • website

  • voluntary provision of details to mailing lists;

  • conversations or prayer sessions, in person or on the telephone, between individuals and staff members and volunteers

  • interviews, meetings and discussions, formal and informal, with staff members and volunteers

  • attendance at weekend gatherings, events, camps, courses and other programs.

    Riverview may also collect personal information from third parties, including:

  • Australian Federal Police regarding police checks that are required for volunteering or working with us in particular areas;

  • Department of Child Protection regarding Working with Children Checks that are required for volunteering volunteer or work with us in particular areas; and

  • any other agencies and other government entities as and when required.

If it is unclear whether an individual has agreed to provide Riverview with their personal information, reasonable efforts will be made to contact the person and ensure that they are informed about the collection and the purposes for which it is gathered.

Riverview may also collect personal information about someone else from individuals; however, this information can only be disclosed as authorised.  Riverview will do its best to ensure that the individual knows and agrees to the details outlined in this privacy policy. This involves notifying them that their personal data is gathered, explaining the purpose behind collecting the data, specifying who will have access to it, outlining the individual's entitlement to access their data, sharing Riverview’s identity, and providing contact information. If requested, disclosure of information must assist with any individual's requests to access or update the personal information collected from them.

In some cases, Riverview collects personal information through cookies. When individuals browse Riverview’s site, their computer may receive a "cookie" (a small summary file with a unique ID number). This identifies the device and welcomes the user each time they visit the website without the need for the user to register. Riverview uses cookies to analyse traffic patterns, track visited areas and measure transaction patterns. This information is used to research the users' patterns to improve their online experience. The cookies don't gather personal information. Individuals who don't wish to receive any cookies can set browser settings to decline them. IP addresses are logged for trend analysis, website administration, user movement tracking, and the collection of general demographic data.

Riverview also receives unsolicited personal information where it did not request the information. Unsolicited personal information includes misdirected mail, correspondence sent by the public, employment and volunteer applications sent on an individual's own initiative and not in response to advertised vacancies and promotional flyers containing personal information and comments on social media. Riverview reserves the right to assess all unsolicited personal information received and to de-identify or destroy it within a reasonable period, according to the Australian Privacy Principle 4.

WHERE PERSONAL INFORMATION CANNOT BE COLLECTED

Individuals who opt not to provide Riverview with the requested personal information may lead to some or all of the following:

  • Riverview may not be able to provide the requested services, either to the same standard or at all;

  • Riverview may not be able to provide information about services that a person may want (for example, events, weekend gatherings, guest speakers, upcoming events);

  • Riverview may be unable to customise the web content according to an individual’s preferences, making their experience less enjoyable.

There are times when an individual may exercise their right not to identify themselves or choose to use a pseudonym when contacting Riverview. For example, to request prayer for an individual or someone associated with the individual, the right to anonymity or to use a pseudonym will be decided on a case-by-case basis under Australian Privacy Principle 2.

COLLECTING, STORING, USING AND SHARING PERSONAL INFORMATION

Riverview collects personal information so that invitations for gatherings and events can be sent to people who identify as a part of the Riverview community. 

Riverview gathers personal information to assist clients within its community services area. Personal information is also collected during communication regarding the impact and field trips organised to developing countries as part of its Missions areas.

Riverview collects personal information on minors for our kids and youth programs. All information shall be collected with parental consent from the minor’s parents or guardian.

Personal information is collected, stored, used and shared for the following purposes:

  • to offer services and communications;

  • to answer enquiries, provide information or advice about existing and new services, events and programs, giving or other donations;

  • to assist in the coordination of volunteering, community fundraising and other programs;

  • to process giving, donations, event registrations and other payments and to provide the relevant receipts;

  • to communicate about how giving and donations are used;

  • to provide access to Planning Center Online via the Church Center mobile app;

  • to provide access to Riverview’s websites;

  • to evaluate the performance and improve the operation of its websites;

  • to provide opportunities to gather opinions through surveys relating to Riverview community activities, including weekend gatherings;

  • for the administrative, planning and guest service improvements of Riverview, its contractors or service providers;

  • to keep contact information relevant;

  • to report to the government and other funding providers about how the funds are used;

  • to process and respond to any complaints;

  • to observe all applicable laws, rules, and regulations, as well as any valid determinations, decisions, or directives from regulatory bodies, or cooperate with governmental authorities at the national or local levels as required.

Riverview may use personal information for other specific purposes for which it was requested, and which are advised prior to collection.

Riverview will not disclose, share, trade, or lease personal information except as explicitly stated in this Privacy Policy.

Riverview may access, aggregate and use non-personally identifiable data that it collects. This data will in no way identify individuals.  It may use this data to:

  • help it to understand better its congregation's responses to its weekend gatherings (including the number of attendees);

  • assist it in better understanding how its community services clients use its programs;

  • provide people with further information and updates on its weekend gatherings, events and programs;

  • improve its weekend gatherings, events and programs.

DISCLOSURE OF PERSONAL INFORMATION

Riverview may disclose personal information to:

  • employees, volunteers (to a certain extent), and service providers in order to operate its website, respond to requests, and provide services. This may include web hosting providers, IT system administrators, payment processors, electronic network administrators, and professionals such as accountants, solicitors, and consultants, or

  • any organisation for any authorised purpose with expressed consent.

     

DISCLOSURE OF PERSONAL INFORMATION TO ANYONE OUTSIDE AUSTRALIA

Riverview may disclose personal information to service providers located overseas for some of the abovementioned purposes. Measures are taken to ensure that the overseas recipients of personal information adhere to the privacy obligations associated with data. Personal information may be disclosed to its data hosting service providers outside Australia, including America, New Zealand, the United Kingdom and the European Union. Its data hosting service providers may store data in several other countries.

DIRECT MARKETING MATERIALS

Riverview may send information about weekend gatherings and events that may be of interest. Details can be transmitted through different channels, such as postal mail, SMS, and email, in compliance with existing marketing regulations (e.g., the Spam Act 2003 (Cth)). Riverview will use preferred methods of communication where possible. In addition, people may opt out of receiving information at any time by using the opt-out function provided in the method of communication used or by contacting the church directly (see the details below). Riverview will ensure that their contact is removed from its mailing list. Riverview does not share personal information with other organisations for marketing purposes.

ACCESSING AND CORRECTING PERSONAL INFORMATION

People may access the personal information Riverview holds by updating details on Planning Center Online (PCO). PCO is Riverview’s web-based church management software. It is the individual’s responsibility to keep their PCO password secure. If any individual suspect or notices any misuse of their password, they must report this to Riverview as soon as possible and change their password immediately within PCO or via the Forgot username or password process on PCO.

Alternatively, individuals may request access to the personal information Riverview holds by contacting the Church directly (by telephone, at the Information Hub at weekend gatherings, or at the Church reception during the week) or to the contact provided below. Where Riverview stores personal information that individuals have the right to access, every effort will be made to provide suitable means of access, such as by mail or email.  There are no charges applicable for providing information or correcting personal information.

There may be situations where Riverview cannot grant access to stored personal information. For instance, an access request may be refused if it intrudes on someone else's privacy or leads to a breach of confidentiality. In this situation, Riverview will provide the requester with a written refusal stating the reasons. Individuals may request to amend their personal information if there is a belief that the information held is incorrect, incomplete or inaccurate. If Riverview does not agree that there are reasons for the amendment, a note will be included to a person’s personal information registering their disagreement. 

Personal information is retained as long as necessary to provide information and services. However, Riverview may also be required to keep some personal information for specified periods of time pursuant to specific laws relating to companies, not-for-profit organisations, and financial reporting legislation.

 

PROCESS FOR COMPLAINING ABOUT A BREACH OF PRIVACY

Where an individual believes their privacy is violated, they may email their complaint to [email protected] and include a written description of what happened. Once Riverview receives all the information, an investigation will be conducted, and necessary steps will be taken. Riverview will endeavour to respond to all complaints within 28 days.  Any dissatisfaction with Riverview’s response to a complaint can be directed to the Australian Information Commissioner (www.oaic.gov.au).

STORAGE AND SECURITY

Riverview will take reasonable steps to ascertain that personal information is protected from abuse, loss, unauthorised access, modification or disclosure. Personal information may be stored in either electronic or hard copy form. Personal information is stored on secure servers with SSL Certificates issued by leading certificate authorities such as GoDaddy and Let's Encrypt. All information transferred between Riverview and individuals is encrypted. The secure servers are located in countries including but not limited to Australia, America and the European Union. It also utilises an email filtering host using third-party provider Microsoft, which is stored on servers in America and the European Economic Area.

CREDIT CARD INFORMATION

Riverview does not retain credit card information, and its employees have no access to it. All credit card information is encrypted and stored securely by the respective payment gateways (Tithe.ly or Stripe) to enable the processing of credit cards on a recurring basis automatically. Individuals should review Stripe's or Tithe.ly's Privacy Policy to ensure that they are satisfied with it. Only authorised staff members can access credit card and debit card details, and they ensure that these details are de-identified upon processing.

HARDCOPIES

Hardcopy information is stored securely in Riverview offices to prevent entry by unauthorised persons.

DIGITAL INFORMATION

Personal information is collected and stored in the church management system (PCO and Elvanto) are maintained by cloud-hosting service providers. All personal information that is not active is archived with a third-party provider of secure archiving services. Reasonable steps are taken to ensure that the third-party provider maintains the security of the information. Personal information remains on the church management system (PCO and Elvanto) until Riverview is advised that an individual would like it removed or if they are destroyed, deleted or de-identified according to privacy law principles.

SENSITIVE INFORMATION

Riverview takes particular care when dealing with health and sensitive personal information, collecting only the necessary information to provide the services that individuals access. Reasonable steps are taken to protect personal information, including ensuring that access to this information is restricted to specific staff members. Measures are also implemented to destroy or de-identify personal information when it is no longer necessary for the purpose for which it was collected.

WEBSITE USE

Since Riverview’s website is connected to the internet, which is inherently insecure, it cannot assure the security of the information sent to it online. There is no guarantee that the information transmitted by individuals will remain secure during internet transmission. Therefore, any personal or proprietary data conveyed to Riverview online is at the individual’s own risk. In the event of discovering or being informed of a breach in security resulting in unauthorised access, use, disclosure, copying, alteration, or disposal of personal information, Riverview will promptly notify individuals at the first reasonable opportunity.

LINKS

Riverview’s website may link to third-party websites. Riverview does not make any representations or warranties regarding the privacy practices of these third-party websites and does not assume responsibility for their privacy policies or content. It is the obligation of third-party websites to provide information regarding their privacy practices.

CONTACT

Enquiries pertaining to this privacy policy, including concerns or complaints about the handling of privacy, or suspected breaches of privacy can be directed to provided contact details below. Feedback is important to Riverview. Riverview will handle requests or complaints with the strictest confidentiality. A designated representative will contact an individual lodging a complaint or concern within a reasonable timeframe after the receipt of a written complaint and any requested information to address concerns and present potential resolutions. The objective is to ensure that complaints are addressed promptly and suitably.

For all privacy concerns, please contact the leadership team at:

Riverview Church Post: PO Box 524 Victoria Park WA 6979 Tel: (08) 9416 0000
Email: [email protected]


CHANGES TO PRIVACY POLICY

This policy was last updated on 17 February 2026. Riverview may revise this policy periodically or when necessary.