PRIVACY POLICY
LEGACY AUSTRALIA
PRIVACY POLICY
1. BACKGROUND
1.1. This Privacy Policy summarises how Legacy Australia Incorporated (ABN 59 203 621 448), together with its member clubs and associated member (referred to as Legacy Australia, we, us or our), collects, uses and handles your personal information in the course of carrying out its business activities. A list of Legacy Clubs and associated member is attached as Appendix A.
1.2. Legacy Australia recognises the importance of respecting your privacy when collecting, using, disclosing and managing your personal information under the Privacy Act 1988 (Cth) (Privacy Act).
1.3. In this Privacy Policy, personal information has the meaning given to it in the Privacy Act. Generally, it includes information or an opinion about an identified individual or an individual who is reasonably identifiable, whether the information is true or not, or whether the information is recorded in a material form or not. This may include your name, address, telephone number or email address.
1.4. This Privacy Policy applies to personal information collected by Legacy Australia. Our website may contain links to other sites.
1.5. This Privacy Policy does not apply to the data handling practices of third party sites. Accordingly, we cannot make any representations or warranties as to the privacy practices of any site operated by a third party and are not responsible for the privacy policies or practices of such sites. You recommend that you review the privacy policies on those websites if you visit them.
1.6. Personal information managed by other member Legacy clubs in Australia may be governed by separate privacy policies. We encourage you to check the privacy policies of your local Legacy club for information about how they collect, manage and use personal information. Click here for a list of other Legacy clubs or ask our Privacy Officer for a copy (see contact details below).
2. TYPES OF INFORMATION COLLECTED BY LEGACY AUSTRALIA
2.1. Where relevant to our current business operations, Legacy Australia may collect the following types of personal information:
a) telephone number (both home and work);
b) full name (first, middle and last names);
c) e-mail address;
d) postal address;
e) date of birth;
f) your membership history and details;
g) if you are an employee, volunteer or a job applicant, your employment details (including your job title, training, skills and the information provided in your resumé and by your referees, former employers and educational institutions);
h) financial details, including insurance policies (if applicable);
i) if you apply to Legacy Australia for financial support, details relating to your financial situation and your health and family;
j) your opinions or opinions about you (if applicable);
k) details relating to the goods or services Legacy Australia has supplied to you and the events and activities in which you have participated;
l) details relating to donations or bequests that you have made or would like to make;
m) payment or billing information (including bank account details, credit card details, billing address and invoice details);
n) user names and passwords for access to the members-only area of the Legacy Australia website; and
o) health information and other sensitive information, which may include:
- health records and health information (including, but not limited to, physical disability or mental health) which may assist in the processing of claims with the Department of Veterans’ Affairs (DVA), Veterans’ Review Board (VRB) or for seeking financial assistance through Legacy Australia; and
- information about criminal records. Legacy Australia promotes thorough screening of all Legacy representatives. This may include collecting, storing and disclosing of criminal records for Criminal History Checks, Working With Children Checks or Working With Vulnerable People Checks.
2.2. If practicable, you may be given the opportunity to engage with Legacy Australia on an anonymous basis or using a pseudonym.
Cookies and Google Analytics
2.3. Legacy Australia may collect personal information through the use of “cookies”. When you access our website, Legacy Australia may send a small electronic file containing a unique ID number to your computer – a cookie. The cookies used by Legacy Australia do not identify you and only identify your computer. This enables Legacy Australia to keep track of products or services you view and to measure traffic patterns in order to determine which areas of our website have been visited and to measure transaction patterns in the aggregate. If you do not wish your computer to receive cookies, you can set your browser so that your computer does not accept them.
2.4. Data is collected for use in Google Analytics software to help improve website performance. Data is also used for remarketing and may be collected by Google Analytics Demographics, and Interest Reporting. The Legacy Australia website may make use of pixel tracking, which gathers data on visitor behaviour. These feature use first party and third party cookies to inform and optimise content based on past visits to our website. Site visitors can opt out of customised Google Display Network services and Google Analytics for Display Advertising using Ad Settings. A Google Analytics Opt-out Browser Add-on is also available to prevent tracking in Google Analytics if desired.
3. HOW LEGACY AUSTRALIA COLLECTS AND HOLDS PERSONAL INFORMATION
3.1. Legacy Australia will collect your personal information directly from you where it is practicable to do so.
3.2. Legacy Australia may collect your personal information in a number of ways, including:
a) through application forms;
b) by email or other written mechanisms;
c) over a telephone call;
d) in person;
e) through transactions (e.g. donations);
f) surveys and questionnaires (if applicable);
g) through our website, including online donation portal;
h) by technology that is used to support communications between us;
i) through publically available sources (which may include social media sites, telephone directories and the internet); and
j) from information providers such as direct marketing database providers and government entities.
3.3. We may also collect personal information about you from your authorised representative (if any) or from our related entities and other Legacy clubs.
3.4. In some cases, if you do not provide Legacy Australia with your personal information when requested, Legacy Australia may not be able to respond to your request or provide you with the support or services that you are requesting.
3.5. You may also provide us with personal information about another individual. In such cases, you should not share personal information with us unless you have obtained all necessary consents or authorisations required to share that individual’s personal information with us.
3.6. Where Legacy Australia collects information from third party information providers, it will take reasonable steps to ensure that those marketing providers are compliant with applicable laws.
4. PURPOSES FOR WHICH LEGACY AUSTRALIA COLLECTS, HOLDS, USES, AND DISCLOSES PERSONAL INFORMATION
4.1. Legacy Australia will collect personal information if it is reasonably necessary for one or more of its business functions or activities.
4.2. The purposes for which Legacy Australia collects, holds, uses or discloses personal information include:
a) verifying your identity;
b) assessing your eligibility for any benefits, products, or services provided by us or our representatives;
c) providing products and services to you;
d) responding to your requests for information;
e) answering enquiries and providing information or advice about existing and new products or services;
f) providing you with access to our website (including protected areas);
g) assessing the performance of our website and improving its operation;
h) conducting business processing functions;
i) administrative, marketing (including direct marketing), planning, product development, service development, quality control, and research purposes;
j) conducting and publishing statistical reporting regarding membership of Legacy clubs;
k) facilitating or running group projects or programs with other organisations or government departments;
l) maintaining employee records;
m) coordinating and managing individuals who wish to volunteer with Legacy Australia;
n) processing and managing donations or bequests left to Legacy Australia, including providing reimbursements (if any) and tax receipts;
o) reviewing applications for financial support and, where applicable, providing financial support;
p) stakeholder management;
q) updating our records and keeping your contact details up to date;
r) processing and responding to any complaint made by you or by others;
s) complying with any law, rule, regulation, lawful and binding determination, decision or direction of a regulator, court, or tribunal; and
t) co-operating with any government authority of any country.
4.3. Legacy Australia may also disclose or use personal information if you consent to such use or disclosure, or if Legacy Australia is so required or authorised to use or disclose your personal information under law.
5. Disclosure OF PERSONAL INFORMATION
5.1. Personal information collected by Legacy Australia may be disclosed to related entities or other Legacy clubs for any of the purposes set out in paragraph 4 above. Legacy Australia may also disclose your personal information for any of the purposes set out in paragraph 4 above to:
a) our employees, volunteers, and contractors;
b) our related bodies corporate;
c) other Legacy clubs and associated members;
d) our affiliates;
e) our contractors or service providers;
f) charities or similar organisations;
g) any organisation with your express consent;
h) government agencies (including the Department of Defence, and Department of Veterans’ Affairs) or other regulators; and
i) any court or tribunal.
5.2. We may also combine or share any personal information that we collect from you with other information we hold about you, or which is collected by any of our related bodies corporate or other Legacy clubs (within Australia).
5.3. If we publish any statistical reporting, we will take reasonable steps to ensure that any personal information that we use and disclose as part of that reporting is deidentified and aggregated, such that no one individual is identifiable within the dataset.
6. DIRECT MARKETING AND OTHER COMMUNICATIONS
6.1. Subject to compliance with applicable laws, Legacy Australia may use or disclose personal information about you for the purpose of direct marketing. Our communications may include:
a) advising you of new goods or services being offered by Legacy Australia;
b) contacting you about making further charitable donations;
c) providing information about future opportunities to assist Legacy Australia with its work; and
d) telling you about the activities of Legacy Australia.
6.2. You may choose to receive regular communications from Legacy Australia as well as information about future opportunities to assist Legacy Australia with its work.
6.3. You can opt out of receiving direct marketing communications from Legacy Australia by contacting our Privacy Officer (please see contact details below) in writing or, if applicable, by using the unsubscribe link in an email or by accessing Legacy Australia’s website and unsubscribing.
7. ACCESS TO PERSONAL INFORMATION
7.1. If Legacy Australia holds personal information about you, you may request access to that information by putting the request in writing and sending it to our Privacy Officer (at the contact details below). Legacy Australia will respond to any request within a reasonable period, and a charge may apply to cover our administrative and other reasonable costs in providing access to the personal information. We will not charge you for simply making the request.
7.2. There are certain circumstances in which Legacy Australia may refuse to grant you access to the personal information (e.g. if it would result in a breach of confidentiality). In such situations Legacy Australia will give you written notice that sets out:
a) the reasons for the refusal; and
b) the mechanisms available to you to make a complaint.
8. CORRECTION OF PERSONAL INFORMATION
8.1. If your personal details change (for example, you change your address or telephone number), please contact us so that we can update our records. If Legacy Australia holds personal information that is inaccurate, out-of date, incomplete, irrelevant or misleading, you can ask us to correct the information. We will not charge you for making any corrections to your personal information.
8.2. If Legacy Australia holds personal information and you make a request in writing addressed to our Privacy Officer to correct the information, Legacy Australia will take reasonable steps to correct the information where required. Legacy Australia will respond to any request within a reasonable period.
8.3. There are certain circumstances in which Legacy Australia may refuse to correct the personal information. In such situations Legacy Australia will add a note to your personal information stating that you disagree with it.
9. CROSS BORDER DISCLOSURE
9.1. Legacy Australia may use data hosting facilities or enter into contractual arrangements with overseas third-party service providers which involve the disclosure of your personal information to overseas recipients.
10. SECURITY OF PERSONAL INFORMATION
10.1. Legacy Australia takes reasonable steps to help ensure the security of your personal information, including by using technical and organisational measures to:
a) make sure that personal information is accurate, complete and up to date;
b) protect your personal information from misuse, loss, unauthorised access, modification or disclosure; and
c) destroy or permanently de-identify personal information if it is no longer needed for any authorised purpose (e.g. destroying credit card details of donors following a successful electronic transfer (including providing a donation receipt or tax receipt) within a reasonably practicable period).
10.2. Legacy Australia does not store donors’ credit card details provided through our online portal. Instead, donors’ credit card details are processed and stored as encrypted files by our electronic payment service provide and only used to process your donation by the provider of our electronic payment service.
10.3. However, we may process credit card information manually if we receive such donor information via email, fax or phone. In such instances, donors’ credit card information will be subject to the provisions of this Privacy Policy.
10.4. Legacy Australia encourages users of our website and other individuals who interact with us to exercise normal safety precautions when providing personal information. Legacy Australia has taken reasonable steps to ensure the security of your personal information. However, we cannot guarantee protection from a targeted criminal attack by individuals and/or group(s).
11.COMPLAINTS
11.1. If you have any questions about this Privacy Policy, any concerns or complaints regarding the treatment of your personal information (including how we have handled any request for access or correction), please use the contact link on our website (available here) or contact our Privacy Officer using the contact details set out below. If you wish to make a complaint, Legacy Australia requests that you make the complaint in writing so that the details of the complaint are clear and can be investigated properly.
11.2. Legacy Australia will treat your requests or complaints confidentially. Our representative will investigate your request or complaint and will contact you within a reasonable time after receipt of your request or complaint to discuss your concerns and outline options regarding how they may be resolved. Legacy Australia will aim to ensure that your request or complaint is resolved in timely and appropriate manner.
11.3. Please contact our Privacy Officer at:
Privacy Officer, Legacy Australia
Post: GPO Box 4020, SYDNEY, NSW, 2001
Tel: (02) 8333 0600
Email: [email protected]
11.4. You may also approach an independent advisor or the Office of Australian Information Commissioner (OAIC) for guidance on alternative courses of action which may be available.
12. CHANGES TO THIS PRIVACY POLICY
12.1. We may change this Privacy Policy from time to time.
12.2. Any updated versions of this Privacy Policy will be posted on our website. Please review it regularly.
12.3. Any changes to this Privacy Policy will take effect on the date the updated Privacy Policy is posted on our website.
12.4. This Privacy Policy was last updated in June 2026.
Policy Number POL-05 Version June 2026 Drafted By DLA Piper Approved by LA Inc. Board 4 June 2026
Responsible Person Chair Scheduled review date June 2028
APPENDIX A.
THE LEGACY CLUB OF ALBURY
ARARAT LEGACY CLUB
THE LEGACY CLUB OF BALLARAT
BENDIGO LEGACY CLUB
THE LEGACY CLUB OF BRISBANE
BUNDABERG LEGACY
THE LEGACY CLUB OF CANBERRA
CENTRAL COAST (NSW) LEGACY CLUB
COFFS COAST LEGACY
COLAC LEGACY CLUB
FAR NORTH QUEENSLAND LEGACY CLUB
GEELONG LEGACY CLUB
GOLD COAST LEGACY CLUB
THE LEGACY CLUB OF GOULBURN
GRAFTON LEGACY
HAMILTON & DISTRICT LEGACY CLUB
HOBART LEGACY
HUNTER LEGACY
LEGACY CLUB OF INVERELL
LEGACY CLUB OF IPSWICH
LAUNCESTON LEGACY
LONDON LEGACY
MACKAY LEGACY
LEGACY MELBOURNE
MILDURA LEGACY CLUB
MORNINGTON PENINSULA LEGACY CLUB
NORTHERN QUEENSLAND LEGACY
LEGACY CLUB OF THE NORTHERN TERRITORY
CENTRAL WEST (NSW) LEGACY
PORT MACQUARIE HASTINGS LEGACY CLUB
LEGACY CLUB OF SOUTH AUSTRALIA & BROKEN HILL
TAREE LEGACY CLUB INCORPORATED
TOOWOOMBA LEGACY INCORPORATED
LEGACY CLUB OF WAGGA WAGGA INC
WARRNAMBOOL LEGACY CLUB INC
THE LEGACY CLUB OF WESTERN AUSTRALIA
THE LEGACY CLUB OF WOLLONGONG AND SOUTH COAST LEGACY CLUB SERVICES
LEGACY FOUNDATION (NSW)
LEGACY FOUNDATION OF VICTORIA
LEGACY FOUNDATION OF AUSTRALIA
