DEED Privacy Policy

We only collect personal information for purposes reasonably necessary for, or directly related to, one or more of our functions or activities, or when the information is knowingly or voluntarily provided by an individual. Generally, you will know if we are collecting your personal information because we will ask you for it. For example, if you submit an online form to contact us or subscribe to receive newsletters, we will ask you to provide your name and contact details. We may also collect personal information from you through:

• Forms.
• Correspondence or interactions in person, online or over the phone.
• Website registration.
• Participation in surveys or questionnaires.
• Online application forms or bookings, but we will only collect the information contained in that application form if you submit the form to us. If you log out of the website or cancel the application before submitting the form, the information you had entered will be automatically deleted. 
• Collection of credit card or debit account details, depending on the application made, in order to provide you with our services 
• Online feedback forms.
• Entering into agreements with us.

When you access this website, some technical information is collected about your visit. For example:  

• your server address;
• your top-level domain name (for example .com, .gov, .au, .uk etc.);
• the date and time of your visit to the site;
• the pages you accessed and documents downloaded;
• the previous site you have visited; 
• the type of browser you are using; and
• what devices and operating systems you used to access the site.

If you follow a link from a DEED website and it takes you to a third-party website, DEED recommends that you read the privacy policy of that other website to understand how that third-party website deals with your information.  Please note that DEED is not responsible for any content, privacy policies, or privacy practices of any third-party websites that may be linked to from a DEED website.

We may also collect your personal information from publicly available sources, or from third- parties who have disclosed that information to us.

Examples of the types of personal information we may collect include:

• a person’s name, address and contact details;
• information about a person’s identity (e.g. date of birth, passport details, driver’s licence, birth certificates, portrait photograph);
• gender and marital status;
• concession card details;
• travel details and location information;
• cardholder data;
• bank account details;
• public interest disclosure applications;
• criminal history and working with children checks;
• employment details (including work history, referee comments and remuneration) and employee health details;
• occupation details;
• insurance details;
• educational qualifications; government identifiers (e.g. Tax File Number); 
• financial position, organisation details and credit check information; 
• call and audio recordings;
• internet site and mobile application chats; 
• social media posts; and
• content of email messages and email addresses of the sender and recipients.

Explicit collection 

DEED will provide a collection statement whenever it is collecting your personal information detailing what is being collected, and how the information is used and shared.  For example, if you submit an online form to contact us, subscribe to receive newsletters, sign up for a competition or promotion, or offer services to us, DEED will ask you to provide your name and contact details.

Providing us with the requested information is voluntary.  If you choose not to provide DEED with the requested information, we may not be able to respond to you or provide you with the services you are seeking.

We may also collect your personal information from publicly available sources, or from third parties who have shared that information with us in a manner that is consistent with the PRIS Act. 

Collection Notices

DEED will issue collection notices when collecting your data as part of our commitment to openness, transparency, and privacy-by-design. This means you will be made aware of how your personal information will be handled at or before collection, including being provided with the following information:

• purpose of collection;
• authority to collect the information;
• consequences of not providing the information; and
• rights of access or correction.

Cookie collection 

We use 'cookies' to collect statistical information about how you interact with the website (e.g. your server address, date and time of your visit, pages accessed, the addresses of the website you visited, the type browser and operating system you are using, and what devices and operating systems you used to access our site from, and whether you complete any transactions on the website). 

If you do not want cookies to be placed on your computer, you can disable them using your web browser. If you opt out of using cookies, some of the features on this website may not function fully, and your ability to browse, read and download information may be impaired. Please contact us to access our services by other methods.

Cookie collection by third parties 

Third-party cookies are sent by different organisations other than DEED (such as analytics or advertising businesses).   Third-party cookies are used on DEED’s website to enable reporting for impression assisted visits, website conversions, user demographics and user interests.   Data may also be used for targeted marketing purposes. 

We use software provided by third-party vendors, including the following:

• Google Analytics – a web analytics service that we use to collect data about how you use our site and services.
• Hotjar – is used to better understand how you interact with our website, for example: how long you are on pages, which links are used, and which pages you’re on. 
• YouTube – DEED may embed videos or insert links to videos from YouTube from time to time on our website.  As a result, when you visit a page with content embedded from or linked to YouTube, you may be presented with cookies from these websites.
• Facebook – The Facebook tracking/web pixel is a piece of code provided by Facebook that is placed on or within a website to alert Facebook when a “conversion” is complete – that is, when a party clicks on a Facebook advertisement and then connects with website(s) of the party responsible for the advertisement.
• We use a range of tools and platforms across the Department that track impressions and usage including ThingLink, Issuu, PowerBI, Smartsheet and more. 

DEED may also collect information about how you use our online services. For example, DEED uses social networking services such as Facebook, X (formerly Twitter) and LinkedIn to communicate with the public. When you communicate with DEED using these services, personal information may be collected to respond to you and the public. These social networking services will also handle your personal information for their own purposes. These services have their own privacy policies. To find out more about how these third parties handle your personal information, please review their privacy policies.

Use of your personal information for the express or implied purpose provided 

DEED uses your personal information for the purpose described in the collection statement.  DEED may also use your information for a purpose related to the purpose it was collected, if you would reasonably expect the personal information would be used for that related purpose. 

Disclosure to third parties

DEED may use or disclose your personal information for the purpose described in the collection statement.  DEED may also use or disclose your information for a purpose related to the purpose it was collected, if you would reasonably expect the personal information would be used for that related purpose, or if you consent to that use or disclosure, or if otherwise permitted under the PRIS Act.

Where information sharing is permitted, DEED will adhere to the ‘Responsible sharing principles’ established under the PRIS Act.

Your personal information may be disclosed in special situations where DEED has reason to believe that doing so is necessary to identify, contact or bring legal action against anyone damaging, injuring, or interfering (intentionally or unintentionally) with our rights or property, users, or anyone else who could be harmed by such activities.

Disclosure outside of Australia

DEED will not disclose personal information to overseas third parties unless permitted to do so under the PRIS Act, or you consent to the disclosure.

If DEED discloses de-identified information outside of Australia, we will take reasonable steps to ensure the information is handled in accordance with the IPPs.

Further, DEED will endeavour to ensure that any third party that it shares your personal information with (including those who are overseas), will deal with your information in a way that is consistent with Western Australian Privacy Laws.

Marketing 

DEED may use your personal information to notify you about an event you may wish to be involved in, or so that we may provide and market our services to you.  However, DEED will only use your information for marketing when we have collected the information directly from you, it is reasonable to expect that we would use your information for marketing purposes, we have provided you with an easy-to-use means of opting out of receiving further direct marketing from us, and you have not requested that we cease sending you direct marketing communications. 

Web analytics 

DEED uses your information collected through cookie data for statistical and system administration purposes. This can help monitor and understand usage trends, make website performance improvements, and monitor cyber security threats.  You can disable cookies through your internet browser but if you do so, some of the features on our websites may not function fully, and your ability to browse, submit applications, and download information may be impaired.  

Incidental access by our contractors 

Your information will only be accessed by DEED staff to carry out the functions of the Department or provide the related services to you. Your information may be shared with DEED’s contractors, project partners, or suppliers responsible for carrying out DEED’s functions and services. All service providers are required to comply with Australian Privacy Laws as applicable and, where appropriate, will be required to enter into privacy agreements with DEED to ensure they are bound by the PRIS Act. 

We have taken all reasonable steps to implement the appropriate security policies, rules, measures and patches to protect your personal information that we have under our control from misuse, interference and loss and from unauthorised access, modification or disclosure. Personal information is securely stored by us and by third parties on our behalf. For example, fire walls and virus protection software are in place to protect our systems and data. 

The retention and destruction of records of personal information held by the Western Australian Government is governed by the State Records Act 2000 and supporting policies and procedures. We take reasonable steps to destroy or de-identify all personal information that is no longer required to be retained.

You have a right to request access to personal information that DEED holds about you under both the FOI Act and the PRIS Act. You can also apply to have your personal information corrected if the information is inaccurate, incomplete, out of date or misleading. DEED will manage any requests for access to personal information and for correction of personal information in accordance with the terms of the FOI Act. Information about how to apply can be found on the Department of Energy and Economic Diversification - Freedom of Information webpage.

You can also contact the Department’s FOI team at foi@DEED.wa.gov.au. Discussing your request with a Freedom of Information Officer will help us give you early guidance about your request. This may include guidance about whether your request is best dealt with under the Freedom of Information Act 1992 or another arrangement.

In many instances, you can remain anonymous or use a pseudonym when interacting with DEED. However, in some instances it will be necessary for you to provide some personal information.

For example, DEED would require personal information to assess your eligibility for a grant or initiative or when confirming your identity for the release of personal information. You will be informed if you are not able to remain anonymous or use a pseudonym when dealing with us.

We will take reasonable steps to protect the de-identified information we hold from misuse and loss from unauthorised re-identification, access, modification or disclosure.  We will only re-identify data in a manner that is consistent with the IPPs. 

If you have a complaint about how your Personal Information has been handled by DEED, you should make initial contact with the Privacy Officer at DEED.  

How to make a Privacy Complaint

Complaints may be lodged via phone, email, or post: 

Address: Level 11, 1 William Street, PERTH WA 6000
Telephone: 61 8 6277 3000
Email: privacy@deed.wa.gov.au

Information to be provided by Complainants 

Complainants should be prepared to give their name and contact details for the complaint to be investigated and responded to. 

Anonymous complaints will be recorded, referred to the appropriate division, and investigated at the receiver’s discretion. 

Information that should be provided when making a privacy complaint includes:

• Name and contact details (e.g. email address, phone number and postal address).
• Details of the alleged interference with privacy including:

–What happened;

–What personal information was affected;

–Who did it (if known);

–When it happened (if known);

–How and when you discovered the alleged interference with your privacy;

–What outcome you’re seeking as a result of making the privacy complaint;

–Any additional details or relevant supporting documents.

Confidentiality and Privacy

Any Personal Information collected during the Complaints process shall only be used to help investigate and close the complaint for which the Personal Information has been collected. 

All Personal Information must be managed in accordance with the DEED Privacy Policy.

Handling of your complaint

All privacy complaints will be acknowledged. The acknowledgment will provide the expected timeframe for dealing with the complaint.

If the complaint is not resolved by DEED, you have the right to escalate your complaint to the Information Commissioner. 

DEED maintains information breach response procedures in relation to information breaches. From 1 January 2027, where an information breach is likely to result in serious harm, we will notify the WA Information Commissioner and affected individuals in accordance with the PRIS Act. Until that date, we continue to meet any other applicable notification duties. You can see DEED’s information breach handling policy here.

Any privacy concerns or complaints can be lodged by contacting us at the details below:

Privacy Officer
Level 11, 1 William Street
PERTH  WA 6000
08 9262 1700
privacy@DEED.wa.gov.au