NRM Regions Queensland Privacy Policy
NRMRQ’s Privacy Policy was last reviewed in February 2026 and is due for its next review in February 2028.
1. STATEMENT OF PURPOSE
This policy sets out how NRMRQ handles personal information collected from individuals, relevant to our organisation. We respect the privacy of your personal information and because your information is important to us, we will always be honest and transparent about how we handle it. We collect, hold, use and disclose personal information only to carry out our functions and activities.
2. POLICY
When collecting and handling your personal information, NRMRQ complies with the Australian Privacy Principles (APPs). We will update this privacy policy when our information handling practices change. Updates will be publicised on our website and through our email lists.
3. ANONYMITY
Where possible, we will allow you to interact with us anonymously or using a pseudonym. For example, if you contact us with a general question, we will not ask for your name unless we need it to adequately handle your question.
However, for most of our functions and activities we usually need your name and contact information and enough information about the particular matter to enable us to efficiently handle your inquiry.
4. PROCEDURE
4.1 Collection of personal information
NRMRQ collects personal information and contacts individuals for the purposes of providing email alerts and updates, sending invitation to events, to complete surveys, receive e-newsletters, provide articles and publications, or for other marketing purposes. Personal information is collected to provide you with the services you have asked for and to understand how we can meet your needs. At all times we try to only collect the information we need for the particular function or activity we are carrying out.
NRMRQ collects personal information such as name, address, occupation and contact details. This includes technical identifiers (like IP addresses or device IDs) where they can be linked to you. We may also request financial details to facilitate project delivery. If we receive any unsolicited personal information, it is destroyed as soon as reasonably possible.
If we collect sensitive information—such as health or Indigenous status—we will only do so with your explicit consent. We distinguish this from general personal information to ensure it receives a higher level of protection in accordance with the APPs.
When you subscribe to our newsletter, we collect your email address (and name, if provided) for the purpose of sending you updates and information about NRMRQ’s work. You must consent to receive these emails. Each email will include a functional unsubscribe link so you can opt out at any time. We may use third-party email providers, including those hosted overseas, to deliver our newsletters in accordance with APPs.
NRMRQ also collects personal information to respond to ‘Contact Us’ requests for further information initiated by you. We may also collect contact details and some other personal information if you are on our committees or participating in a meeting or consultation with us.
Registration is not required for use of NRMRQ’s website. If you are a visitor, we do not collect any personal information about you, except to a limited extent using cookies, web beacons and pixels, which are described below.
4.2 Collection through our website
NRMRQ’s public website, https://www.nrmrq.org.au/, is hosted in Australia.
Our website is designed to give you useful information about our organisation and services. To continually improve our services and website, we may collect information about who has accessed our site and which pages were viewed to determine overall traffic patterns. This information is collected for statistical purposes and does not attempt to identify individual users.
As part of this, we may use tracking technologies such as cookies, web beacons and pixels. These tools track information about users of a website. While they generally identify browsers rather than individuals, some data may be linked to you if you are logged into a service. You may set your browser to refuse cookies if you do not wish to allow their use; however, please be aware that if you do turn off ‘cookies’ in your browser, you will not be able to fully experience some of the functionality of our website.
Where we collect personal information directly from you (for example via forms or newsletter sign-ups), we will provide clear notice of the purpose for which the information is collected and how it will be used.
4.3 Social networking services
We use social networking services such as LinkedIn to communicate with the public about our work. When you communicate with us using these services, we may collect your personal information, but we only use it to help us to communicate with you and the public. The social networking service will also handle your personal information for its own purposes. These services have their own privacy policies. You can access their privacy policies on their websites.
4.4 Automated decision-making
NRMRQ may use automated systems or algorithms to assist in processing data (such as sorting survey results or automating email alerts). These systems primarily use contact details and feedback data to improve service delivery. We do not currently use automated decision-making to make decisions that significantly affect your legal rights or interests. If our use of these technologies changes, we will update this policy accordingly.
4.5 What are your responsibilities, if you provide other people’s personal information to us?
If you provide personal information to us about someone else you must ensure that you are entitled to disclose that information to us and that, without us taking any further steps required by privacy laws, we may collect, use and disclose such information for the purposes described above.
4.6 Disclosure of information and overseas disclosure
NRMRQ only discloses personal information as far as is required for us to provide our services. We will seek your consent before we disclose any further information that is not essential to the provision of services.
Overseas Disclosure: We may disclose personal information to third-party service providers (such as cloud storage or email marketing platforms) located overseas. We take reasonable steps to ensure these overseas recipients handle your data in accordance with the Australian Privacy Principles (APPs).
4.7 How do we protect privacy?
NRMRQ makes every effort to ensure that the personal information we hold is protected from misuse or unauthorised access, modification or disclosure. Our security measures include technical and organisational safeguards. Technical measures include ICT encryption, firewalls, and multi-factor authentication. Organisational measures include regular staff privacy training and internal data access protocols.
Data Breach Protocol: In the event of an ”eligible data breach” under the Notifiable Data Breaches (NDB) scheme, we will notify the Office of the Australian Information Commissioner (OAIC) and affected individuals as soon as practicable, typically within 72 hours of becoming aware of the breach.
4.8 How do we ensure accuracy of personal information?
NRMRQ will take all reasonable steps to ensure that the data we collect, use or disclose is complete and up to date and has been obtained directly from individuals, or reputable sources. It is important if your personal information changes, that you notify us as soon as possible.
You have the right to ask for access to personal information that we hold about you and ask that we correct that personal information. You can ask for access or correction by contacting us and we must respond within a reasonable time. We will ask you to verify your identity before we give you access to your information or correct it, and we will try to make the process as simple as possible.
4.9 Third-party links
NRMRQ’s website, from time to time may provide links to third party websites for your convenience. NRMRQ is not responsible for the privacy or security practices of those websites which are not covered by this Privacy Policy. Third party websites should have their own privacy and security policies, which we encourage you to read before supplying any personal information to them.
4.10 Complaints
If you have a complaint about how NRMRQ has collected or handled your personal information, please contact our Privacy Officer by email at admin@nrmrq.org.au or phone us on 0419 790 943 in the first instance. We will endeavour to deal with your complaint and provide an initial response within one week. You can also contact us by post: PO Box 4608, Toowoomba East Q 4350.
If you are unsatisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC). Additionally, individuals have a direct legal right of action under the statutory tort for serious invasions of privacy.