When used in this Policy, "personal information" has the meaning given in the Privacy Act. Generally, it means any information or opinion about you from which you are identifiable.
We may ask you for general, sensitive or financial details, which may include:
General details |
|
Sensitive details |
|
Financial details |
|
We may collect the following government related identifiers about you for the following reasons:
Government related identifer | Why we collect it |
| Driver's license or passport details | To verify who you are |
| Working with Children Check number | To verify your suitability to work or volunteer with us |
| Tax File Number (TFN) | For payroll tax purposes |
However, we do not adopt government related identifiers as our own identifiers or use them for any reason other than those indicated above.
Wherever possible, we will try to collect personal information from you directly when you engage with us or use our services.
Table A – Collecting your information
Support services | |
When we collect We may collect personal information if you: |
* Provided by third parties |
Enabling You We collection this information so we can: |
|
Enabling us We collect this information so we can: |
|
Training and events | |
When we collect We may collect personal information if you: |
|
Enabling You We collection this information so we can: |
|
Enabling us We collect this information so we can: |
|
Face to face and digital interactions | |
When we collect We may collect personal information if you: |
|
Enabling You We collection this information so we can: |
|
Enabling us We collect this information so we can: |
|
Donations and fundraising | |
When we collect We may collect personal information if you: |
|
Enabling You We collection this information so we can: |
|
Enabling us We collect this information so we can: |
|
Employment and volunteering | |
When we collect We may collect personal information if you: |
|
Enabling You We collection this information so we can: |
|
Enabling us We collect this information so we can: |
|
There may be occasions when we collect personal information about you from a third party, such as our Support Service provider, IT or telecommunications provider or our delivery partners. These third parties also have their own privacy policies.
For example: if you call our Support Service, we may collect call data from our telecommunications provider and disclose it to our Support Service provider so they can effectively manage the service.
We use donor and fundraiser data to inform fundraising activities and support the effective use of our fundraising resources. We may use donor and fundraiser information to better understand our supporter base and improve the effectiveness of our fundraising efforts. This includes analysing donation history, engagement patterns, and demographic data to identify trends and preferences.
To support this, we may use secure third-party platforms (such as Dataro) that apply data modelling and predictive analytics to help us identify donors who may be more likely to support specific campaigns. These platforms operate under strict privacy and data protection standards, and we ensure that any personal information shared is handled in accordance with the Australian Privacy Principles (APPs).
We do not use donor information to make decisions that would unfairly disadvantage individuals, and we do not sell or trade donor information. You can opt out of targeted fundraising communications at any time by contacting us at fundraising@beyondblue.org.au.
If you want to share a story that includes another person’s experience of anxiety, depression or suicide in which that person will be identifiable, you must first seek permission from the individual. If the individual is a minor, has died, or is otherwise unable to provide consent, you should seek permission from a legal guardian or appropriate legal representative, and let them know about our Privacy Policy. Some people may not want their experience made public. It is important to consider the impact and respect the wishes of others affected by the story.
We will use or disclose your personal information for the primary purpose for which we collected it. We may also use or disclose your personal information for secondary purposes which are permitted by the Privacy Act, as follows:
The primary purpose for which we collect your information in various situations, and the most common secondary purposes for which we also use and disclose that information, are set out in Table A above. They may also be described in the collection statement we provide to you at or before the time we collect your personal information.
We may disclose your personal information to third parties who assist us to provide services or to whom we outsource services, for the purpose of providing those services to you. These may include:
Trusted Delivery Partners |
|
Operational Partners |
|
Personal Advisors | professional advisors, such as:
|
We make every effort to not directly disclose personal information to recipients located overseas.
Some of our third-party service providers may store personal information overseas when providing support or other services. For example:
We take reasonable steps to ensure the security of all information we collect, including that the information is protected from misuse and loss and from unauthorised access, modification or disclosure.
Our security measures for storage of personal information include:
However, no transmission or storage of data can ever be guaranteed to be fully secure.
In addition, we take reasonable steps to destroy or de-identify your personal information once we no longer need it.
Like most websites, we use cookies and analytics to understand how people use our sites and to improve your experience. In most cases, you can choose to opt-out by adjusting your browser, application or device settings.
Beyond Blue’s mobile applications may include features such as mood-tracking, check-ins, and other in-app behavioural tools. Any data entered or generated through these features is stored locally on the user’s device and is not collected, transmitted, or stored by Beyond Blue. This ensures that your personal reflections and activity remain private and under your control.
In some cases, we may also collect your personal information using “cookies”. When you access one of our websites, we may send a “cookie” (which is a small summary file containing a unique ID number) to your computer or internet enabled device.
This allows us to:
We also collect your device’s last known Internet Protocol (IP) address and, if you are a registered user, store it against your website profile.
If you do not wish to receive cookies, you can set your browser so that your computer does not accept them.
Our websites and mobile applications use analytics tools that collect information about:
These tools do not identify you or associate your IP address with any identifying information.
We use the information collected by these tools to help us understand:
These tools transmit the information they collect to the servers of the third party who provides the tool. By using our websites and mobile applications, you consent to Beyond Blue disclosing this information to those third parties, who may use information about you in the manner described in their privacy policies. You can opt out of these tools by using the opt-out mechanism provided by the relevant third party or by disabling cookies and JavaScript in your browser settings.
Our websites and mobile applications use analytics tools such as:
Analytics tools | Description |
| Google Analytics | Google Analytics is a product provided by Google to help us understand traffic and usage to help improve our services, programs, content and resources. Our websites and mobile applications also use the following Google Analytics Advertising Features:
Google Analytics does not identify individual users or associate your device’s IP address with any other data held by Google. |
| Marketing tools | Our websites use marketing tools (including Meta, Google and LinkedIn Pixel), which track your actions on our websites and collect information about your device and actions, whether you have a Meta, Google and/or LinkedIn account or are logged into your account. We use these tools to:
|
| Siteimprove analytics | We use Siteimprove to identify audience habits and behaviours so that content and user experience-related issues can be resolved, enhancing the overall website experience for users. |
| Marketing automation | Our websites use marketing automation tools that send communications (such as email or SMS) using several different services. Each service uses tracking technologies primarily to understand what subjects are interesting to you by monitoring whether your emails are opened, and links are followed. This information is then used to deliver more personalised and relevant communications to you. |
| Registered users IP address stored on website profile | We also collect your device’s last known IP address and, if you are a registered user, store it against your website profile. |
The choice of how much information you provide to us is yours, however, the law requires us to collect certain information from you to provide some of our services.
Where possible, you can interact with us anonymously. For example:
Some services will require us to confirm who you are to ensure your safety, public safety and prevent fraudulent or criminal activity. For example:
You can unsubscribe from our communications and marketing material at any time.
For email communications, you can click the unsubscribe link provided in our email. If you have subscribed to multiple mailing lists, you may need to unsubscribe more than once to ensure your details are removed from all mailing lists.
For postal or telephone communications, you can write to us or email us and request your details be removed from those lists.
If you do not wish to receive cookies or want to opt-out of Google Analytics, you can change your browser settings to disable or refuse cookies and JavaScript or use the opt-out service provided by Google. Refer to the “Help” section of your browser if you are unsure of how to do this.
You may request access to personal information we hold about you, and ask us to correct that personal information if it is wrong. You can ask for access or correction by contacting us and we will usually respond within 30 days. If we refuse to give you access to, or correct, your personal information, we will notify you in writing setting out the reasons.
You may request we delete or de-identify your personal information held in our records, systems, or databases. We will do so provided it is practical and lawful to do so.
Some information must be kept for a period before it can be permanently destroyed. For example, if you’ve engaged with any of our support services, we are required to retain your records for at least seven years from the date of your last engagement.
In the event of any unauthorised access or unauthorised disclosure or loss of your personal information that is likely to result in serious harm to you, and where remedial action has not been able to prevent the likely risk of serious harm, we will investigate and notify you and the Office of the Australian Information Commissioner in accordance with the Privacy Act.
If you believe your privacy has been breached or have a complaint about how we have handled your personal information, please contact us.
You can make a complaint by:
We take your complaints very seriously. All complaints are treated the same and follow the same process in line with our complaints procedure.
Complaint management is important so that we can address the specific needs of service users and their supporters, using deidentified information to improve services for everyone.
If you have provided details to be contacted, you can expect an acknowledgement of receipt within 24 to 72 hours. Following this, the complaint is investigated, and you will be notified of an outcome on completion of the investigation, if you have requested to be contacted.
If you are unhappy with how Beyond Blue has handled your complaint or the outcome, you have the right to complain to the Office of the Australian Information Commissioner (www.oaic.gov.au).
This Policy may change from time to time.
Any updated versions of this Policy will be posted on our websites and will be effective from the date of posting.
This Policy was last reviewed and updated on 5 March 2026.
References to “Beyond Blue”, "we", "us" and "our" are references to Beyond Blue Limited ACN 093 865 840.
Email
privacy@beyondblue.org.au
Post
Attention: The Privacy Officer, Beyond Blue
Suite 501, 278 Flinders Lane
Melbourne, Victoria 3000
As an organisation that supports people from across Australia, Beyond Blue acknowledges the Traditional Owners and Custodians of Country and their continuing connection to land, waters and community. We pay respect to Elders past and present.
First Nations Peoples are advised that this website may include reference to and images of deceased persons.
Beyond Blue is committed to safe inclusive spaces, policies and services for people of LGBTIQ+ communities and their families.
Premier partners
