Privacy Policy

The Leukaemia Foundation understands the importance the community places on the preservation of confidentiality of individuals’ private and/or sensitive information including credit card information. As a result, the Leukaemia Foundation is bound by, and fully committed to supporting, the National Privacy Principles (NPPs) as set out in the Privacy Amendment (Private Sector) Act 2000, effective 21 December 2001.

The Privacy Amendment (Private Sector) Act 2000, sets out guidelines which control how private sector organisations should treat personal and/or sensitive information they collect, use, handle or store. The Leukaemia Foundation is committed to supporting the current legislation as per the Federal Privacy Commissioner’s guidelines.

Privacy and Direct Mail

Personal information collected as a result of direct mail campaigns will only be used for the primary purpose for which it was collected. The Leukaemia Foundation will not sell or exchange or release personal information about an individual for commercial gain. In accordance with the legislation, the Leukaemia Foundation takes reasonable steps to make sure that the personal information it collects, uses or discloses is accurate, complete and up-to-date. The Leukaemia Foundation takes reasonable steps to protect the personal information it holds from misuse and loss and from unauthorized access, modification or disclosure. Information collected and held on an individual through the direct mail initiatives of the Foundation is accessible to them on request.
Our Security Policy for online donations

The Leukaemia Foundation wants to ensure that all of our supporters can donate and sponsor online with complete confidence. We have taken every possible measure to give absolute security to our customers in their dealings with us.

The Leukaemia Foundation has contracted Artez Pacific as its provider of secure applications to handle registration, donation and credit card transactions.

These use Secure Sockets Layer technology (SSL) to ensure your experience is safe, sound and secure at all times.  You will know when transmitted data is safe by the appearance of a padlock or key icon.  Secure web pages can also be identified by their website address which begin with ’ https:// ‘, not ‘http://’.

Artez takes credit card and personal information security seriously and continuously invests in people, process and technologies to maintain the highest level of the Payment Card Industry (PCI) Compliance. Artez is designated as a Level One PCI Compliant Service Provider. Achieving Level One compliance is a significant undertaking and investment of resources. Since 2008, Artez has met the most rigorous industry standards by solidifying our business processes and policies, application infrastructure, and development environment.

IBM Security Services, a third party independent auditor performs annual on‐site assessments of the Artez platform, and has approved Artez’s PCI level One compliance. Lower levels of PCI compliance require a ‘self‐assessment’ rather than the far more rigorous onsite audit conducted by third party experts. Additionally, Artez completes a rigorous screening process to be listed on Visa's PCI certification list.  And finally, as part of Artez’s ongoing commitment to PCI due diligence, Artez submits its self to monthly external vulnerability scans to help ensure that it maintains the highest levels of security around credit card and personal data.

The Artez application is hosted in a segregated and secure world class hosting facility. The Artez data centre has been engineered to eliminate any single point of failure, with multiple layers of redundancy in power systems, HVAC, and fire detection and suppression. All systems are monitored 24/7.

At no time does the Leukaemia Foundation have access to your credit card information.  It is never stored on our servers.   The only time Artez would store your credit card information is to support your request to give a monthly credit card donation.

In the event of unauthorised use of your credit card, you must notify your credit card provider in accordance with its reporting rules and procedures. Under the conditions of your credit card, your bank cannot hold you liable for more than $50.00 of a fraudulent transaction.

For more information visit http://www.artez.com/