Privacy Statement
The Shire of Boddington (Shire) is committed to protecting the privacy of individuals and managing personal information responsibly, transparently, and securely.
The Shire recognises that responsible information sharing supports effective service delivery, community outcomes, and good governance, while ensuring personal information is protected and handled appropriately.
Personal information is managed in accordance with the Privacy and Responsible Information Sharing Act 2024 (WA) (PRIS Act), the Information Privacy Principles established under that Act, and other applicable legislation, including:
The Shire complies with the following legislation:
- Freedom of Information Act 1992 (WA)
- State Records Act 2000 (WA)
- Local Government Act 1995 (WA)
- Children and Community Services Act 2004 (WA)
This statement explains how personal information is collected, used, and protected, and how individuals can access or correct it.
What Personal Information is Collected and Why
Personal information is collected to provide services, communicate with the community, meet regulatory obligations, and manage operational requirements.
Personal information is collected where it is reasonably necessary for, or directly related to, its functions, services, activities, and legal responsibilities.
Personal information may be collected when individuals:
- contact the Shire;
- complete forms, applications, registrations, or submissions;
- request services or assistance;
- provide feedback or make enquiries;
- participate in community engagement activities;
- subscribe to communications or newsletters;
- interact with the Shire’s website, online services, or social media platforms.
Examples of personal information collected may include:
- name and contact details;
- residential or postal address;
- identification information;
- property details;
- correspondence and records of communication;
- application or service-related information.
In some circumstances, sensitive personal information may be collected, such as health information or other information requiring additional protection. Sensitive personal information is only collected where necessary, authorised, or permitted by law, and appropriate safeguards are applied.
Information is only collected that is reasonably necessary for its functions and activities. Where providing information is optional, individuals will be advised of this.
How Personal Information Is Used
Collected information is used to deliver services, process requests, meet statutory responsibilities, and communicate with the community. It may also support service improvement, future planning, or compliance with local laws.
Information is only used for the purpose for which it was collected, or for a directly related and lawful purpose that a person would reasonably expect. For example, if an application is submitted, the details provided may be used to assess eligibility, follow up, or issue notifications.
Personal information is not sold or used for unrelated marketing. In limited instances, disclosure may occur to government agencies, contractors, or service providers—only where permitted or required by law.
Responsible Information Sharing
The Shire recognises that appropriate information sharing can improve public services and community outcomes while maintaining privacy protections.
Personal information may be shared where authorised or required by law, including where information sharing:
- supports a lawful function or activity of the Shire or another public sector body;
- is permitted under the PRIS Act;
- assists with the delivery of services;
- supports community safety, wellbeing, or regulatory responsibilities.
Before sharing personal information, the following items are considered:
- whether there is lawful authority to share the information;
- whether sharing is necessary and proportionate;
- the purpose and expected benefit of sharing;
- potential privacy risks;
- appropriate measures to protect the information.
Personal information may be shared with government agencies, local governments, contractors, service providers, or other organisations where permitted by law and appropriate privacy protections are in place.
Online Services and Website Analytics
When the Shire’s website or digital platforms are accessed, non-identifying data such as IP addresses, browser types, and page visits may be collected. This helps maintain system security and improve the user experience.
Cookies and third-party tools, including Google Analytics, may be used to gather this data. Cookies can be disabled through browser settings, although doing so may affect website functionality.
Features are offered where individuals may choose to voluntarily provide personal information such as subscribing to newsletters, completing surveys, or registering for updates. In some cases, these services may be delivered through third-party providers (e.g. SurveyMonkey). Personal information collected through these tools is only used for the purpose stated at the time of collection (e.g. community consultation, demographic analysis) and is not used to identify individuals unless clearly stated and consented to.
Occasionally, surveys or initiatives conducted by external agencies (such as state government bodies) may be promoted. In such cases, the Shire does not collect or manage the data, nor control how it is used. Summarised or publicly available results may be shared with the Shire for informational purposes only.
External links may appear on the Shire’s website. These are not managed by the Shire and may have separate privacy practices. Users are encouraged to review those policies before engaging with external sites.
Social Media
Social media platforms are used to share information and engage with the community. When individuals interact with these platforms, personal information may be collected and stored under the platform’s own terms. Limited information may also be collected by the Shire to support communication and service improvement. However, it is recommended that sensitive information is not shared via public channels.
Storage and Security of Personal Information
Reasonable steps are taken to protect personal information from loss, misuse, unauthorised access, or disclosure. Records are stored securely, with access restricted to authorised personnel.
When information is no longer required and there is no legal obligation to retain it, it will be securely destroyed or de-identified. Where external or cloud storage providers are used, privacy protections are ensured, including for data stored overseas.
Records are managed securely in accordance with the Shire’s recordkeeping obligations and access is restricted to authorised personnel who require the information to perform their duties.
Where the Shire uses external service providers, including cloud-based services, appropriate contractual, technical, and organisational safeguards are implemented to protect personal information.
This includes consideration of privacy protections where information is stored or processed outside Western Australia.
When personal information is no longer required and there is no legal requirement to retain it, the information will be securely destroyed or de-identified in accordance with applicable records management requirements.
Access and Correction of Personal Information
Individuals have the right to request access to personal information held about them, and to request corrections if the information is inaccurate, outdated, or incomplete. Requests must be made in writing and may require proof of identity.
Certain access requests may fall under the Freedom of Information Act 1992 (WA). The Freedom of Information Officer can assist with this process.
Privacy Complaints and Data Breaches
Concerns about privacy breaches or the handling of personal information can be directed to the Shire. All complaints are taken seriously and investigated in line with relevant legislation and policy.
In the event of a serious data breach, affected individuals will be notified promptly, and steps will be taken to minimise any further risk. If the outcome of a complaint is unsatisfactory, individuals may contact the Information Commissioner of Western Australia.
Contact Us
To request access, make a correction, raise a concern, or learn more about how your information is managed, please contact the Shire:
39 Bannister Road, Boddington WA 6390
PO Box 4, Boddington WA 6390
shire@boddington.wa.gov.au
(08) 9883 4999
Further detail is available in the Council Policy – Privacy and Responsible Information Sharing.
Website Disclaimer
While every effort is made to ensure the accuracy and currency of information on the Shire’s website and digital platforms, the Shire of Boddington makes no representations or warranties as to the accuracy, reliability, or completeness of the content. Users access and use information at their own risk.
The Shire is not liable for any loss or damage arising from the use of this website or reliance on its content. Although reasonable steps are taken to ensure documents are free from viruses or malware, no guarantee is provided that downloads are secure or free from harmful code. Users are advised to take appropriate precautions when downloading or opening files.