Buneen Group
This website is operated by Buneen Group, a registered business name of Shawn Andrews Consulting Pty Ltd, ABN 69 653 465 162. It collects no information through forms. It uses Plausible Analytics, which does not collect personal information. The policy below applies across the Buneen Group.
This policy explains how the Buneen Group of organisations collects, holds, uses and discloses personal information. It applies to all of the following, and to the websites each of them operates:
We refer to these together as we, us and our. Where a rule applies to only one of them, we say so.
We work with First Nations people, with organisations that hold responsibility for them, and with children and young people in out-of-home care. Information about a person's Aboriginality, their family, their community and their circumstances is not ordinary information. We treat it as sensitive, we collect it only when we genuinely need it, and we hold it with the care that Country and kinship require.
We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Some of our entities may fall below the threshold at which the Privacy Act applies. We apply this policy across all of them regardless.
Where we deliver services under a contract with a Victorian public sector organisation, we also handle information in accordance with the Information Privacy Principles in the Privacy and Data Protection Act 2014 (Vic), as required by that contract.
The information we collect depends on your relationship with us.
Your name, the organisation you work for, your role, your email address, your phone number if you give it, the procurement or contract reference you provide, and whatever you tell us in your message.
Your email address, and the date and method by which you subscribed.
Contact details, records of our work together, notes, correspondence, meeting records, and information you provide about your organisation and its people. Where an engagement involves cultural safety or psychological safety work, this can include accounts of workplace experiences given to us by staff of a client organisation.
Your name and contact details, your resume, your work history, your education and qualifications, your right to work in Australia, your availability, your referees, and information relevant to placing you well and supporting you afterwards. Where you choose to tell us, this can include your Aboriginality, your health or disability where it affects the support you need, and personal circumstances relevant to your employment. You do not have to tell us any of this, and the section on sensitive information explains how we treat it.
Name, date of birth, contact details, cultural identity and community connections, care arrangements, the programs a young person takes part in, health and wellbeing information relevant to keeping them safe on a program, emergency contacts, and consents given by a parent, carer, guardian or the department.
Your name, contact details, the amount and date. Payment card details are handled by our payment provider and are never stored by us.
Some of what we collect is sensitive information under the Privacy Act. That includes information about racial or ethnic origin, health, disability, criminal record and membership of professional or trade associations.
We collect sensitive information only where you consent and where it is reasonably necessary for what we are doing, or where a law allows or requires it. Aboriginality is sensitive information. Where we ask about it, we tell you why, and you can decline. We do not use sensitive information for marketing.
Wherever we reasonably can, we collect personal information directly from you: through a form on one of our websites, by email, by phone, in a meeting, or on a program.
Sometimes we collect information about you from someone else. That can include a client organisation that engages us and gives us the details of its staff, an employer or referee in a recruitment process, a department or agency that refers a young person to a Dreaming Futures program, or a carer or family member. When that happens we take reasonable steps to make sure you know we hold it, unless doing so would be unreasonable in the circumstances or would put a child's wellbeing or safety at risk.
We use personal information for the purpose we collected it for, for a directly related purpose you would reasonably expect, or where you have consented or a law requires it.
We disclose personal information only where it is necessary. That can include:
We do not sell personal information, and we do not disclose it for someone else's marketing.
Where the law permits or requires it, we may share information about a child or young person without consent in order to promote their wellbeing or safety, or to manage a risk of harm. This includes obligations under Victorian child safety and information sharing laws and our obligations as an organisation working with children. Where we do this, we record what was shared, with whom and why.
We use third-party services to run our organisation. Some of them store or process information outside Australia, mainly in the United States. The main ones are:
| Provider | What it does for us | Where information is likely to be held |
|---|---|---|
| Webflow | Hosts our websites and receives form submissions | United States |
| Google Workspace | Email, documents, calendars and file storage | United States, and other countries where Google operates |
| Buttondown | Sends our email newsletters and holds subscriber addresses | United States |
| Notion | Our internal records and project systems | United States |
| Plausible Analytics | Website traffic measurement. Does not use cookies and does not collect personal information. | European Union |
| Meta and LinkedIn | Advertising and measurement, on the sites named below | United States, Ireland, Singapore and other countries where they operate |
| Our donation platform, currently being established | Processes donations to Dreaming Futures | Australia |
Before disclosing personal information overseas we take steps that are reasonable in the circumstances to ensure the recipient handles it consistently with the Australian Privacy Principles, which normally means relying on the contractual terms of that service. You should know that overseas recipients are not bound by the Privacy Act, and that if information is mishandled overseas your ability to seek a remedy may be limited.
Our websites are hosted by Webflow and use Plausible Analytics, which measures traffic without cookies and without collecting personal information. You do not need to consent to it and there is no cookie banner, because there is nothing about you to consent to.
On shawn-andrews.com, buneen.au, and the employer pages of buneenemployment.au, we also use the Meta Pixel and the LinkedIn Insight Tag. These allow us to measure whether our advertising works and to show later advertising to people who have visited those pages. They send information including your IP address and the pages you viewed to Meta and to LinkedIn, who may be able to match it to an account you hold with them.
We do not use advertising or tracking pixels on dreamingfutures.org, or on the jobseeker pages of buneenemployment.au. We have made that choice deliberately, because visiting those pages could reveal something sensitive about you.
You can limit this tracking through your browser settings, your Meta and LinkedIn ad preferences, or a tracking blocker. Doing so will not affect your ability to use our websites.
We send writing and updates only to people who have asked for them. You can unsubscribe from any email we send using the link at the bottom of it, or by emailing us. We action unsubscribes within five working days and it costs you nothing.
We do not use sensitive information for marketing. If you ask us where we got your details, we will tell you within a reasonable time, normally within 30 days.
We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. That includes access controls on our systems, multi-factor authentication, encrypted storage with the providers listed above, limiting who can see what, and destroying or de-identifying information we no longer need.
We are a small organisation and we do not pretend to hold enterprise security. What we do hold is a small number of well-chosen systems, tightly controlled.
We maintain a data breach response plan. If personal information we hold is lost, accessed or disclosed without authorisation, we assess what has happened promptly and within 30 days. Where a breach is likely to cause serious harm, we notify the people affected and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires. Where we are working under a government contract, we also notify that agency, in some cases within three days.
We keep personal information only as long as we need it, or as long as a law or funding agreement requires. Records connected to a young person in out-of-home care, and records connected to child safety, are kept for the longer periods those obligations require. When we no longer need information and no law requires us to keep it, we destroy it or de-identify it.
Dreaming Futures works with children and young people aged 5 to 25. Where a young person is under 18, or where they do not have capacity to consent for themselves, we seek consent from a parent, carer, guardian or the department that holds responsibility for them, and we still explain to the young person in a way they can understand what we hold and why. Older young people can ask for their own information themselves. A young person can ask us to correct what we hold about them, and we will act on that.
You can ask us for a copy of the personal information we hold about you, and you can ask us to correct it if it is wrong, out of date or incomplete. Email info@buneen.au and tell us what you are after.
We will respond within 30 days. There is no charge for asking. If it takes substantial work to find and produce what you have asked for, we may charge a reasonable cost, and we will tell you what it is before we do anything. In rare cases we may not be able to give you access, for example where doing so would reveal information about another person or would put a child at risk. If that happens we will tell you why in writing and explain what you can do about it.
If you think we have mishandled your personal information, tell us. Email info@buneen.au with Privacy complaint in the subject line, or write to us at 3 Waterview Crescent, Scoresby, Victoria 3179.
We will acknowledge your complaint within 5 business days, look into it properly, and give you a written response within 30 days. If we need longer, we will tell you why and when to expect an answer.
If you are not satisfied with how we have handled it, you can take the matter to the Office of the Australian Information Commissioner at oaic.gov.au, 1300 363 992, or GPO Box 5218, Sydney NSW 2001. If your complaint concerns work we have done under a Victorian government contract, you can also contact the Office of the Victorian Information Commissioner at ovic.vic.gov.au, 1300 006 842.
Privacy enquiries: info@buneen.au, or by post to 3 Waterview Crescent, Scoresby, Victoria 3179.
We review this policy at least once a year, and whenever we change how we handle personal information. The current version is always available at the privacy page of each of our websites. Material changes will be noted here with the date they took effect.