Privacy Policy

1. Introduction

At Joii Limited (Joii, we, us or our), we believe that trust, transparency and respect are fundamental to creating meaningful opportunities and positive social impact.

As an Australian not-for-profit social enterprise, Joii is committed to protecting the privacy, confidentiality and security of the personal information entrusted to us by our employees, participants, customers, donors, supporters, business partners and members of the community.

This Privacy Policy explains how we collect, hold, use, disclose, protect and manage personal information in accordance with the Privacy Act 1988 (Cth), including the Australian Privacy Principles (APPs), where applicable.

We are committed to ensuring personal information is handled responsibly, fairly and transparently across our programs, business operations, websites and digital platforms.

2. Scope of This Policy

This Privacy Policy applies to personal information collected and managed by Joii Limited in connection with its activities, operations and services, including:

• Joii’s Social Impact Programs, including the Second Chance Program and Your Chance Program.

• Employment, training, mentoring and community participation initiatives.

• Fundraising activities, donation campaigns and community projects, including Project Oasis.

• Construction, building, roofing, carpentry, landscaping, wholesale and related services.

• Recruitment, employment and workforce services.

• Business development, partnerships and commercial operations.

• Joii websites, online forms, fundraising platforms, social media channels and digital communications.

This Policy also applies to Joii’s business divisions and associated services where Joii Limited is responsible for handling the relevant personal information.

Where a separate legal entity operates a particular business or service, its own applicable privacy arrangements may also apply.

3. What Is Personal Information?

Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether or not the information is true or recorded in a material form.

Depending on the nature of your relationship with Joii, the types of personal information we may collect include:

Personal and contact information

• Full name.

• Residential or postal address.

• Email address and telephone number.

• Date of birth, where reasonably required.

• Emergency contact information, where relevant.

Employment and participation information

• Employment history, qualifications and professional experience.

• Resumes, job applications and references.

• Training records, certifications and licences.

• Employment eligibility and work-related information.

• Program participation, mentoring and employment support records.

Customer and business information

• Enquiries, correspondence and service requests.

• Project information, quotations and contractual records.

• Business contact details and transaction history.

• Billing, invoicing and payment information.

Fundraising and donation information

• Donor names and contact details.

• Donation amounts, dates and transaction records.

• Donation preferences and communication history.

• Fundraising participation and campaign involvement.

• Information required to process donations and issue receipts.

Digital and website information

• Internet Protocol (IP) addresses.

• Browser type and device information.

• Website activity and usage data.

• Cookies and related tracking information.

• Online form submissions and communication preferences.

We only collect personal information where reasonably necessary for our activities, or where otherwise permitted or required by law.

4. Sensitive Information

Certain information is classified as sensitive information under Australian privacy legislation.

This may include information relating to an individual’s health, disability, racial or ethnic origin, religious beliefs, criminal history or other protected personal characteristics.

Given the nature of our employment, training and social impact programs, Joii may need to collect sensitive information in appropriate circumstances.

For example, information may be required to:

• Support an individual’s participation in an employment or training program.

• Identify reasonable workplace adjustments or accessibility requirements.

• Meet relevant workplace health and safety obligations.

• Provide appropriate mentoring and participant support.

• Meet lawful employment, regulatory or contractual requirements.

Where required, we will obtain consent before collecting sensitive information, unless collection is otherwise permitted or required by law.

Sensitive information will only be used or disclosed for the purpose for which it was collected, or for another purpose permitted by law.

Access to sensitive information will be restricted to authorised personnel and service providers who reasonably require it to perform their duties.

5. How We Collect Personal Information

Joii may collect personal information directly from you when you:

• Visit or interact with our websites.

• Submit an online enquiry or contact form.

• Apply for employment or participate in recruitment.

• Enrol in or participate in a Joii social impact or training program.

• Request a quotation, engage our services or enter into a business agreement.

• Make a donation or participate in a fundraising campaign.

• Subscribe to newsletters or marketing communications.

• Attend a Joii event or community initiative.

• Communicate with us by email, telephone, social media or in person.

We may also receive personal information from third parties, including:

• Employment service providers and referral organisations.

• Recruitment agencies and professional referees.

• Government agencies and community organisations.

• Training providers and program delivery partners.

• Business partners, contractors and service providers.

• Fundraising and payment processing platforms.

Where personal information is obtained from third parties, we take reasonable steps to ensure it is collected and handled lawfully and that individuals receive appropriate information about the collection.

Where practicable and lawful, individuals may choose to interact with Joii anonymously or using a pseudonym. However, certain services, transactions and program activities require accurate identification.

6. Why We Collect and Use Personal Information

Joii collects, holds and uses personal information to support its operations, deliver services and advance its social impact objectives.

These purposes may include:

Social Impact and Community Programs

• Assessing eligibility and suitability for program participation.

• Coordinating training, mentoring and employment opportunities.

• Supporting participant wellbeing, development and employment pathways.

• Managing referrals and relationships with employment service providers.

• Monitoring program participation and evaluating program outcomes.

• Preparing reports and measuring social impact.

Employment and Recruitment

• Processing employment applications.

• Conducting recruitment and reference checks.

• Assessing qualifications and work eligibility.

• Managing employment, payroll, training and workplace obligations.

• Supporting workplace safety and employee development.

Business Operations

• Responding to enquiries and providing quotations.

• Delivering products, projects and services.

• Managing customer, supplier and contractor relationships.

• Processing invoices, payments and contractual documentation.

• Maintaining accurate business and financial records.

Fundraising and Donations

• Processing donations and issuing receipts.

• Managing fundraising campaigns and community initiatives.

• Communicating with donors and supporters.

• Reporting on fundraising outcomes and social impact.

• Managing recurring contributions and donor preferences.

Communications and Marketing

• Providing information about Joii’s programs, services and initiatives.

• Distributing newsletters, announcements and campaign updates.

• Responding to feedback and enquiries.

• Improving website performance and user experience.

• Measuring the effectiveness of communications and marketing activities.

Legal and Regulatory Compliance

• Meeting applicable legal and contractual obligations.

• Maintaining records required for financial reporting, governance and auditing.

• Supporting the prevention and investigation of fraud or unlawful activities.

• Protecting the safety, rights and legitimate interests of individuals and Joii.

We will not use or disclose personal information for unrelated purposes unless we have obtained appropriate consent or the use or disclosure is otherwise permitted by law.

7. Social Impact Program Participants

Joii recognises that individuals participating in employment, training and community support programs may share personal or sensitive information as part of their engagement.

We are committed to handling this information respectfully and maintaining appropriate confidentiality.

Participant information may be used to:

• Coordinate program enrolment and participation.

• Develop individual employment and training pathways.

• Provide mentoring and employment support.

• Monitor progress and program outcomes.

• Meet relevant contractual and reporting requirements.

Where required, information may be shared with authorised referral partners, training providers, employers or government agencies for legitimate program delivery purposes.

We will take reasonable steps to limit disclosures to information that is relevant and necessary.

Where possible, social impact reporting will use aggregated or de-identified information to protect participant privacy.

Identifiable participant stories, testimonials, photographs or videos will only be published where an appropriate legal basis exists, including consent where required.

8. Fundraising, Donations and Raisely

Joii conducts fundraising activities to support its social impact initiatives, community projects and employment programs.

Our fundraising activities may be facilitated through Raisely, an online fundraising platform.

When you donate or participate in a fundraising campaign, we may collect information necessary to process your contribution, maintain donation records and communicate with you about your support.

This may include your name, contact details, donation amount, transaction history and relevant communication preferences.

Payment Processing

Online payments may be processed through authorised payment service providers, including Stripe and PayPal, where these payment methods are enabled.

Payment card information is handled through the relevant payment processing systems.

Joii does not ordinarily receive or store full payment card numbers through the Raisely donation platform.

Payment providers may independently collect, process and retain payment-related information in accordance with their own privacy policies and applicable laws.

Donation Communications

We may contact donors to:

• Confirm donations and provide receipts.

• Respond to donation or payment enquiries.

• Administer recurring donations.

• Provide relevant updates about supported projects.

• Communicate fundraising opportunities where permitted by law.

Donors may opt out of promotional and fundraising communications at any time.

Donation-related administrative communications may still be sent where necessary.

For information about how Raisely independently handles personal information, please refer to its Privacy Policy at https://www.raisely.com/privacy.

9. Disclosure of Personal Information

Joii does not sell personal information to third parties.

We may disclose personal information where reasonably necessary to conduct our activities, provide services or meet applicable legal obligations.

Recipients may include:

• Authorised Joii employees and personnel.

• Relevant Joii business divisions and associated entities.

• Employment, training and community service partners.

• Contractors, suppliers and professional advisers.

• Information technology, website hosting and communication providers.

• Fundraising platforms and payment processors.

• Auditors, insurers and financial service providers.

• Government agencies, regulators and other authorities where required or authorised by law.

We take reasonable steps to ensure personal information is only disclosed for legitimate purposes and is handled with appropriate confidentiality and security.

Where personal information is shared with third-party service providers, those providers may have their own privacy obligations and policies.

10. Overseas Disclosure of Personal Information

Joii may engage technology providers, fundraising platforms, digital services or business partners that operate or process information outside Australia.

For example, Raisely’s published privacy policy identifies Australia, the United Kingdom and the United States as locations where personal information may be stored.

Other service providers may process, store or access information in additional overseas locations.

Where Joii discloses personal information to overseas recipients, we will take reasonable steps to comply with applicable Australian privacy obligations, including requirements relating to overseas disclosures.

We will identify relevant countries of overseas disclosure where practicable and maintain accurate information about our international data-handling arrangements.

11. Website Analytics, Cookies and Digital Technologies

Joii websites may use cookies, analytics tools and similar technologies to improve website functionality and understand how visitors interact with our online content.

These technologies may collect information such as:

• Website pages visited.

• Time spent on the website.

• Browser and device information.

• General geographic information.

• Referral sources and website interactions.

• Advertising and campaign performance data.

This information may be used to:

• Improve website usability and functionality.

• Monitor website traffic and technical performance.

• Understand audience engagement.

• Evaluate digital marketing campaigns.

• Improve the relevance of our communications.

Some third-party services may collect information through cookies or similar technologies in accordance with their own privacy policies.

You may manage or disable cookies through your browser settings and, where available, website privacy preferences.

Disabling certain cookies may affect the operation of some website features.

12. Marketing and Communications

Where required, we will seek consent before sending marketing communications.

You may withdraw consent or unsubscribe from promotional communications by:

• Selecting the unsubscribe link included in relevant emails.

• Updating your communication preferences where available.

• Contacting Joii directly.

Opting out of marketing communications will not prevent us from contacting you about essential transactions, services, donations or other legitimate administrative matters.

13. Social Media and Third-Party Websites

Joii maintains a presence on social media and other external digital platforms.

When you interact with Joii through social media, the platform may independently collect and process your personal information in accordance with its own privacy policies.

Our websites may also contain links to external websites, services and resources.

Joii is not responsible for the independent privacy practices of external websites or third-party platforms that we do not control.

We encourage users to review the privacy policies of third-party services before providing personal information.

14. Storage and Security of Personal Information

Depending on the information and systems involved, our security measures may include:

• Restricted access to personal information.

• Password protection and access controls.

• Secure digital platforms and service providers.

• Appropriate staff confidentiality obligations.

• Secure storage of physical and electronic records.

• Review of information-handling and security practices.

Access to personal information is limited to individuals who require it for authorised business or program purposes.

While we implement reasonable security measures, no method of electronic transmission or data storage can be guaranteed to be completely secure.

15. Retention and Disposal of Personal Information

Retention periods may vary depending on the type of information and the relevant activity.

When personal information is no longer required, and Joii is not legally required or otherwise permitted to retain it, we will take reasonable steps to securely destroy or de-identify the information.

16. Accessing and Correcting Personal Information

You may request access to personal information that Joii holds about you or request corrections where information is inaccurate, out of date, incomplete, irrelevant or misleading.

Requests should be made using the contact details provided at the end of this Policy.

To protect personal information, we may ask you to verify your identity before providing access or making changes.

We will respond to requests within a reasonable timeframe and in accordance with applicable privacy legislation.

There may be circumstances in which access or correction is restricted or refused under applicable law. Where required, we will explain the reason for our decision and the available complaint mechanisms.

We will not charge a fee for making an access or correction request. A reasonable administrative fee may apply to providing access where permitted by law, and any proposed fee will be communicated in advance.

17. Privacy Complaints and Enquiries

Joii is committed to addressing privacy concerns fairly, respectfully and promptly.

If you believe your personal information has been mishandled, or you have concerns about our privacy practices, you may submit a complaint using the contact details below.

Please include sufficient information to help us understand and investigate your concern.

We will:

1. Acknowledge your complaint within a reasonable timeframe.

2. Review the circumstances and investigate the matter as appropriate.

3. Seek additional information if necessary.

4. Communicate the outcome and any actions taken.

5. Take reasonable steps to address identified privacy concerns.

We aim to resolve privacy complaints within 30 days wherever practicable. Where additional time is required, we will endeavour to keep you informed.

If you are dissatisfied with our response, you may be entitled to lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

Office of the Australian Information Commissioner

Website: https://www.oaic.gov.au
Telephone: 1300 363 992

18. Data Breaches

Joii takes privacy and information security incidents seriously.

Where a suspected data breach occurs, we will assess the circumstances and take appropriate steps to contain, investigate and address the incident.

Where required under the Privacy Act 1988 (Cth), including the Notifiable Data Breaches scheme, we will notify affected individuals and the OAIC.

We will also review relevant processes and security measures to reduce the risk of similar incidents occurring in the future.

19. Changes to This Privacy Policy

Joii may review and update this Privacy Policy to reflect changes in legislation, organisational activities, technology, fundraising practices or the way personal information is managed.

Any updated Privacy Policy will be published on the Joii website, with the effective date revised accordingly.

We encourage visitors, participants, customers, donors and supporters to review this Policy periodically.

20. Contact Us

If you have any questions about this Privacy Policy, wish to access or correct your personal information, or would like to raise a privacy concern, please contact:

Joii Limited
Privacy Enquiries

ABN: 55 621 826 051
ACN: 621 826 051

Unit 5, 8–12 Nevilles Street
Underwood QLD 4119
Australia

Phone: 1300 00 JOII (5644)
Email: hello@joii.org
Website: https://joii.org

Effective Date: 5 November 2026
Document Version: 2.0