Data Retention & Destruction Policy 2026

last updated: 23.06.26
At Ethicol, we are dedicated to delivering high-quality services to our clients in the health and social policy sector. A strong ethical foundation guides all of our activities, as such we are focused on ensuring the way we manage your records is both compliant with relevant legislation and always conducted to a high standard. This document details Ethicol’s Data Retention and Destruction Policy.

We have adopted the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) (the Privacy Act). The NPPs govern the way in which we collect, use, disclose, store, secure and dispose of your Personal Information. A copy of the Australian Privacy Principles may be obtained from the website of The Office of the Australian Information Commissioner.

1. Background

• Ethicol must comply with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs) and any other applicable privacy laws.

• Ethicol also has legal obligations to keep certain kinds of data on record for a specified amount of time. The table in Appendix 1 sets out the legally required retention periods for common categories of data.

• This policy sets out Ethicol’s approach to managing, retaining and destroying records and data (including personal information) we hold, to ensure compliance with the APPs and data retention laws. The purpose of this Policy is to outline roles, responsibilities, and steps Ethicol and its employees must take when dealing with record and data retention and destruction.

• This policy does not cover all circumstances that may arise, is not a comprehensive statement of the relevant law, and is not a substitute for legal advice. If you are unsure or have any questions about this policy, or Ethicol’s obligations, you should consult with Ethicol’s CEO, Natasha Doherty.

2. Scope
What do we mean by ‘record’ and ‘data’?

The Privacy Act provides that a ‘record’ can be a paper document or an electronic file. Records may include physical documents, digital scans of documents, databases, and electronic files such as text, image, video, or audio files. In essence, any medium that captures and contains information constitutes a ‘record’.

In this policy, ‘data’ means any information which is contained in a record, including (but not limited to) personal information.

Who does this policy apply to?

This Policy applies to all employees, including temporary employees, contractors, and volunteers who have access to Ethicol’s records and data or who are involved in the process of collecting, storing or securing Ethicol’s records and data on behalf of Ethicol.

OUR FULL POLICY CAN BE DOWNLOADED AND READ HERE

If you have any queries or complaints about Ethicol’s Data Retention and Destruction Policy please contact us at:

info@ethicol.com.au

Lvl 6 200 Adelaide St Brisbane

Ph: 0402458607

Do you have questions?
Reach out to our team and start a discussion.
Contact us
Contact us