AHN Privacy Policy

AHN Privacy Policy

Note: This policy is subject to change at any time. Please check all Australian Homestay Network Pty Ltd (“AHN”) Policies on a regular basis for updates.

AHN is owned by MyStay International Pty Ltd (ABN 80 605 198 990).

This policy has been designed and implemented for users of Australian Homestay Network, or future entities that will come under the collective (Australian Homestay Network Pty Ltd). For further information please go to: www.homestaynetwork.org

This privacy policy describes how Australian Homestay Network Pty Ltd and its subsidiaries and licensees/franchisees and affiliated entities, manage the personal information (“PI”) you provide and are referred to under the term “Australian Homestay Network Pty Ltd” within this policy. 

Australian Homestay Network Pty Ltd provides administrative and support services to hosts, students/guests/users, agents, educators and other persons involved in the homestay industry (“Services”) through various channels, including via our website/s and the Homestay Management System accessible through the Website/s. 

We have created this privacy policy in order to demonstrate our commitment to the Privacy Act 1988 and the Australian Privacy Principles (together, the “Australian Privacy Law”). 

Personal Information (“PI”), What PI do we collect?

The type of PI we collect depends on your relationship with us, as follows:

Public: if you submit a query via our online ‘contact us’ form, or otherwise email or call Australian Homestay Network Pty Ltd, we may collect your name, email address, phone number, address and location.

Registration: when you register with us as a host, student/guest/user, educator or agent, we will collect your name, your chosen username and password, email address, mailing address and profile picture (should you choose to provide one).  If you register as a host, we will also ask you to provide information about your background to help us assess your suitability to be a host, and banking details for payments.  If you register as a student/guest/user, we will also ask you to provide your bank or credit card details for payments, passport and nationality details, student/guest/user registration details, and other information about you that will help us to find the right placement for you.

What other information do we collect?

Log Files: Any time you visit any of our websites, our servers automatically gather information from your browser (such as your IP addresses, browser type, Internet service provider (ISP), referring/exit pages, platform type, date/time stamp, and number of clicks) to analyse trends, administer the site, prevent fraud, track visitor movement in the aggregate, and gather broad demographic information. For example, we may log your IP address for system administration purposes. IP addresses are logged to track a user’s session. This gives us an idea of which parts of our site users are visiting. We do not share the log files externally.

Purchase Information. To process purchases, we will require your name, address, phone number, email address and credit card information. Such information is used to process your order or as otherwise described herein. Credit card transactions are processed through a PCI Level 1-certified industry leading provider, which only uses your information for that purpose.

What other information can you agree to provide?

To ensure in finding the most suitable placement for you, we may ask for additional Non-Sensitive Personally Identifiable Information. This information may include, but is not exclusive to:

  • Post code
  • Race
  • Gender
  • Religion
  • Date of birth
  • Place of birth
  • Appropriate Health Data
  • Appropriate Criminal Background Data

Please be aware that some documentation may have Individual Healthcare Identifiers as defined in the “Healthcare Identifiers Act 2010 “and we will adhere to applicable sections of the legislation through the fulfilment of the Services.

For clarity, it is not mandatory to provide this documentation or information, but it does optimise the ability for AHN to provide you and other persons involved in your arrangement with the Services.

How your “PI” is collected, why is it needed and how is it used?

How we collect your PI

We collect your PI as part of offering or providing our Services and answering your questions.  This includes PI you provide through our Website (e.g. via our online contact us form, or when you register an account with us) and during telephone calls.  Generally, we collect your PI directly from you but may also collect your PI from other people or organisations if you have given consent for them to do so (e.g. an Education Agent for student/guest/users) 

Why we need your PI and our lawful grounds for processing

Under data protection laws, we are only allowed to process your PI if we have a legal basis for doing so. We have set out below how and why we use your PI and our legal basis for doing so.

How and why we use your PI The legal basis for our doing so

We need your PI to provide you with our Services which include:

  • assessing your eligibility and monitoring your compliance with host or student/guest/user (as relevant) contractual obligations;
  • providing you and other persons involved in your arrangement with the Services;
  • administering your account, including facilitating matters in relation to payment, insurance, and complaints;
  • using electronic profiling tools to identify the best matches for you in accordance with your stated preferences – no decisions are made only using the profiling tool;
  • ensuring compliance with our contractual and other legal obligations to you;
  • communicating with you in respect of the Services and responding to any queries you have;
  • share you PI with other parties (as set out below) for the purpose of providing the services.

The processing is necessary for the performance of a contract with you or in order to take steps at your request prior to entering into that contract.

Where we are processing any information about your nationality, ethnicity or medical conditions we will process that PI to perform our obligations under the contract only with your express consent, which you are asked to confirm at the time you supply the information to us.

We also process your PI to do the following:

  • to operate, administer, maintain, provide, analyse and improve the Website and the services available through the Website;
  • to investigate and address any comments, queries or complaints made by you regarding the Website, and any similar or related comments, queries or complaints from other users;
  • for administration, maintenance and improvements of the Website and/or our services;
  • creating and updating our database(s);
  • monitoring your use of the Website and contacting you about changes to the Website or for customer service purposes;
  • to ensure that content from the Website is presented in the most effective manner for you and for your device and customising the Website and its content to your particular preferences
  • sharing with third parties who assist with the provision of services (as set out below)

Subject to your rights set out below under the heading ‘Your rights’, the legitimate interest of providing Services to you and providing services via our Website.

To contact you for marketing purposes.

Where you have used our services we may contact you via email and SMS to tell you about similar goods and services that we offer. You have the right to ask us not to use your PI in this way at any time. 

If you have not used our services but we have obtained your PI via an enquiry on the Website then we will only contact you for marketing purposes if we have received your consent to do so. 

To comply with our legal obligations, including obligations relating to the protection of PI.

This processing is necessary due to a legal obligation that we are subject to. 

How your Individual Healthcare Identifiers (“IHI”) are collected, why is it needed and how is it used?

How and why we use your IHI? The legal basis for our doing so 

We may need your IHI to provide you with our Services as detailed above in Section “What other information can you agree to provide?”:

  • providing you and other persons involved in your arrangement with the Services;
  • using electronic profiling tools to identify the best matches for you in accordance with your stated preferences – no decisions are made only using the profiling tool;
  • ensuring compliance with our contractual and other legal obligations to you;
  • communicating with you in respect of the Services and responding to any queries you have;
The processing is necessary for the performance of a contract with you or in order to take steps at your request prior to entering into that contract.
Where we are processing any information about your IHI we will process that IHI to perform our obligations under the contract only with your express consent, which is given by uploading or providing your vaccination information to us.
We also adhere to the relevant legislation and statutory obligations of the Privacy Act, the Australian Privacy Principles (APPs), the Healthcare Identifiers Act (HI Act) and any applicable State or Territory legislation/s.

Who will have access to your IHI? The legal basis for our doing so
Only trained and currently employed staff of the MyStay International Pty Ltd Group, including Australian Homestay Network Pty Ltd staff, will be able to access and view any IHI you volunteer. The Healthcare Identifiers Act (HI Act) states that IHI may only be accessed, used, and disclosed for limited purposes, such as the providing of the specific Services.
Is the collection of IHI authorised by law? The legal basis for our doing so
At the time of publication, there is no Mandatory collection of IHI applicable by law, hence the providing of IHI by a user is purely voluntary. Not Applicable
Will the IHI be disclosed overseas? The legal basis for our doing so
At the time of publication, there is no need to disclose the IHI to an overseas party in the providing of Services or the fulfilment of a contract with the user. Not Applicable

IMPORTANT: By voluntarily providing your vaccination certificate including IHI information, your use of our website(s) constitutes a “Collection Notice under Australian Privacy Principles 5 (“AAP 5”). We reserve the right to update and amend the terms in regard to the providing, storing or use of IHI, in line with applicable legislation and statutory obligations of the Privacy Act, the Australian Privacy Principles (APPs), the Healthcare Identifiers Act (HI Act) and any applicable State or Territory legislation/s. Your continued use of any portion of our websites, following posting of this privacy statement will constitute your acceptance of the changes.

If you have given consent you may freely withdraw such consent at any time, such withdrawal will not affect any processing that has already taken place. If you withdraw your consent, and if we do not have another legal basis for processing your information (as set out above), then we will stop processing your personal data. If we do have another legal basis for processing your information then we may continue to do so subject to your legal rights (for which see information under ‘Your Rights’ below).

Can you remain anonymous or use a pseudonym?

We will, if practicable, allow you to use a pseudonym or to not identify yourself unless this is impractical or against the law.

In some instances, if you do not provide us with certain PI we may not be able to provide you with the relevant product, Service or information (including fulfilling the Main Purposes)). This may have an effect on whether we can begin or continue a relationship with you or allow you to use our Services.

What disclosures will we make?

We may disclose your PI to our service providers and partners in order to assist us in providing the Services to you. We use a network of global third-party service providers in order to ensure that the Services we provide to you are of the best possible standard. Some of our service providers, or the services they provide (like cloud-based storage solutions), are based outside of Australia. If your PI is transferred outside of Australia we will take all reasonable steps in accordance with the requirements of the relevant data protection laws, that adequate procedures are in place to ensure the security of your PI.

PI may be communicated electronically or verbally by phone. We may also disclose your PI in other ways with your consent or as required or permitted by law.

Disclosure to Other Users. As an integral part of providing our services to you, we may disclose your profile information to other students, guests and users. Photos and other profile information posted by you or supplied to us to post on your profile will be available to registered profiles that are matched with you. PI may be communicated to your matches electronically or verbally by phone. We will also share your PI with other companies within our group of companies (which means our subsidiaries, our ultimate holding company and its subsidiaries or to any prospective buyer or seller (and their representatives) in the event that we sell or buy any business or assets.

Disclosure By Law. You acknowledge and agree that we may disclose information you provide if required to do so by law, at the request of a third party, or if we, in our sole discretion, believe that disclosure is reasonable to (1) comply with the law, requests or orders from law enforcement, or any legal process (whether or not such disclosure is required by applicable law); (2) protect or defend Australian Homestay Network Pty Ltd, or a third party’s, rights or property; or (3) protect someone’s health or safety, such as when harm or violence against any person (including you) is threatened. 

 

Access, Confidentiality & Security

Is your PI confidential and secure?

We take all reasonable steps to keep the PI we hold secure and to ensure it is protected against misuse, loss, unauthorised access, modification or inappropriate disclosure. We may hold PI in both hard copy and electronic forms in secure systems accessible only to authorised personnel.

‘Cookies’ and related software

Our software may issue ‘cookies’ (small text files) to your device when you access and use the Website and you will be asked to consent to this at the time (e.g. when you first visit our website). Cookies do not affect your privacy and security since a cookie cannot read data off your system or read cookie files created by other sites.

Our Website uses cookies and other tracking and monitoring software to: distinguish our users from one another; collect standard Internet log information; and to collect visitor behaviour information. The information is used to track user interactions with the Website and allows us to provide you with a good experience when you access the Website, helps us to improve our Website, and allows us to compile statistical reports on Website visitors and Website activity.

You can set your system not to accept cookies if you wish (for example by changing your browser settings so cookies are not accepted), however please note that some of our Website features may not function if you remove cookies from your system. For further general information about cookies please visit www.aboutcookies.org or www.allaboutcookies.org.

Links to other websites

Our Website may contain links to other websites. Unless the other website is one of our websites, we are not responsible for the privacy practices of the owners of those websites.  We recommend that you read the privacy policy of any website that asks you to provide your PI.

Data Retention

Because many users tend to use our service at different points of their student or accommodation needs, we retain your personal information for continued service and convenience purposes until you advise us not to do so (See section “Contacting us about privacy” below). Notwithstanding the foregoing, we may retain personal information in order to comply with applicable laws, keep accurate records, resolve disputes, prevent fraud, enforce our Terms and Conditions of Service or other agreements, or for any other legally permissible purpose.

What will AHN do if there is a “Data Breach”

AHN is committed to managing personal information in accordance with privacy principles. We have systems and processes in place to ensure your data is secured and appropriately managed, including in the event of a suspected or known data breach. Any questions about data security can directed to us via the contact details below.

Your rights

You have the right

  • to request access to information about PI that we may hold and/or process about you, including: whether or not we are holding and/or processing your personal data; the extent of the personal data we are holding; and the purposes and extent of the processing. For your protection, we may require you to confirm your identity before access to your PI is granted.  In most cases, we can provide you with a summary of your PI free of charge.  However, in some circumstances, reasonable costs may be charged to you in accessing your PI, subject always to the law.  
  • to have any inaccurate information we hold about you be rectified and/or updated. If any of the PI that you have provided changes, or if you become aware of any inaccuracies in such PI, please let us know in writing giving us enough information deal with the change or correction.
  • in certain circumstances to request that we delete all PI we hold about you (the ‘right of erasure’). Please note that this right of erasure is not available in all circumstances, for example where we need to retain the personal data for legal compliance purposes. If this is the case, we will let you know.
  • in certain circumstances to request that we restrict the processing of your PI, for example where the personal data is inaccurate or where you have objected to the processing (see below).
  • to request a copy of the PI we hold about you and to have it provided in a structured format suitable for you to be able to transfer it to a different data controller (the ‘right to data portability’). Please note that the right to data portability is only available in some circumstances, for example where the processing is carried out by automated means. If you request the right to data portability and it is not available to you, we will let you know.
  • in certain circumstances to object to the processing of your PI. If so, we shall stop processing your PI unless we can demonstrate sufficient and compelling legitimate grounds for continuing the processing which override your own interests. If, as a result of your circumstances, you do not have the right to object to such processing then we will let you know.
  • in certain circumstances not to be subject to a decision based solely on automated processing, for example where a computer algorithm (rather than a person) makes decisions which affect your contractual rights. Please note that this right is not available in all circumstances. If you request this right and it is not available to you, we will let you know.
  • to object to marketing. You can object to this at any time by emailing us at:  data-protection-office@mystayinternational.com

Contacting us about privacy

You are responsible for ensuring that your PI is accurate, current and complete.  If you have a registered account with us, you can update or change your PI and email preferences at any time via your account’s profile page.  

If you have a question or want to make a complaint about how we handle your PI, please contact us using the details below.  We will review your complaint and will respond to you after we have carefully considered it.  We may require further information from you in order to resolve any complaints.  Requests may take up to 20 working days to complete. 

We can be contacted via:

Contacting us about receiving a summary of your “PI”

If you wish for Australian Homestay Network Pty Ltd to provide you with your currently held “PI” on your profile, across any of our services, please contact us as below:

Contacting us about removing your “PI” from the system

If you wish for Australian Homestay Network Pty Ltd to remove your “PI” from our system, across any of our services, please contact us as below:

Please note that such removal may impact on your ability to access or use the Services that we provide.

Complaints

If you have any concerns about how we collect or process your PI then you have the right to lodge a complaint with a supervisory authority, which for Australia is Office of the Australian Information Commissioner at  www.oaic.gov.au.

Changes to this policy

We may update this Privacy Policy from time to time and may notify you if there are significant changes.  Therefore, it’s important that you check this Privacy Policy from time to time to see if any changes have been made.

Acceptance of Privacy Statement

Your use of our website(s), including any dispute concerning privacy, is subject to this privacy statement and the applicable Terms and Conditions of Service. BY USING OUR WEBSITE, YOU ARE ACCEPTING THE PRACTICES SET OUT IN THIS PRIVACY STATEMENT AND THE APPLICABLE TERMS AND CONDITIONS OF SERVICE.

If we decide to change our privacy policy, we will post those changes to this privacy statement page and any other places we deem appropriate so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we disclose it. We reserve the right to modify this privacy statement at any time, so please review it frequently. If we make material changes to this policy, we will notify you here, or by other means, such as e-mail, at our discretion.

Your continued use of any portion of our website following posting of the updated privacy statement will constitute your acceptance of the changes.

Effective Date

This privacy statement was last revised on 14 April 2023