Security & Legal

Management & Security of Personal Data

THRF Group will hold your personal information in both hard copy and electronic formats. In some cases, we engage third parties to host electronic data (including data in relation to the services we provide) on our behalf. We take security measures to protect the personal information we hold which includes physical controls as well as technological controls (for example, restriction of access, firewalls, the use of encryption, passwords and digital certificates).
We also have policies and processes which govern document retention and data breach incidents. We endeavour to ensure that personal information is kept as current as possible, and that irrelevant or excessive data is deleted or made anonymous as soon as reasonably practicable. However, some personal information may be retained for varying time periods in order to comply with legal and regulatory obligations and for other legitimate business reasons.
THRF Group will take all reasonable steps to ensure that the personal information it collects, uses or discloses is accurate, complete and up to date.
THRF Group will protect all personal information it holds from misuse, loss, unauthorised access, modification or disclosure by:
1. Implementing industry standards for the security and protection of personal information; and
2. Storing information in either electronic and/or hard copy forms with access restricted to authorised personnel only.
THRF Group will take reasonable steps to destroy or permanently de-identify personal information if it is no longer needed for any purpose.
As a condition of employment, THRF Group employees are required to respect the confidentiality of the information and the privacy of individuals. THRF Group will take reasonable steps to ensure that the personal information it collects, uses, retains or discloses is accurate, complete and up to date and is protected from misuse, interference, loss, unauthorised access, modification or disclosure.

Access Control & Personnel
Access to THRF Group’s technology resources is only permitted through secure connectivity and requires multi-factor authentication. Our password policy requires complexity, expiration, and lockout and disallows reuse. Role-based access controls are implemented for access to information systems and access is revoked immediately after employee termination.
THRF Group maintains and regularly reviews and updates its information security policies and communicates these policies to all employees. THRF Group conducts background screening at the time of hire and provides ongoing privacy and security training.
THRF Group maintains a documented vulnerability management program which includes periodic scans, identification, and remediation of security vulnerabilities on servers, workstations, network equipment, and applications. All networks are regularly scanned using trusted third-party vendors. Critical patches are applied to servers on a priority basis and as appropriate for all other patches.
We also conduct regular internal and external penetration tests and remediate according to severity for any results found.

Data Breaches
Despite best efforts, no method of transmission over the Internet and no method of electronic storage is perfectly secure. We cannot guarantee absolute security. However, THRF Group complies with the Notifiable Data Breaches Policy and we are required to notify individuals whose personal information is involved in a data breach that is likely to result in serious harm.

Goods & Services
THRF Group is licensed to collect online donations to support people in hospitals across South Australia through vital health and medical research, and improved patient care. THRF is a Registered Charity, a Public benevolent Institution, a Tax Deductible Gift Recipient and has a Charitable Collections licence. The Hospital Research Foundation is incorporated in South Australia.

The Australian Business Numbers for our charities are listed below:
THRF, ABCR, APC, AHR,
KTDRA, CH, CSA: 86 248 830 078
MESHA: 80 069 520 869
THRF-Stroke: 49 290 593 140
PSA: 29 954 571 742
THRF-Palliative Care: 26 606 929 707

All online donations will be issued with a receipt.

Online Payment Privacy
The Hospital Research Foundation uses recommended measures to secure your personal information. Transactions are processed directly through the chosen payment gateway. All credit card details are deleted from the Internet Server immediately. No personal information is held or stored on The Hospital Research Foundation Group website.

Security Capabilities & Policy for Transmission of Payment Card Details
To ensure the highest level of security for your transactions, 128bit Secured Sockets Layer (SSL) encryption is used on this site.

By accessing or using THRF Group’s website, you agree to be legally bound by these terms and conditions of use as they may be modified and posted on our website from time to time.

We reserve the right to alter, suspend or discontinue any aspect of our website or the content or services available through it, including your access to it. Unless explicitly stated, any new and current features including new content, and/or the release of new interactive tools or downloadable resources shall be subject to these terms and conditions.

Unless otherwise specified, the materials published on our website are presented solely for your private, personal and non-commercial use. In all other cases, permission must be sought from THRF Group to use the materials. You assume total responsibility and risk for your use of our website and the use of all information contained within it. For more information, see the Medical Disclaimer paragraph below.

THRF Group makes no representations whatsoever about any other websites that you may access through our website or which may link to our website. When you access any other website you understand that this is independent from THRF Group and that we have no control over the content or availability of that website. In linking to any other website, THRF Group does not endorse or accept any responsibility for the content, or the use of, such a website and shall not be liable for any loss or damage caused or alleged to be caused by or in conjunction with use of or reliance on any content, goods, or services available on or through any other website or resource. Any concerns regarding any external link shall be directed to its website administrator.

We will try to make our website available and accessible but cannot guarantee that our website will operate continuously or without interruptions or be error-free and can accept no liability for its unavailability or malfunction. You must not attempt to interfere with the proper working of our website and, in particular, you must not attempt to circumvent security, tamper with, hack into, or otherwise disrupt any computer system, server, website, router or any other internet connected device.

In displaying comments made by external users of this website, The Hospital Research Foundation Group does not endorse or accept any responsibility for the content, and shall not be liable for any loss or damage caused or alleged to be caused by or in conjunction with use of or reliance on any content, goods, or services available described in these comments.

Currency for Online Donations
The Hospital Research Foundation Group’s country of domicile is Australia. All transactions on this website must be made in Australian (AUD) dollars.

Refund Policy
Online donations to THRF Group are non-refundable. In the event of a payment processing error or payment query please contact THRF Group on 08 8244 1100 or in writing at [email protected] or to the address below:
The Hospital Research Foundation Group
62 Woodville Road
Woodville SA 5011

Information about research, diseases, treatments and general matters has been written and edited by people internally and externally of the Foundation for these websites. The Hospital Research Foundation Group makes every effort to ensure that information provided is as up-to-date and accurate as possible. However, the Foundation does not accept liability for misinterpreted or incorrect information. It is also not the intention of The Hospital Research Foundation Group and you must not use the information on this website to recommend any particular form of research or treatment for self-diagnosis or treatment therapy. At all times you need to discuss the information you find on this website, or any other source, with your doctors or health team, given your unique situation and status.