Website Privacy and Data Protection Statement of Victorian Ports Corporation (Melbourne)

Victorian Ports Corporation (Melbourne) (VPCM) is bound by the Privacy and Data Protection Act 2014 (Vic) (Privacy and Data Protection Act). The privacy and data protection statement and principles in this document are in accordance with this law. VPCM is committed to protecting the privacy of personal information.

This statement applies only to the VPCM website and does not apply to linked third party websites. When you access another website via a link from this website, you should read the privacy statement of that website.

This privacy and data protection statement supports VPCM’s need to collect information and the right of the individual to privacy. It ensures that VPCM can collect personal information and data necessary for its services and functions, while recognising the right of individuals to have their information and data handled in ways that they would reasonably expect and in ways that protect the privacy of their personal information.

Personal information will be collected and used by VPCM only in accordance with the Privacy and Data Protection Act. VPCM may collect and use personal information for the following purposes:

  • to carry out VPCM’s objects and functions under the Transport Integration Act 2010 (Vic) and in accordance with the Port Management Act 1995 (Vic);
  • to plan, fund, monitor and evaluate objects and functions;
  • to comply with VPCM’s reporting requirements or other legal requirements; and
  • to investigate and/or defend any legal claims against VPCM or its employees.

Personal information

Personal information means information or an opinion about an individual whose identity is apparent, or can reasonably be ascertained, from that information or opinion. Examples of personal information include: name, address, date of birth, sex, marital status and financial details.

Personal information may also be sensitive information, which is given additional protections under the Privacy and Data Protection Act. Sensitive information includes information or an opinion about an individual’s racial or ethnic origin, political opinions or affiliations, religious beliefs, sexual preferences, membership of groups or criminal record.

Online collection and use of personal information

VPCM does not collect or record personal information online unless you choose to provide your personal information through our contact and feedback email services. VPCM does not add your email addresses or any other contact details without your consent. They may be used by VPCM to contact you in seeking that consent.

If you send email messages containing personal information, we will use that information for the purposes for which you provided it. These purposes include the main purposes of VPCM collecting and using personal information submitted through our website, which are to:

  • respond to your message, including your comments or requests for information about VPCM, or activities of VPCM; and
  • respond to your comments or requests about the website itself.

Your personal information will be used by and disclosed to VPCM officers and/or contractors whose duties require them to use it, and who are required to comply with VPCM’s obligations under the Privacy and Data Protection Act in their use and handling of your personal information. VPCM may also share your personal information with the port of Melbourne operator (Port Manager) for the purpose of supporting its management, operation and development of the port of Melbourne and its precinct, delivering its facilities and services and achieving integrated freight transport outcomes. Port Manager is subject to the Privacy Act 1988 (Cth) and its privacy policy can be found on the Port Manager’s website here:

VPCM will not otherwise disclose your personal information to a third party except in accordance with the Privacy Act. This may include where we are required or authorised to do so by law. In the event of an investigation into suspected unlawful or improper activity, a law enforcement agency or government agency may exercise its legal authority to inspect the VPCM web server's records (e.g. in relation to hacking or abusive messages).

Collection and use of website visit data

VPCM does not use cookies on our website to identify and store personal information.

The following information may be automatically recorded by this website's server for statistical and system administration purposes:

  • the Internet Protocol (IP) number assigned to your computer when you access the internet
  • the domain name of the account you use to access the internet (e.g. '' or '')
  • the date and the time of your visit to this website
  • the pages you accessed and downloaded
  • the address of the last website you visited (if linked from another website)
  • the operating system you are using (eg. Windows NT, Macintosh OS X)
  • the type of browser you are using (eg. Netscape, Internet Explorer).

This information will only be used to update and improve our website. To the extent that this information could make you identifiable, VPCM will not attempt to identify you from the records the server automatically generates unless that is authorised under the Privacy and Data Protection Act (e.g. necessary to investigate a breach of law or regulation).

Information Privacy Principles

VPCM has adopted the 10 information privacy principles (IPP) set out in Schedule 1 of the Privacy and Data Protection Act as minimum standards in relation to handling personal information. The IPPs are summarised below along with a description of how VPCM implements the IPPs. The IPPs can be obtained in full from the Commissioner for Privacy and Data Protection ( or in Schedule 1 of the Privacy and Data Protection Act (

Collection: VPCM must collect only personal information that is necessary for performance of its functions. Individuals should be told why this information is required, what it will be used for, who it may be disclosed to and that they can gain access to their personal information.

Use and disclosure: VPCM must only use or disclose personal information:

  • for the primary purpose for which it was collected
  • for a related secondary purpose (which must be a directly related purpose in the case of health or sensitive information) that the person would reasonably expect such as the purposes explained in this statement
  • with the consent of the person
  • unless otherwise required, permitted or authorised by law

Data quality: VPCM must take reasonable steps to make sure personal information is accurate, complete and up-to-date.

Data security: VPCM must take reasonable steps to protect personal information from misuse, loss, unauthorised access, modification and disclosure.

Openness: VPCM must document clearly expressed policies on management of personal information and make these policies available to anyone who asks for them.

Access and correction: Individuals have a right to seek access to their personal information and make corrections. If you believe we hold personal information about you, you can ask for a copy of your personal information by sending an email to You can ask us to correct, amend, or update the information we hold about you if you establish that it is inaccurate, incomplete, or out of date. Alternatively, you may apply for access to your personal records under the Freedom of Information Act 1982 (Vic). VPCM may refuse to provide access in certain circumstances.

Unique identifiers: A unique identifier is usually a number assigned to an individual in order to identify the person for the purposes of an organisation’s operations. VPCM will limit the use of unique identifiers as required by the Privacy and Data Protection Act.

Anonymity: Wherever lawful and practicable, VPCM will provide individuals with the option to interact anonymously with us.

Transborder data flows: Transfer of personal information outside Victoria is restricted by the Privacy and Data Protection Act. Personal information may be transferred only if the recipient protects privacy under standards similar to Victoria’s IPPs.

Sensitive information: The Privacy and Data Protection Act restricts collection of sensitive information about an individual’s racial or ethnic origin, political views and affiliations, religious beliefs, sexual preferences, membership of groups or criminal record to the circumstances where the individual has consented or the collection of such information is required by law.


A complaint about information privacy is an expression of dissatisfaction with VPCM’s procedures, staff, agents or quality of service associated with the collection or handling of personal information. VPCM will be efficient and fair when investigating and responding to information privacy complaints.

Feedback on privacy and data protection statement

This policy may be modified or expanded over time. If you have any suggestions or comments, please email us at