NewAccess Privacy Collection Statement

Beyond Blue collects your personal information (including sensitive information such as health information) for the primary purpose of providing the NewAccess for Small Business service.

Personal information collected may include information such as:

• your name
• your date of birth
• sensitive information (such as gender, marital status, country of birth, Aboriginal and/or Torres Strait islander status)
• your contact details (including telephone number, address and/or email address, as well as your emergency contact details)
• information about your health and medical history
• records of interactions with you (such as case notes, feedback you provide during your time in the program)
• audio and video recordings of telephone conversations (telehealth)
• telecommunications data and information on website usage, and
• details of your small business (such as business location/size/age, employee numbers, industry)

In most cases, Beyond Blue collects personal information from you when you use the NewAccess for Small Business service, use the Beyond Blue website, provide feedback or make a complaint.

Beyond Blue may also collect information about you from other sources, including personal information and telecommunications data, even if you don’t identify yourself. Examples of this include referrals from the Beyond Blue Support Service and/or other referral pathways such as GPs or health professionals.

Your personal information is used by Beyond Blue to manage the NewAccess for Small Business service and the care provided to you, to manage complaints and comply with laws, and for other purposes detailed in the privacy policy.

For example, your personal information may be used to:

• identify you and determine the appropriate way for the NewAccess for Small Business service to interact with you, and otherwise manage the relationship with you
• provide mental health coaching and treatment sessions to you
• manage complaints and legal issues
• interact with regulators and governmental agencies
• meet our legal obligations, including to report risks of harm to you and other people, and
• develop and improve the NewAccess for Small Business service generally

Your de-identified personal information may be used by Beyond Blue for the purposes of analysing and improving the community services. De-identified and aggregated information may also be shared with government funders and/or agencies, research and evaluation partners and/or used in academic articles, printed publications and/or presentations.

De-identified feedback you provide to Beyond Blue may be used to market and promote the NewAccess for Small Business service and Beyond Blue.

This means no data used as explained above directly or indirectly identifies you.

Beyond Blue may need to disclose your personal information to other persons or organisations that can help you, such as healthcare providers or other referral parties. Beyond Blue will ask for your permission before sharing your personal information with those persons or organisations. Please note, this does not apply to individuals who present in crisis and need immediate support.

In addition, personal information may be disclosed to third parties that provide services relating to the purposes for which the information is collected or able to be used, or otherwise where you would reasonably expect disclosure to third parties.

For example, your personal information may be accessible in a secure environment to Beyond Blue by:

• service providers and contractors, including service providers that host website servers, other IT service providers and analytical service providers
• professional advisers, such as auditors and lawyers, and
• auditors for regulatory and/or compliance purposes

Beyond Blue may also disclose your personal information:

• to relevant authorities where there is a child or young person at risk of harm (including physical harm, sexual, emotional or psychological abuse, or neglect)
• to relevant authorities where there is a serious risk of harm to you or another adult person or a serious threat to public health, welfare or safety, and
• if it is required or authorised by or under an Australian law or a court or tribunal order.

The circumstances in which Beyond Blue may disclose your personal information to recipients located overseas are set out in their privacy policy.

Beyond Blue’s privacy policy contains more information about our privacy practices, including:

• how you may access and correct the personal information held about you, and
• how to complain about a suspected breach of your privacy or about how your personal information has been handled.
• you can obtain the latest versions of our privacy policy by clicking the following link: Beyond Blue Privacy Policy

Should you wish to withdraw from the NewAccess for Small Business service and/or have your personal information removed from Beyond Blue’s platforms, please contact Beyond Blue.

Beyond Blue Email: privacy@beyondblue.org.au

Beyond Blue Post: Attention: The Privacy Officer, Beyond Blue
Suite 501, 278 Flinders Lane
Melbourne VIC 3000

This NewAccess for Small Business Privacy Collection Statement was last updated July 2026 and may change from time to time. Please consult this statement regularly for any changes.