Oncaidia Limited Privacy Policy

Introduction
Oncaidia Limited (Oncaidia) is committed to protecting the privacy of individuals’ personal information.
This Privacy Policy sets out the principles that Oncaidia will follow in collecting, using and storing that personal information. 
“Personal information” is information or an opinion, whether true or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion.
Oncaidia will comply with the Privacy Act 1998 (Commonwealth) (Act) and the National Privacy Principles that are contained in that Act and other applicable laws in relation to privacy.
Collection of Personal Information
Oncaidia will not collect personal information from individuals unless it is necessary to perform one or more of the functions or activities carried out by Oncaidia.  The types of information collected and the purposes for which that information will be used will depend on the circumstances. Examples of instances where personal information may be collected by Oncaidia include:

• collecting personal information from shareholders and optionholders to enable proper records to be kept and for reporting purposes;
• collecting personal information from individuals who enter into agreements or other transactions with Oncaidia for the purpose of administering those agreements or transactions or for reporting purposes.

Oncaidia will take reasonable steps to ensure that the personal information that is collected is complete and up to date and, where it is reasonably practicable, will only collect personal information about an individual from that individual.
Use and Disclosure of Personal Information
At the time that the personal information is collected, Oncaidia will take reasonable steps to ensure that the individual is aware of:

• why the personal information is being collected;
• who else the personal information might be given to;
• the fact that the individual is able to gain access to the information collected; and
• how to contact Oncaidia.

If Oncaidia collects personal information about an individual from someone else, Oncaidia will take reasonable steps to ensure that the individual is aware of the above matters.
Oncaidia will only use or disclose this personal information for:

• the purpose for which it was collected;
• any related purpose for which it would reasonably be expected to be used or disclosed; 
• a purpose required or permitted by law; or
• a purpose for which the individual has provided consent.

Examples of instances where Oncaidia may disclose personal information about individuals to third parties include disclosure to providers of services to Oncaidia, government agencies, regulatory authorities (including ASX Limited), related bodies corporate of Oncaidia and professional advisers of Oncaidia.  Oncaidia requires its service providers to keep the personal information confidential and not use it for any purpose other than performing those services.

Security of Personal Information
Oncaidia will take reasonable steps to ensure that the personal information that has been collected is protected from misuse and loss and from unauthorised access, modification and disclosure.
Oncaidia will also take reasonable steps to ensure that the personal information that is no longer necessary for the disclosed purpose is destroyed or permanently de-identified.

Access to Personal Information
At the request of an individual, Oncaidia will, in most circumstances, provide access to an individual to any personal information that is collected about that individual.  There are certain circumstances where Oncaidia will not provide an individual access to such personal information in accordance with the Act. These circumstances include where providing access would have an unreasonable impact on the privacy of others, where providing access would reveal commercially sensitive information about the organisation or where providing access would be unlawful.

Amendment of Policy
Oncaidia may amend this Policy from time to time.  Please contact Oncaidia for an up to date copy of the Policy.

Concerns or queries
If you have any concerns or queries about any personal information that may be collected, used or disclosed by Oncaidia or Oncaidia’s Privacy Policy, please contact Oncaidia on [insert number].