Kind of personal information we collect
The kinds of personal information that we collect and hold about you may include:
- identifying information, such as your name and date of birth
- contact information, such as your postal and/or residential address, email address and telephone number
- donation details, including credit card or other payment information
- personal information provided through event registrations or online forms
- usage information relating to our website (such as IP address, browser type, and operating system)
- information you send us in response to social media callouts or other direct communications
- social media handles and other social media profile information that you make available to us or to the public
- records of our communications with you, including any messages you send us, and
- any other information you provide to us directly.
Sensitive information
We may also collect sensitive information, including health information. For example:
- when you send us your personal stories about cancer diagnoses, including in response to a callout or so that we can share your story publicly, and
- dietary requirements for events.
How we collect personal information
We collect personal information about you in various ways, including:
- directly from you via online forms (donations, event registrations, newsletter subscriptions, contact forms)
- through our website, including cookies and analytics
- via email or other direct communications
- through social media callouts or campaigns
- indirectly from third-party service providers (e.g., payment processors, event management platforms), and
- in person at events or through other community engagement activities.
Purposes for which we use personal information
We use personal information that we collect about you for the following purposes, such as:
- managing relationships with donors, supporters, and volunteers, including (but not limited to) sharing your personal stories about cancer diagnoses which you have provided to us
- processing donations and issuing receipts for donations
- communicating updates, news, and event information in relation to the Aftershock
- organising and managing events and campaigns
- improving our website and user experience through analytics
- complying with legal and regulatory obligations, and
- any other purpose you have consented to or as otherwise permitted by law.
We may from time to time use your personal information in order to send you marketing materials about products or services that we think you may be interested in (including in some cases products and services that are provided by a third party). You can opt-out of receiving marketing communications from us by contacting us at hello@theaftershock.org or following the “unsubscribe” link in the communication.
We may also use and disclose your information for other purposes as authorised by you, or in accordance with your requests or instructions.
People to whom we disclose personal information
We may share personal information about you with:
- IT service providers and website hosts (including those providing cloud storage or analytics services to us)
- payment processors (for handling donations)
- event management platforms
- regulatory authorities, if required by law, and
- other third parties as authorised by you or as required or permitted by law.
We may collect or store your personal information via cloud-based platforms. These platforms may store data on servers located outside Australia, including North America, South America, the European Union, and Asia.
Cookies
Our website uses cookies and similar tracking technologies to collect usage data for analytics and to improve your experience. You can disable cookies in your browser settings, but some website functionality may be affected.
Storage and security of personal information
We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. These steps include:
- storing information on secure servers and cloud platforms with password protection
- restricting access to authorised personnel only, and
- using encryption and other security technologies where appropriate.
Access and correction
You have the right to request access to the personal information we hold about you and to request its correction if you believe it is inaccurate, incomplete, or out of date. To make a request, please contact our Privacy Officer using the details below. We may require you to verify your identity before processing your request. There may be reasons we cannot provide you with access. If this happens, we will let you know why we cannot comply with your request.
Complaints
We try to meet the highest standards in order to protect your privacy. However, if you are concerned about the way in which we are managing your personal information and think we may have breached the Australian Privacy Principles, or any other relevant obligation, please contact us using the contact details set out below. Complaints must be lodged in writing. We will deal with the matter within a reasonable time, and will keep you informed of the progress of our investigation.
If we have not responded to you within a reasonable time or if you feel that your complaint has not been resolved satisfactorily, you can contact us to discuss your concerns. You are also entitled to make a complaint to the Office of the Australian Information Commissioner (OAIC). Contact details can be found at the OAIC’s website: www.oaic.gov.au.
Changes to this policy
We may make changes to this policy from time to time, to take into account changes to our standard practices and procedures or where necessary to comply with new laws and regulations. The latest version of this policy will be available on our website. We encourage you to review this policy periodically.
Contact Details
For any privacy-related queries, requests for access or correction, or complaints about how we have handled your personal information, please contact:
Email: hello@theaftershock.org
We will respond to your query or complaint within a reasonable time. If you are not satisfied with our response, you may contact the OAIC.
