Privacy policy

⚠ Working draft — requires counsel sign-off before launch

What we collect

When you pledge, donate, RSVP or volunteer we collect what you give us: name, email, postcode, and optionally mobile number and occupation (occupation is collected for electoral disclosure on donations). Postcode is used to match you to a state electorate so we can tell you about actions where your voice counts.

What we never do

• We never sell or rent your details.
• We never send SMS without separate, explicit opt-in.
• We never load tracking scripts before you consent via the cookie banner.

Who processes it

Supporter data lives in our CRM ([Action Network / NationBuilder — TBC]); payments are processed by Stripe, who alone hold your card details; email is delivered via the CRM's provider; SMS via [Twilio]. Each processor is bound by contract and listed here when finalised. Personal information is hosted in Australia, or where it is not, the justification is documented here.

Retention and your rights

We keep supporter records for the life of the campaign plus the retention period required by Victorian electoral law, then delete them. You may request a copy of your data, correction, or deletion at any time via the contact form — actioned within 30 days. Complaints about privacy handling follow our complaints policy and may be escalated to the OAIC.

Cookies and analytics

We use GA4 and a privacy-respecting product analytics tool, plus advertising pixels (Meta, Google) only with your consent. The consent banner blocks these scripts until you choose — it is not decorative.