Rewiring Australia Privacy Policy

Overview

Rewiring Australia (we, us, our) is committed to protecting the privacy of all individuals who interact with us, whether as donors, supporters, customers, or website visitors. This Privacy Policy explains how we collect, use, disclose, and manage your Personal Information in accordance with the Privacy Act 1988 (Cth) (Privacy Act) and the Australian Privacy Principles (APPs).


By visiting our website, signing up to our mailing list, making a donation, purchasing from our online shop, or otherwise providing us with your Personal Information, you consent to the collection, use, and disclosure of your Personal Information as described in this policy.
A copy of the Australian Privacy Principles is available from the website of the Office of the Australian Information Commissioner at www.oaic.gov.au.

What is Personal Information and Why Do We Collect It?

Definition

Personal Information is information or an opinion about an identified individual or an individual who is reasonably identifiable, whether the information is true or not and whether recorded in material form or not (Privacy Act 1988 (Cth), s 6).

Sensitive Information is a subset of Personal Information and includes information about a person’s racial or ethnic origin, political opinions, religious beliefs, health, or sexual orientation. We do not intentionally collect Sensitive Information unless specifically required and consented to.

What Personal Information We Collect

The Personal Information we collect depends on how you interact with us. It may include:

  • Contact details: name, email address, phone number, postcode, and billing/delivery address
  • Donation details: payment information (credit card details processed via third-party payment processors), donation history, and gift amounts
  • Household information: details about home appliances and energy assets you voluntarily provide (for example, through surveys or programme applications)
  • Shopping information: purchase history, order details, and delivery preferences collected through our online store
  • Website usage data: cookies, device identifiers, IP addresses, and browsing behaviour collected automatically when you visit our website
  • Supporter information: campaign actions taken, petition signatures, and engagement history

We collect your Personal Information through:

  • Online donation forms
  • Newsletter and other signup forms, including surveys
  • Our online store
  • Cookies and tracking technologies on our website
  • Our customer relationship management platform

Why We Collect, Use, and Disclose Your Personal Information

We collect, hold, use and disclose your Personal Information for the following primary purposes:

  • Processing and receipting donations made to us
  • Operating and fulfilling orders through our online shop
  • Communicating with you about our campaigns, news, events, and fundraising activities
  • Personalising and improving your experience with us, including tailoring communications to your interests and location
  • Conducting research and analysis to improve our programmes and supporter engagement
  • Complying with our legal obligations

We will not use or disclose your Personal Information for purposes other than those for which it was collected unless:

  • You have consented to the alternative use or disclosure;
  • We are required or authorised to do so by law or a court/tribunal order; or
  • The use or disclosure is otherwise permitted under the Privacy Act.

Disclosure of Your Personal Information

We do not sell your Personal Information. However, we disclose Personal Information to the following categories of third parties in order to carry out our activities:

Service Providers and Technology Partners

We engage trusted third-party service providers to help us operate our website, process donations, manage supporter relationships, fulfil online orders, and communicate with you. These providers act on our behalf and may receive or process your Personal Information in the course of providing their services to us. The categories of service providers we use include:

  • Donation processing: third-party payment processors who handle credit card transactions and billing information on our behalf. These processors are contractually required to maintain appropriate security standards, and we do not store raw payment card details on our own systems.
  • Customer relationship management and communications: we use a customer relationship management (CRM) platform to store supporter contact details, manage our email communications, and co-ordinate our engagement with you across our website and other channels. Your name, email address, postcode, and engagement history may be held and processed within this system.
  • Website and online shop infrastructure: our website and online store are operated through third-party platforms. Personal Information submitted through our website forms or collected during purchases (including name, email address, billing and delivery address, and purchase history) is processed and stored by these platforms on our behalf.
  • Fulfilment and logistics: where you purchase goods from our online shop, we may disclose your name and delivery address to third-party fulfilment or postage providers to the extent necessary to complete your order.

In all cases, we take reasonable steps to ensure that third-party service providers are bound by written contracts requiring them to protect your Personal Information and use it only for the purpose for which it was disclosed.

Advertising and Analytics

We use third-party digital advertising and analytics providers to promote our work, measure the effectiveness of our campaigns, and reach new supporters. For these purposes, we may share your Personal Information (such as email addresses, in hashed or pseudonymised form) with advertising platforms and data analytics providers. This may include sharing data to build audience segments and to identify new supporters with similar characteristics to our existing supporter base.

We take reasonable steps to ensure that data shared with advertising and analytics providers is transmitted securely and that our arrangements with those providers are consistent with our obligations under applicable privacy laws.

You may opt out of interest-based advertising through the settings available on the advertising platforms you use, or by contacting us using the details below.

Other Disclosures

We may also disclose your Personal Information:

  • Where required or authorised by law (including to law enforcement or regulatory bodies);
  • To professional advisors (e.g. lawyers, accountants) under obligations of confidentiality; and
  • In the event of a merger, acquisition, or sale of assets, subject to appropriate confidentiality obligations.

Overseas Disclosure

Some of the third-party service providers we use are based overseas, including in the United States of America.

Where we disclose Personal Information to overseas recipients, we take reasonable steps to ensure the recipient does not breach the APPs in relation to that information. In practice, this means we rely on contractual protections, platform data-processing agreements, or the recipient’s participation in an equivalent privacy framework (such as the EU-US Data Privacy Framework or equivalent commitments).

By providing your Personal Information to us, you consent to it being disclosed to overseas recipients in the circumstances described in this policy. We cannot guarantee that overseas recipients will comply with Australian privacy laws, and by consenting you acknowledge this.

Security of Your Personal Information

We take the security of your Personal Information seriously and take reasonable steps to protect it from misuse, interference, loss, and unauthorised access, modification, or disclosure. Our security measures include:

  • All web pages on which payment information is submitted use HTTPS/SSL encryption
  • Credit card details are processed and tokenised by our third-party payment processor; we do not store raw credit card numbers on our own systems
  • Access to Personal Information held in our CRM and other systems is restricted to authorised personnel
  • Our third-party service providers are required, under contract or their own policies, to maintain appropriate data security standards

If we become aware of a data breach that is likely to result in serious harm to any individual whose Personal Information is involved, we will notify the Office of the Australian Information Commissioner and affected individuals as required under the Notifiable Data Breaches scheme (Privacy Act 1988 (Cth), Part IIIC).

When your Personal Information is no longer needed for the purpose for which it was collected, we will take reasonable steps to destroy or de-identify it.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to improve your browsing experience, measure website performance, and enable advertising functions. Cookies are small text files stored on your device by your browser.

We use the following types of cookies:

  • Essential cookies: required for the website to function (e.g. shopping cart, form submission)
  • Analytics cookies: used to understand how visitors use our website
  • Advertising cookies: used by our advertising partners to deliver relevant ads and measure ad effectiveness

You can control or disable cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our website. Where required by law, we will seek your consent before placing non-essential cookies on your device.

Access to and Correction of Your Personal Information

You may request access to the Personal Information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant, or misleading. We will not charge a fee for an access request but may charge a reasonable fee for the cost of giving access if the request is complex.

To request access or correction, please contact our Privacy Officer using the details below. We may require you to verify your identity before releasing any personal information. We will not release personal information to a third party on your behalf unless we can verify that you have authorised that release.

We will respond to access and correction requests within a reasonable time. If we deny an access or correction request, we will give you written reasons and information about how to make a complaint.

Opting Out of Communications

You may unsubscribe from our email communications at any time by:

  • Clicking the ‘unsubscribe’ link in any marketing email we send you; or
  • Contacting us directly using the details below.

Please note that even if you unsubscribe from marketing communications, we may still need to contact you for transactional purposes (e.g. order confirmations, donation receipts, or service-related notices).

You may also opt out of interest-based advertising through the settings available on the advertising platforms you use, or by contacting us using the details below.

Quality of Personal Information

We take reasonable steps to ensure that the Personal Information we hold is accurate, complete, and up to date at the time we collect it and when we use or disclose it. If you believe the information we hold about you is incorrect or out of date, please contact us so we can update our records.

Policy Updates

This Privacy Policy may be updated from time to time to reflect changes in our practices or applicable law. The current version will always be available on our website. Where changes are material, we will take reasonable steps to notify you (for example, by email or a notice on our website). Your continued use of our services following any update constitutes acceptance of the revised policy.

Privacy Complaints and Enquiries

If you have a question, concern, or complaint about how we handle your Personal Information, please contact our Privacy Officer in the first instance. We take all privacy complaints seriously and will respond within a reasonable time (generally 30 days).

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

  • Website: www.oaic.gov.au
  • Phone: 1300 363 992
  • Post: GPO Box 5218, Sydney NSW 2001

Contact Us

Privacy Officer

Rewiring Australia

Suite 517 / 55 Miller Street

Pyrmont NSW 2009

Australia

Email: hello@rewiringaustralia.org