1. Our Commitment to Privacy

The Gentle Sensory Project ("we", "us", "our") respects your privacy. This policy explains how we collect, use, and manage your personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

2. Information We Collect

We only collect information that is reasonably necessary for our activities. This may include:

• Supporters & Donors: Name, contact details (email, phone, address), and payment/donation history.
• Volunteers & Members: Name, contact details, emergency contacts, and relevant skills or background checks.
• Website Users: IP addresses, cookies, and data about how you interact with our site to help us improve your experience.

3. How We Collect Information

We usually collect information directly from you when you:

• Make a donation or sign up for a membership.
• Subscribe to our newsletter or fill out a "Contact Us" form.
• Volunteer for an event or apply for a position.
• Interact with us on social media.

4. Why We Collect and Use Your Information

We use your information to:

• Process your donations and issue tax-deductible receipts.
• Keep you informed about our work, campaigns, and fundraising appeals.
• Manage our volunteers, members, and internal operations.
• Comply with legal and regulatory obligations (such as ACNC reporting).

Direct Marketing: We will always give you a simple way to "opt-out" of receiving marketing or fundraising materials. If you unsubscribe, we will remove you from our mailing lists promptly.

5. Sharing Your Information

We do not sell or rent your personal information. We only share your data with:

• Service Providers: Third parties who help us operate (e.g., website hosting, secure payment processors like Stripe/PayPal, or email platforms like Mailchimp).
• Legal Requirements: If we are required by law to disclose information to government or law enforcement agencies.
• Consent: If you have given us explicit permission to share your story or details for a specific campaign.

6. Security and Storage

We take reasonable steps to protect your information from unauthorized access or loss:

• Digital Data: Stored on secure servers with password protection and encryption.
• Payment Security: We do not store full credit card numbers on our local systems; these are handled by PCI-compliant payment gateways.
• Retention: We only keep your information as long as it is needed for our functions or as required by law (usually 7 years for financial records).

7. Your Rights: Access and Correction

You have the right to ask for a copy of the personal information we hold about you. You can also ask us to correct any information that is inaccurate or out of date. To do this, please contact us using the details below.

8. Questions or Complaints

If you have a question about our privacy practices or wish to make a complaint about a privacy breach, please contact our Privacy Officer:

• Email: [Insert Email Address]
• Phone: [Insert Phone Number]

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.