Privacy
Your information deserves care
This notice explains how the operator of the ASH Foundation website handles personal information collected through this website.
It covers enquiries, expressions of interest, supporter updates and, when available, donations.
This notice is in draft. The website operator, privacy contact, service providers and approval date will be added before any form on this website collects information. No forms are collecting information today.
What we collect and why
When you contact us, we collect the details you provide so we can respond and keep an appropriate record.
Volunteer and partnership enquiries may include interests, skills or organisation details. Supporter subscriptions include email addresses and consent records.
When donations open, we may hold your name, contact details, gift amount, frequency, transaction references and receipt records.
Our approved payment provider processes payment details through hosted checkout. The Foundation website is designed not to store full card numbers or card security codes.
We may also retain limited technical and security records needed to operate the website and prevent misuse.
General website forms are not intended for medical records, identity documents or detailed support assessments.
Your choices
You can browse information pages without signing up.
Some details are needed to respond to an enquiry, process a payment or send a receipt. Without them, we may be unable to complete that request.
Optional updates require your separate choice. Receiving a receipt or making an enquiry does not automatically subscribe you.
Who may receive information
Authorised people working with the Foundation may access information where their role requires it.
Approved providers may assist with hosting, secure storage, email delivery, payment processing, accounting or professional advice.
We may disclose information where required or permitted by law.
We do not sell personal information or publish donor names without separate permission.
Service providers and overseas handling
The selected providers, and any overseas handling of information, will be described here before any form opens.
Cookies and analytics
The technologies this website uses will be described here. Support enquiry text, payment information and sensitive personal information will not be sent to advertising audiences or general analytics.
Security and retention
We use access controls and other reasonable measures appropriate to the information and service.
We retain records for documented operational, legal, financial and safeguarding needs, then dispose of or de-identify them when appropriate.
No online service can promise absolute security.
Access, correction and privacy concerns
A verified privacy contact for access, correction and complaints will be listed here. Where Australian privacy law applies, you may also contact the Office of the Australian Information Commissioner.
Updates
The approval date will be shown here, and the notice updated when practices change.