Privacy policy

Ready Fund Grow (RFG) is an Australian not-for-profit company, ABN 19 685 036 702. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

• Campaign Creators: Name, role, contact details, account information, organisation details, campaign content, project information, uploaded images, authorisation details and communications with RFG.
• Supporters: Name where provided, email address, contribution amount, transaction details, display preferences, messages, communication preferences and campaign updates you choose to receive.
• Partners: Name, organisation, role, contact details, partnership interests, indicative funding information and communications with RFG.
• Everyone: basic technical information such as pages visited, used to keep the site working and secure.

We never see or store your card number. Stripe, a PCI-DSS Level 1 provider, processes payments. RFG does not store full payment card details. We retain the transaction information needed for receipts, reconciliation, refunds and financial records.

• To review campaigns, confirm authorisation, and keep in touch with creators.
• To send receipts and, if you asked for them, updates about the campaign you supported.
• To transfer funds to the school, service or organisation (or directly to a supplier) and keep records of where money went.
• To meet our reporting, record-keeping and regulatory obligations.
• Process contributions, payments and refunds
• Send project updates where requested
• Prevent fraud, misuse and security incidents

We do not sell or rent personal information, and we do not pass supporter details to campaign creators beyond the display name, message and amount you chose to show.

We share personal information only where reasonably necessary to operate RFG, including with payment, hosting, database, email, identity or bank verification, accounting, security and professional service providers.

We may also disclose information where required by law or to regulators, law enforcement or professional advisers where appropriate.

Where WaterUps provides operational or administrative services to RFG, authorised personnel may access information only as required to provide those services.

Adults must create and manage all campaigns. RFG may collect and publish limited information about children, such as approved photographs or first names, where the organisation confirms appropriate consent. We do not knowingly collect account, contact or payment information directly from children. Campaigns can be run without publishing images or names of children. We handle photographs of children under our image and consent policy.

We use reasonable technical and organisational safeguards to protect personal information from loss, misuse, unauthorised access, modification or disclosure. Access is limited to people and service providers who need it for their role.

Financial and receipt records are kept for seven years, as required for charity and tax purposes. Campaign and project information may remain publicly available to provide transparency about funded projects and outcomes. Personal information within that content is reviewed, removed or de-identified when it is no longer reasonably needed, unless we are required to retain it. Enquiry and contact information is retained only for as long as reasonably required for the relationship or follow-up, then deleted or de-identified unless required for legal or record-keeping purposes.

You can:

• Request access to personal information we hold about you
• Ask us to correct inaccurate information
• Ask us to delete or de-identify information where we are not required to retain it
• Unsubscribe from marketing or campaign updates
• Change your public supporter display preferences where possible
• Request removal of an image under our Image & Consent Policy

Email privacy@readyfundgrow.org.au. We aim to respond within 10 business days. If you are not satisfied, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.