How we collect and use supporter information

When you sign a petition, RSVP to an event, make a donation, or take action through our platform, we collect personal information such as your name, email address, postcode, and any information you choose to provide.

Most states and territories require your name, email, and postcode for a petition signature to be valid. Your phone number is optional, but helps us keep you updated about the campaigns and events you care about.

Depending on how you engage with us, we may also collect:

• actions you take (such as petitions signed, events attended, or surveys completed);
• donation details (including payment information, which is handled securely by third-party processors);
• information you provide in feedback, surveys, or complaints; and
• information collected when you interact with websites we administer (such as cookies and usage data) 

Some information we collect may be sensitive. We only collect this information where it is relevant, necessary and provided by you, including:

• campaign interests or political views to better understand our supporters and be led by the grassroots (e.g. your thoughts on a campaign focus, government policy or political party);
• demographic information to ensure our movement is diverse and representative (e.g. age, cultural background, ethnicity); 
• health information to ensure we are meeting our duty of care obligations (e.g. access needs, emergency contact details, medical needs) 
• criminal record information as required by law (applies only to staff and board) 

We use your information to:

• process actions you take (such as petitions, events, or donations);
• communicate with you about campaigns or issues you engage with; 
• ensure our movement is powered by people from all backgrounds;
• meet legal and ethical requirements for hosting events, workshops, interns or volunteers; and
• where you have consented, share updates and opportunities to take further action.

We do not sell your personal information. You can unsubscribe from communications at any time.

How we share your information 

We may share personal information with trusted third parties where necessary to run our campaigns, including:

• Volunteers, local group leaders and event hosts, who may contact you about a specific campaign, action or event;
• Campaign targets, such as decision-makers receiving petitions or submissions (usually limited to your name and postcode);
• Petition creators, so they can deliver petitions to the intended target (usually limited to your name and postcode);
• Service providers, including platforms that help us manage emails, databases, events, or payments; and
• Payment processors, which securely handle donation transactions in accordance with their own privacy policies.

We only share information for the purposes described in this policy.

Partner organisations 

Some petitions and events are hosted in partnership with other organisations. Where this occurs:

• the partner is clearly named at sign-up;
• separate consent options are provided; and
• we only share contact details where consent has been given.

To protect supporters’ privacy, 350 Australia will send no more than two emails per year to supporters of partner organisations who opt in:

• an annual survey to ensure our campaigns are rooted in the aspirations of the grassroots
• an annual fundraising email to power our digital tools so we can keep backing people-powered campaigning and organising 

Partner organisations must use supporter information only for the purposes described at sign-up and in accordance with privacy laws and their own privacy policies which will also be displayed.

We respect Indigenous data sovereignty and that First Nations peoples have the right to own, control, access, and steward data that relates to their communities, lands, and cultures. 

Consent to receive communications

Our action forms include consent options to receive campaign and event updates. These options are pre-selected by default so people stay connected unless they choose otherwise.

We apply the following safeguards:

• consent is clearly presented at sign-up;
• consent is not required to sign a petition, donate, or attend an event;
• consent is unbundled — you choose separately whether to hear from:
  • 350 Australia; and
    any partner organisation or campaign host; and
• consent can be withdrawn at any time via an unsubscribe or preferences link.

Supporters can deselect these options before submitting the form and still take part in campaigns.

Security and storage 

We take the privacy and security of your personal information seriously. We store personal information in secure systems and use appropriate physical, technical, and organisational safeguards to protect it from misuse, loss, and unauthorised access.

While no online system can ever be guaranteed to be completely secure, we continually review and improve our security practices to ensure your information is handled with care and respect.

Some personal information may be stored on servers located outside Australia, for example when we use trusted service providers. In these cases, we take steps to ensure your information is protected in a manner consistent with Australian privacy laws.

Children and young people

If you are under 18, please obtain your parent’s or guardian’s permission before providing personal information to us (e.g., name, address, email).

Unsubscribing, managing preferences and data retention 

You can unsubscribe or update your preferences at any time by:

• using the unsubscribe or preferences link in our emails; or
• contacting us at [email protected].

You may also request deletion of your personal information. We retain information only as long as necessary for the purposes outlined in this policy or as required by law.

Legal framework

We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles for handling personal information.

Contact

If you have any questions about our privacy policy, please contact us at: [email protected].