Privacy policy.

1. About this policy

HalfCut Limited (ABN 24 642 788 814) (HalfCut, we, us or our) is an Australian registered charity. We are committed to protecting personal information and handling it openly and responsibly.

This Privacy Policy explains how we collect, hold, use and disclose personal information in connection with our websites, including go.halfcut.org and halfcut.org, fundraising campaigns, donations, events, tours, competitions, merchandise, partnerships, volunteer activities, social media and other online or offline activities (our Services).

Where the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) apply to us, we will handle personal information in accordance with those requirements. We aim to follow the APPs as a matter of good practice even where an exemption may apply.

2. What personal information we collect

Depending on how you interact with us, we may collect:

Some information may be sensitive information under Australian privacy law, such as health information, racial or ethnic origin, or information that reveals membership of particular groups. We will only collect sensitive information where it is reasonably necessary for our activities and with consent, or where otherwise permitted or required by law.

Please do not provide sensitive personal information in a public fundraising page, donor message or comment unless you are comfortable with it being publicly visible.

3. How we collect personal information

We may collect personal information:

Where practicable, you may interact with us anonymously or using a pseudonym. We may need your identity and contact details to issue a donation receipt, process a payment or refund, administer a fundraiser, event or prize, meet legal obligations, or respond to an account or privacy request.

4. Public fundraising information

Fundraising pages are designed to be shared publicly. Depending on your settings and what you provide, your name or profile name, photograph, team or organisation, fundraising story, target, amount raised and page updates may be visible to anyone and may appear in search results.

When donating, you may be offered choices about whether your name, donation amount or message is displayed publicly. Even when a donation is anonymous on the public page, HalfCut and its service providers may retain the information required to process the donation, issue a receipt, prevent fraud and meet legal obligations.

Do not publish another person’s personal information, image or story unless you have their permission and it is appropriate to do so.

5. Why we collect, use and disclose personal information

We may use or disclose personal information to:

We will not sell or rent your personal information.

6. Marketing and supporter communications

We may send you updates about HalfCut’s campaigns, impact, events, tours, merchandise and ways to support our work where you have consented, where consent can reasonably be inferred, or where otherwise permitted by law.

You can opt out at any time by using the unsubscribe link in an email, following the instructions in a message or contacting us. We will action opt-out requests within the period required by law. Opting out of marketing does not prevent us from sending essential service messages, such as donation receipts, security notices or information needed to administer your account or fundraiser.

7. Cookies, analytics and online advertising

Our websites and service providers may use cookies, pixels, web beacons and similar technologies to:

These technologies may collect online identifiers and technical or usage information. Providers may include Raisely, Google and Meta, depending on the tools enabled on the website at the time.

You can control cookies through your browser and, where available, our cookie settings. Blocking necessary cookies may affect website functions. Third-party providers may also offer their own advertising or analytics opt-out controls.

8. Who we disclose personal information to

We may disclose personal information, where reasonably necessary, to:

Third-party services have their own privacy practices. We encourage you to review the privacy information presented by a payment method, fundraising platform or linked service before using it.

9. Overseas handling of information

Some service providers may store, access or process personal information outside Australia. The countries involved may change as providers update their systems and subcontractors, but may include the United States, the United Kingdom and other countries listed by the relevant provider.

Where Australian privacy law applies, we will take reasonable steps required by law before disclosing personal information to an overseas recipient. In some circumstances, HalfCut may remain accountable for how an overseas recipient handles that information.

You may contact us for current information about material overseas disclosures relevant to your information.

10. Children and young people

Young people may participate in fundraising, including through schools, families or community groups. If you are under 18, you should use our Services with the involvement and supervision of a parent or guardian.

We will take reasonable steps to assess whether a young person can understand and consent to the proposed handling of their information. Where appropriate, we will seek consent from or communicate with a parent or guardian. We ask adults not to publish a child’s full name, precise location, school details, health information or images without appropriate permission.

If you believe a child has provided personal information without appropriate understanding or permission, contact us so we can review and, where appropriate, remove it.

11. Photographs, videos and stories

We may capture or receive photographs, videos, recordings, testimonials and stories in connection with campaigns, events, tours and project activities. Where identifiable people are a focus of the content, we will seek appropriate permission before using the material for communications, fundraising or promotion, unless another lawful basis applies.

Extra care will be taken with content involving children, sensitive information, cultural knowledge, First Nations people or activities on Country. Permission to use cultural material or a person’s image may involve obligations beyond privacy law, which we will seek to respect through appropriate consultation and consent.

12. Security and data breaches

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. Measures may include access controls, multi-factor authentication where available, secure service providers, staff and contractor controls, backups and appropriate record-management practices.

No internet transmission or storage system is completely secure. If a data breach occurs, we will contain, assess and respond to it. Where the Notifiable Data Breaches scheme applies and a breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by law.

13. Retention and deletion

We retain personal information only for as long as reasonably necessary for the purposes described in this policy and to meet legal, accounting, taxation, insurance, fraud-prevention and governance requirements.

Retention periods vary by record type. When information is no longer required, we will take reasonable steps to securely destroy it or de-identify it, subject to legal and technical limitations, including backup systems.

You may ask us to delete information. We will take reasonable steps to do so where lawful and practicable, but may need to retain some records, including donation and transaction records, to comply with legal obligations or protect legitimate interests.

14. Access and correction

You may request access to personal information we hold about you or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading.

There is no charge to make an access or correction request. If permitted by law, we may charge a reasonable, non-excessive amount for the cost of providing access, and we will tell you before doing so. We may ask for information to verify your identity.

If we refuse access or correction where the law permits us to do so, we will generally provide written reasons and explain available complaint options.

15. Privacy complaints

To make a privacy complaint, contact our Privacy Officer using the details below and describe the issue. We will acknowledge and investigate the complaint and aim to respond within 30 days. If we need more time, we will tell you why and provide an updated timeframe.

If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au. The OAIC generally expects you to give us an opportunity to resolve the complaint first.

16. External links and social media

Our Services may link to external websites or social media platforms. We do not control those services, and their privacy practices are governed by their own policies. Information posted publicly on social media or a public fundraising page may be copied or shared by others beyond our control.

17. Changes to this policy

We may update this Privacy Policy to reflect changes to our practices, technology or legal obligations. The current version will be published on our website with its effective date. If a change is material, we will take reasonable steps to provide additional notice where appropriate.

18. Contact us