When you sign a petition, RSVP to an event, make a donation, or take action through our platform, we collect personal information such as your name, email address, postcode, and any information you choose to provide.

Most states and territories require your name, email, and postcode for a petition signature to be valid. Your phone number is optional, but helps us keep you updated about the campaigns and events you care about.

Depending on how you engage with us, we may also collect:

• actions you take (such as petitions signed, events attended, or surveys completed);

• donation details (including payment information, which is handled securely by third-party processors);

• information you provide in feedback, surveys, or complaints; and

• information collected when you interact with websites we administer (such as cookies and usage data) 

Some information we collect may be sensitive. We only collect this information where it is relevant, necessary and provided by you, including:

• campaign interests or political views to better understand our supporters and be led by the grassroots (e.g. your thoughts on a campaign focus, government policy or political party);

• demographic information to ensure our movement is diverse and representative (e.g. age, cultural background, ethnicity); 

• health information to ensure we are meeting our duty of care obligations (e.g. access needs, emergency contact details, medical needs) 

• criminal record information as required by law (applies only to staff and board) 

We use your information to:

• process actions you take (such as petitions, events, or donations);

• communicate with you about campaigns or issues you engage with; 

• ensure our movement is powered by people from all backgrounds;

• meet legal and ethical requirements for hosting events, workshops, interns or volunteers; and

• where you have consented, share updates and opportunities to take further action.

We do not sell your personal information. You can unsubscribe from communications at any time.

We may share some personal information with trusted third parties where necessary to run our campaigns, including:

• Volunteers, local group leaders and event hosts, who may contact you about a specific campaign, action or event

• Campaign targets, such as decision-makers receiving petitions or submissions (usually limited to your name and postcode)

• Petition creators and/or partner organisations, so they can deliver petitions to the intended target (usually limited to your name and postcode)

• Service providers, including platforms that help us manage emails, databases, events, or payments

• Payment processors, which securely handle donation transactions in accordance with their own privacy policies. We use Stripe, Paypal, Apple Pay and Google Pay.

We only share information for the purposes described in this policy.

Some petitions and events are hosted in partnership with other organisations. Where this occurs:

• the partner is clearly named at sign-up

• separate consent options are provided

• we only share contact details where consent has been given.

350 Australia will send no more than two emails per year to supporters of partner organisations who opt in:

• an annual survey to ensure our campaigns are rooted in the aspirations of the grassroots

• an annual fundraising email to power our digital tools so we can keep backing people-powered campaigning and organising 

Partner organisations must use supporter information only for the purposes described at sign-up and in accordance with privacy laws and their own privacy policies.

We respect Indigenous data sovereignty and that First Nations peoples have the right to own, control, access, and steward data that relates to their communities, lands, and cultures. All First Nations partners will have access to their own supporter data, unless people unsubscribe.

All of our action forms include consent options to receive campaign and event updates:

• consent is clearly presented at sign-up

• consent is not required to sign a petition, donate, or attend an event

• you choose separately whether to hear from

  • 350 Australia

  • any partner organisation or campaign host

• consent can be withdrawn at any time via an unsubscribe or preferences link.

You can unsubscribe or update your preferences at any time by:

• using the unsubscribe or preferences link in our emails

• contacting us at info@350.org.au.

You may also request deletion of your personal information. We retain information only as long as necessary for the purposes outlined in this policy or as required by law.

We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles for handling personal information.

We take the privacy and security of your personal information seriously. We store personal information in secure systems and use appropriate physical, technical, and organisational safeguards to protect it from misuse, loss, and unauthorised access.

While no online system can ever be guaranteed to be completely secure, we continually review and improve our security practices to ensure your information is handled with care and respect.

Some personal information may be stored on servers located outside Australia, for example when we use trusted service providers. In these cases, we take steps to ensure your information is protected in a manner consistent with Australian privacy laws.

If you are under 18, please obtain your parent’s or guardian’s permission before providing personal information to us (e.g., name, address, email).