Effective date: 1 December 2025
Last updated: 1 December 2025
Who we are
Giving Connect Pty Ltd (“we”, “us”, “our”) is a consulting services company working with not‑for‑profits and funders. We are committed to handling personal information in an open and transparent way and complying with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), where they apply to us.
1. The personal information we collect
We only collect the personal information that is reasonably necessary for our functions and activities. This may include:
1a) Website contact form
- Name, email address, phone number, organisation, and the content of your enquiry.
1b) Mailing list sign‑up
- Email address and your marketing preferences. We use a third‑party email platform to manage subscriptions and send updates.
1c) Giving Strategy form (third‑party tool)
- Extensive organisational information and contact details relevant to your giving strategy (e.g., mission focus, programs, beneficiaries, funding sources, geographic footprint, governance information). This form is hosted by a third‑party provider integrated with our website.
- We’ll clearly identify the third‑party provider and link to their privacy terms at the collection point.
1d) Device and interaction data (website analytics and pixels)
- IP address, device/browser type, pages visited, time on page, referring URLs, and events (e.g., form interactions). We may use analytics tools or tracking pixels to understand site performance and measure campaigns. We configure these tools to minimise data collection and avoid sending sensitive information; we provide clear notice and controls.
Sensitive information: We do not intentionally collect sensitive information (e.g., health information, religious beliefs) through our website. If sensitive information is ever needed for a specific service, we will seek your consent and explain the purpose.
2. How we collect information
- Directly from you via our website forms, email, phone, meetings, or surveys.
- Automatically through cookies/pixels/analytics when you use our site (see Section 9). We take steps so collection is fair, minimal, and transparent.
- From third‑party services you connect to (e.g., mailing platforms, the Giving Strategy tool), consistent with their notices and your settings.
3. Why we collect, use and disclose personal information
We use personal information to:
- Respond to enquiries and provide consulting services.
- Administer the Giving Strategy tool and related services.
- Send newsletters and updates with your consent, manage subscriptions, and honour opt‑outs.
- Operate and improve our website, analytics, and campaigns (including conversion measurement), consistent with our notices and your preferences.
- Comply with legal obligations and manage risks, including security and data breach response.
We will only use or disclose personal information for the primary purpose for which it was collected, or for a secondary purpose where an APP exception applies (e.g., your consent or where reasonably expected and related to the primary purpose).
4. Direct marketing and your choices
We only send you electronic marketing (email/SMS) where we have your express or inferred consent, we identify ourselves, and we include a functional unsubscribe that we honour promptly. You can opt out at any time via the link in our emails or by contacting us.
- We prefer express consent (e.g., you tick a box or sign up via a form) and we keep records of when and how consent was given.
- If we use a third‑party email platform, we remain responsible for compliance and ensure unsubscribe requests are actioned within required timeframes.
5. Anonymity and pseudonymity
Where practicable, you may interact with us anonymously or using a pseudonym (for example, general website browsing). However, we may need your identity for certain services (e.g., consulting engagements, mailing list).
6. Cross‑border disclosure (information sent overseas)
Some of our service providers, analytics tools, email platforms, or the Giving Strategy tool may store or process data outside Australia. Before disclosing personal information to an overseas recipient, we take reasonable steps to ensure the recipient will not breach the APPs (other than APP 1), such as by using contractual safeguards and reviewing the provider’s privacy and security practices. If a cross‑border disclosure occurs, we may be accountable under the Privacy Act for mishandling overseas.
In some cases, exceptions may apply (e.g., you give informed consent to the disclosure; the recipient is subject to a law/binding scheme substantially similar to the APPs with enforceable mechanisms).
7. Security: how we protect personal information
We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. Measures include access controls, encryption in transit and at rest where appropriate, staff confidentiality obligations and training, vendor due diligence, and secure disposal or de‑identification when no longer required.
8. Data retention and minimisation
We retain personal information only for as long as necessary to fulfil the purposes described above or to meet legal obligations, then we securely delete or de‑identify it. We periodically review the information we hold and remove data that is no longer needed.
9. Cookies, analytics and tracking technologies
Our website may use cookies, analytics, and third‑party tracking pixels to understand engagement, improve content, and measure campaigns. We configure these tools to limit personal information collection to what is necessary, avoid sending sensitive information, and provide transparent notices and opt‑out mechanisms where applicable (e.g., unsubscribe from marketing, adjust browser settings, or use platform ad controls).
We review our tracking technologies regularly and do not operate a “set‑and‑forget” approach.
10. Notifiable Data Breaches (NDB) scheme
If a data breach occurs that is likely to result in serious harm to individuals whose personal information is involved, we will notify affected individuals and the OAIC as required, and provide recommendations to help reduce or mitigate harm. We maintain a data breach response plan and aim to assess suspected breaches promptly.
11. Access to and correction of your personal information
You may request access to the personal information we hold about you and request corrections if it is inaccurate, out‑of‑date, incomplete, irrelevant or misleading. We will respond within a reasonable period and, if we refuse access or correction, we will explain why and how you can complain.
To make a request, contact us at enquiries@givingconnect.com
12. How to make a privacy complaint
If you have concerns about how we have handled your personal information, please contact us first. We will acknowledge your complaint and aim to resolve it within [30] days. If you’re not satisfied, you may raise your complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
13. Our third‑party providers
We use reputable third‑party service providers to host our website, manage email newsletters, and power the Giving Strategy form. We take reasonable steps to ensure their privacy practices meet our expectations, including contractual safeguards, periodic reviews, and ensuring data is deleted or de‑identified at the end of the engagement.
Current providers:
- Website host: Straight Forward Technology (location: AUS)
- Email marketing: MailChimp (location: USA)
- Giving Strategy tool: Jotform (location: USA)
- Analytics/pixels: Google Analytics (locations vary; see their policies)
14. Changes to this policy
We may update this policy to reflect changes to our practices or the law. The effective date will be updated, and significant changes will be communicated on our website or via email where appropriate.
15. Contact us
Giving Connect Pty Ltd
11 Howard Street, Richmond 3121
enquiries@givingconnect.com