Legal · Privacy
Privacy Policy
Hannah Ferguson’s campaign for Grayndler
Version 1.2 · 5 November 2026
The short version
- We collect what you give us: your name, email, mobile, postcode and how you would like to help.
- We use it to keep you informed, run events, organise volunteers, take donations and meet our legal duties. Nothing else.
- We never sell or rent your details. We share them only with the service providers who help us run the campaign, and where the law requires.
- Email and SMS only happen if you say yes, and every message has a way out.
- What you tell us about your views is sensitive. We ask first. A small number of named team members can read individual answers, and we report results only as groups, never as a list of who thinks what.
- Our forms, messages and volunteer program are for people aged 18 and over.
- You can ask to see, fix or delete your information at any time. Email [email protected].
On this page
- 1. Who we are
- 2. What we collect
- 3. Why we use it
- 4. Sensitive information
- 5. Email, SMS and calls
- 6. Donations and giving days
- 7. Volunteers
- 8. Young people
- 9. Who we share with
- 10. Overseas storage
- 11. Cookies, link counters and analytics
- 12. Security and keeping your information
- 13. Your rights
- 14. Complaints
- 15. Changes
- 16. Contact
1. Who we are
This policy explains how Hannah Ferguson’s campaign for Grayndler (we, us, our) collects, uses, shares and protects personal information. This site is authorised by Hannah Ferguson, Level 2 139 Macquarie Street Sydney NSW 2000.
We aim to follow the Australian Privacy Principles, because people who give their time and details to a campaign deserve the same protection they would get from any well-run organisation.
2. What we collect
| What | Examples | When |
|---|---|---|
| Contact details | Name, email, mobile, postcode, suburb, and your Instagram handle if you message us there | You sign up, RSVP, volunteer, donate or message us |
| About you (optional) | Age and gender if a form asks. We also work out your federal electorate from your postcode | You choose to tell us, or we look it up from your postcode |
| Involvement | Events attended, tickets booked, volunteer skills and availability, the issues you care about | You tell us, or you attend |
| Our own notes | Notes from conversations with you. If we use a support rating, a team member records it after a conversation with you, never from your survey answers | A team member speaks with you |
| Donation details | Amount, date, name, address and, where the law requires, details needed for electoral disclosure. Card numbers are handled by our payment providers and never reach us | You donate |
| Views you choose to share | Answers to survey or form questions about political opinions | Only if you opt in to answer |
| Messages | Emails, DMs, replies to SMS, chat messages | You contact us |
| Consent records | When, where and how you agreed to hear from us, and which form or link you signed up through | You sign up or tell us your choices |
| Technical data | Device, browser, IP address and pages visited, as kept in server logs, and which of our links were clicked (see section 11) | You visit the site or use a link |
| Photos and video | Images taken at events | You attend (notice displayed at the door) |
We collect directly from you wherever we can. If we receive your details from someone else, such as a friend who booked you a ticket, we will tell you where it came from when we first contact you.
3. Why we use it
- To send you campaign updates, event invitations and requests for help, by the channels you chose
- To place you in the right electorate group using your postcode, so you get what is relevant to where you live
- To organise events and volunteers
- To process donations, issue receipts and meet electoral disclosure and tax record-keeping duties
- To personalise requests, for example the gift amount we suggest or the next step we ask of you, using your earlier involvement or giving. You can ask us not to
- To understand, in grouped form, what the community cares about so we can serve it better
- To count how people reach us, such as which links are clicked
- To keep our systems secure and to respond to you
We do not use your details for anything unrelated without asking you first.
4. Sensitive information
Information about political opinions is sensitive information under Australian privacy law. We collect it only when you choose to give it, with your clear consent, for the purpose the form explains when we ask.
- You can skip any such question
- Individual answers can be read only by a small number of named campaign team members
- We report results only as groups, never as a list of who thinks what
- A group smaller than ten people is never shown
- Figures that leave our secure systems are rounded so no one can be picked out
- We do not share opinion answers with anyone outside the campaign team and the service providers that hold them for us (section 9)
- You can withdraw your answers at any time (section 13)
Please do not put other people’s details or your own health information in free-text answers. If you do, tell us and we will remove it.
5. Email, SMS and calls
- We send campaign email and SMS only to people who have agreed. For email, ticking the box records your agreement and we send you a confirmation. For SMS, you confirm by clicking a link we email to you
- Every email has an unsubscribe link. Reply STOP to any SMS
- When you unsubscribe we keep only your email address or number on a suppression list so we do not message you again by mistake
- We record when, where and how you agreed, so we can show our working and honour your choice
- Every message carries the authorisation statement required by electoral law
- If we phone supporters or volunteers, we say who we are and why, and we respect do-not-call requests
6. Donations and giving days
Payments are processed by Stripe and, for giving days, GiveEasy. They collect your card details under their own privacy policies and security standards. We receive your name, contact details, amount and date. We may use your giving history to personalise later requests, such as the amount we suggest. You can ask us not to.
Electoral law may require us to report some donor details to the Australian Electoral Commission, and published returns can be seen by the public. We will tell you at the point of donating if your details could be disclosed, and keep the information to what the law requires.
7. Volunteers
We collect your availability, skills and interests through our volunteer form. Access to systems is given by role, only to what your role needs, and removed when you finish. Volunteers agree to keep supporter information confidential.
8. Young people
Our forms, messages and volunteer program are for people aged 18 and over, and where we ask for your views we ask you to confirm this. If you tell us you are under 18, we stop collecting, we do not add you to the volunteer program or our reporting figures, and we keep only a minimal record that you told us (such as your email address or Instagram handle) so that we do not contact you again.
9. Who we share with
We share personal information only with:
- Service providers who help us run the campaign. They may use your information only to provide that service. They are: CORE Australia (our supporter database and website); Stripe and GiveEasy (payments and giving days); Meta and ManyChat (Instagram messages and comment replies); Google (email, documents, and short-lived restricted copies of survey answers); Notion (team planning, with rounded totals only and no individual survey answers); Eventbrite (event tickets); Mailchimp (email lists); and our SMS provider
- Regulators or law enforcement when the law requires, including electoral disclosure
- Anyone else, only with your consent
We do not sell or rent personal information. We do not give supporter lists to other campaigns, parties, candidates or data brokers.
10. Overseas storage
Some providers store or process data outside Australia. This can include the United States and other countries. Our main supporter database is hosted by CORE Australia. Before using an overseas provider we take reasonable steps to make sure it handles information in line with the Australian Privacy Principles.
11. Cookies, link counters and analytics
This site uses cookies that are necessary to make it work, such as keeping you signed in. We do not currently use analytics or advertising cookies. If we add them, we will ask you first and update this policy.
We count clicks on some links, such as the links to our podcast and newsletter on the home page. Each click passes through our own address and is counted before you are sent on. The sites we link to, such as Spotify, Substack and Instagram, set their own cookies under their own policies.
12. Security and keeping your information
We limit who can see supporter information by role, and give each person only what their role needs. Information is encrypted in transit, and supporter lists are never posted in chat channels. We keep information only as long as we need it:
- Supporters and subscribers: while you stay in touch, then we review after 24 months of no contact
- Unsubscribed contacts: a minimal suppression record only
- Volunteers: 24 months after you stop helping
- Donation and financial records: at least five years, or longer if the law requires
- Survey answers in our supporter database: kept with your supporter record, then reviewed after 24 months of no contact
- Restricted copies of survey answers held in Google: deleted within 30 days of the results being approved
- Instagram message data held in ManyChat: deleted 30 days after each survey closes, except a minimal suppression record
If a data breach is likely to cause serious harm, we will tell you and the Office of the Australian Information Commissioner as the law requires.
13. Your rights
You can ask us to:
- Show you the information we hold about you
- Correct anything wrong
- Delete your information, including answers you gave to survey questions
- Stop or limit messages, or change channels
- Withdraw consent you gave
Email [email protected]. We will confirm it is you, then act within 30 days, and sooner where we can. We delete or correct your information in our supporter database and in the tools that hold copies (section 9). We keep only the minimal records we must: a suppression record so we do not message you again, and records the law requires. We will not charge you for asking.
14. Complaints
Tell us first at the contact below and we will investigate and reply in writing. If you are not satisfied, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.
15. Changes
We will update this policy when what we do changes. The version and date are at the top, a What changed note is kept on this page, and we will tell subscribers about material changes by email.
16. Contact
Privacy contact: Hannah Ferguson’s campaign team, [email protected], Level 2 139 Macquarie Street Sydney NSW 2000.
Privacy questions
[email protected]
Authorised by Hannah Ferguson, Sydney.