Privacy Policy

This Privacy Policy describes how Koala Research Foundation Australia Limited (“KRFA,” “we,” “us,” or “our”) collects, uses, discloses, and protects the personal information provided by individuals (“you” or “users”) through our website, including any interactions, inquiries, and donations made.

At KRFA, we are committed to protecting your privacy and ensuring the security of your personal information. We adhere to the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) (the “Privacy Act”). A copy of the Australian Privacy Principles may be obtained from the website of The Office of the Australian Information Commissioner at www.aoic.gov.au.

By accessing or using our website and services, you agree to the terms and conditions outlined in this Privacy Policy.

1. What is Personal Information and Why We Collect It

Personal Information is information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not, and whether the information or opinion is recorded in a material form or not.

1.1 Types of Personal Information We Collect

We may collect various types of personal information, including but not limited to:

Contact Details: Your name, email address, mailing address, and phone number.
Donation Information: Payment details (though we do not store full credit card numbers, which are processed by our payment processing providers), donation history, and transaction records.
Interaction Data: Information you provide when you contact us, make inquiries, register for events, subscribe to newsletters, participate in surveys, or engage with our online forms and applications.
Technical Data: Information such as your computer’s Internet Protocol (IP) address, browser type and version, operating system, device identifiers, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers, and other diagnostic data. This data is generally collected through cookies and similar tracking technologies.

1.2 How We Collect Personal Information

We collect personal information through lawful and fair means, primarily directly from you when you:

Make a donation (e.g., via our nominated payment processing provider).
Fill out forms on our website.
Subscribe to our newsletters or mailing lists.
Contact us via email, phone, or online inquiry forms.
Register for events or volunteer opportunities.
Interact with our social media channels or publicly available sources where you provide information.

In some circumstances, we may also be provided with information by third parties (e.g., payment processors confirming a donation).

1.3 Purpose of Collection

We collect personal information for the following primary purposes:

To process your donations and send you receipts and acknowledgments.
To provide you with information and updates about our activities, projects, events, and fundraising campaigns.
To respond to your inquiries and provide customer support.
To maintain accurate records of our supporters and their interactions with KRFA.
To improve our website, services, and outreach efforts through analytical insights.
To comply with our legal and regulatory obligations.

2. Sensitive Information

Sensitive information is a subset of personal information that is defined in the Privacy Act to include information or opinion about an individual’s racial or ethnic origin, political opinions, membership of a political association, religious or philosophical beliefs, membership of a trade union or other professional body, sexual orientation or practices, criminal record, or health information.

KRFA generally does not collect sensitive information. If we do, sensitive information will only be collected, used, or disclosed by us:

For the primary purpose for which it was obtained and with your consent.
For a secondary purpose that is directly related to the primary purpose and with your consent.
Where required or authorised by law.
Where necessary to prevent a serious threat to the life, health, or safety of any individual, or to public health or safety.

3. Use and Disclosure of Personal Information

3.1 Use of Personal Information

We use your personal information to provide and improve our services, as outlined in Section 1.3. This includes:

Administering donations and donor relations.
Communicating with you about our conservation efforts, campaigns, and news.
Personalising your experience with KRFA.
Conducting internal research and analysis to enhance our effectiveness.
Sending you direct marketing communications (where you have consented or where permitted by law), from which you can opt out at any time.

3.2 Disclosure of Personal Information

KRFA is committed to never selling or renting your personal information to third parties. We may disclose your personal information in limited circumstances to:

Service Providers: We may share your personal information with trusted third-party service providers who assist us in operating our website and services. These providers may include payment processing providers (which KRFA may nominate or change at any point), marketing partners, web analytics providers, data processing services, IT support, and other service providers. These third-party service providers are contractually obligated to maintain the confidentiality and security of your information and are only authorised to use it as necessary to provide the agreed-upon services to us.
Legal Requirements: We may disclose your personal information when required by law, court order, or governmental authority. We may also disclose information if we believe in good faith that such disclosure is necessary to protect our rights, enforce our policies, or respond to claims that any content violates the rights of others.
With Your Consent: With your explicit consent, we may share your personal information with other organisations or partners for joint initiatives or collaborations.

3.3 International Data Transfer

Some of our third-party service providers may operate or store data outside of Australia. While we endeavour to use service providers within Australia where possible, by providing your personal information, you acknowledge and agree that your data may be transferred to, stored in, or accessed from countries outside Australia. We take reasonable steps to ensure that any overseas recipients of your personal information handle it in accordance with the APPs, even if they are not subject to Australian privacy laws.

4. Data Quality and Security

4.1 Data Quality

We take reasonable steps to ensure that the personal information we collect, use, and disclose is accurate, complete, and up-to-date. If you believe that the information we hold about you is inaccurate, out-of-date, incomplete, irrelevant, or misleading, please contact us promptly so we can update our records.

4.2 Data Security

Your personal information is stored in a manner that reasonably protects it from misuse, interference, loss, and from unauthorised access, modification, or disclosure. We implement a range of physical, technical, and administrative security measures to safeguard your data, including:

Secure servers and data centres located in Australia.
Regular security updates and testing of our systems.
Access controls and restrictions for employees who require access to personal information.
Training for our employees on the importance of confidentiality and maintaining the privacy and security of your information.

While we strive to use commercially acceptable means to protect your personal information, please be aware that no method of transmission over the Internet or electronic storage is 100% secure. Therefore, we cannot guarantee its absolute security.

4.3 Data Retention

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, to provide services to you, to maintain a record of your transactions for financial reporting purposes, and to comply with our legal obligations, resolve disputes, and enforce our agreements. Most personal information is retained in client files for a minimum of 7 years, as required by law. We may aggregate and anonymise data for improvement purposes and may retain aggregate or anonymised data indefinitely, as it no longer identifies you.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our website and hold certain technical information. Cookies are small data files placed on your device. They are widely used and allow our website to remember your preferences, enhance your user experience, and gather usage data.

5.1 Types of Tracking Technologies Used:

Cookies (Browser Cookies): A cookie is a small file placed on your device. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.
Web Beacons, Pixel Tags, and other technologies: These electronic files are used to count users who have visited certain pages and for other related website statistics (e.g., recording the popularity of a certain section and verifying system and server integrity).

5.2 Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google. Google Analytics transmits website traffic data to Google servers in the United States. Google Analytics does not identify individual users or associate your IP address with any other data held by Google. We use reports provided by Google Analytics to help us understand website traffic and webpage usage, which assists us in improving our website.

By using this website, you consent to the processing of data about you by Google in the manner described in Google’s Privacy Policy (available at policies.google.com/privacy) and for the purposes set out above. You can opt out of Google Analytics if you disable or refuse cookies, disable JavaScript, or use the Google Analytics Opt-out Browser Add-on provided by Google (available at tools.google.com/dlpage/gaoptout).

5.3 Social Media Interfaces

KRFA may interface with social media sites such as Facebook, LinkedIn, X (formerly Twitter), Instagram, and others. If you are a member of a social media site, these interfaces may allow the social media site to connect your visits to our site with other personal information they hold about you. If you choose to “like” or “share” information from our website through these services, you should review the privacy policy of that specific social media service.

6. Third-Party Websites

Our website may contain links to third-party websites or services that are not operated or controlled by us. These links are provided for your convenience. We are not responsible for the privacy practices or content of these third-party sites or services. We strongly encourage you to review the privacy policies and practices of any third-party websites you visit before providing any personal information.

7. Anonymity and Pseudonymity

You have the right to deal with us anonymously or by using a pseudonym where it is lawful and practicable to do so. However, for most of our services, including processing donations and providing you with information and updates, it is not practicable for us to deal with you anonymously or using a pseudonym. If you choose not to provide your personal information, we may not be able to provide the full range of services or engage effectively with you.

8. Children’s Privacy

Our website and services are not directed to individuals under the age of 18 (“Children”). We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from children without verification of parental consent, we will take steps to remove that information from our servers promptly.

9. Accessing and Correcting Your Personal Information

You have the right to request access to the personal information we hold about you and to request that we update or correct it if you find that it is inaccurate, incomplete, out-of-date, or misleading, subject to certain exceptions under the Privacy Act.

9.1 How to Request Access or Correction: To request access to or correction of your personal information, please contact us in writing using the contact details provided in Section 11.

9.2 Identity Verification: To protect your privacy and the privacy of others, we will need to verify your identity before we can grant you access to information about you or make changes to it. This may involve requesting specific information from you.

9.3 Fees: KRFA will not charge any fee for your access request itself. However, we may charge a reasonable administrative fee for providing a copy of your personal information if the request requires extensive retrieval or preparation.

9.4 Response Time: We will respond to your request for access or correction within a reasonable timeframe, generally within 30 days of receiving your request. If the request will take longer to resolve, we will provide you with a revised date by which we expect to respond.

10. Making a Complaint

If you have a complaint about how KRFA has handled your personal information, or if you believe we have breached the Australian Privacy Principles, please contact us in writing using the details provided in Section 11.

10.1 Complaint Process:

Submit Your Complaint: Clearly outline the nature of your complaint, providing as much detail as possible to assist us in our investigation.
Acknowledgement: We will acknowledge receipt of your complaint in writing within a reasonable timeframe (typically within 7 business days).
Investigation: We will investigate your complaint thoroughly and confidentially. We may contact you for further information during this process.
Resolution: We will endeavour to resolve your complaint fairly and efficiently and will inform you of the outcome of our investigation. We aim to resolve all complaints within 30 days. If we anticipate a delay, we will notify you and provide an expected timeframe for resolution.

If you are not satisfied with our response, you may refer your complaint to the Office of the Australian Information Commissioner (OAIC). More information about making a privacy complaint to the OAIC can be found on their website: www.oaic.gov.au.

11. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. Any changes will be posted on our website with a revised “Effective Date.” We encourage you to review this Privacy Policy periodically. By continuing to use our website and services after the changes are made, you agree to be bound by the updated Privacy Policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact us at:

Koala Research Foundation Australia Limited

Address: The Annex, Level 8, 12 Creek St, Brisbane QLD 4000
Email: info@krfa.org.au

Last Updated: 8 June 2025