Privacy Notice
Last reviewed: 2026-07-25
This notice explains how Octopus Foundation collects, uses, discloses and protects the limited personal information you choose to share with us through this website. We aim to handle personal information consistently with the Australian Privacy Principles under the Privacy Act 1988 (Cth), and our approach is simple: collect as little as possible, use it only for the purpose you gave it, and protect what we hold.
What we collect
We collect the information you actively provide — for example, your name, email address, organisation, country or region, enquiry topic and message. For contact enquiries, we also retain the form language and version, your consent record, the page and referring site, and any campaign or click identifiers already present in the page URL. Page and referrer details are normalised to remove fragments, unrelated query values and all referrer query values. We do not ask for sensitive information (as defined in the Privacy Act), health information or identity documents, and ask you not to include them in free-text fields. If you do, we will delete them rather than retain them.
How we use it
We use your information solely to respond to your enquiry and to coordinate the participation you have asked about. We do not sell personal information, use it for advertising or profiling, or use it to train AI systems. We will not use it for an unrelated purpose without asking you first.
Analytics & cookies
By default this site uses no invasive analytics, no advertising trackers and no non-essential cookies. If a privacy-respecting analytics tool is ever enabled, we will describe it here and honour your choices.
Sharing
Contact enquiries and their consent snapshot are sent to Tracka, the Octopus-operated intake system we use to hold them pending human review. Access is limited to authorised people and service providers who need it to review or respond to your enquiry, or to operate the website and intake service. This operational processing does not permit unrelated commercial use; if your enquiry requires sharing with another organisation, we will tell you before doing so.
Overseas disclosure
Some providers supporting our website, email and Tracka intake service may store or process information outside Australia. Where they do, we take reasonable steps to ensure your information is handled consistently with this notice and the Australian Privacy Principles.
How we protect it
We take reasonable steps to protect the information we hold from misuse, interference, loss and unauthorised access, modification or disclosure — including access controls, encryption in transit and collecting as little as possible in the first place. No internet service can be perfectly secure; if a data breach involving your information is likely to result in serious harm, we will notify you and the OAIC as the law requires.
Keeping & deleting
We keep your information only as long as needed for the purpose you shared it, or as the law requires, and then securely delete or de-identify it. You can ask us to access, correct or delete your information at any time; we will act on your request unless a legal obligation requires us to retain it, in which case we will tell you.
Complaints
If you believe we have mishandled your personal information, please contact us first — we will acknowledge your complaint and respond within a reasonable time. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
Contact us about privacy
To ask about your information or exercise your rights, contact us using the details on our contact page. We will acknowledge your message and respond within a reasonable time.