Privacy Notice
Last reviewed: 2026-07-25
This notice explains how Octopus Foundation collects, uses, discloses and protects the limited personal information you choose to share with us through this website. We aim to handle personal information consistently with the Australian Privacy Principles under the Privacy Act 1988 (Cth), and our approach is simple: collect as little as possible, use it only for the purpose you gave it, and protect what we hold.
What we collect
We collect only the information you actively provide — for example, your name, email address, organisation, country or region, and message when you send an expression of interest or contact us. We do not collect sensitive information (as defined in the Privacy Act), health information or identity documents through this site, and we ask you not to include such information in free-text fields. If you do, we will delete it rather than retain it.
How we use it
We use your information solely to respond to your enquiry and to coordinate the participation you have asked about. We do not sell personal information, use it for advertising or profiling, or use it to train AI systems. We will not use it for an unrelated purpose without asking you first.
Analytics & cookies
By default this site uses no invasive analytics, no advertising trackers and no non-essential cookies. If a privacy-respecting analytics tool is ever enabled, we will describe it here and honour your choices.
Sharing
We share your information only with the people and service providers needed to respond to you — such as email and website hosting providers — and only to the extent necessary. No commercial entity in the Octopus ecosystem receives your information automatically; where one is involved in a project you have asked about, we will tell you before your information is shared.
Overseas disclosure
Some of our service providers — such as email and website hosting — may store or process information outside Australia. Where they do, we take reasonable steps to ensure your information is handled consistently with this notice and the Australian Privacy Principles.
How we protect it
We take reasonable steps to protect the information we hold from misuse, interference, loss and unauthorised access, modification or disclosure — including access controls, encryption in transit and collecting as little as possible in the first place. No internet service can be perfectly secure; if a data breach involving your information is likely to result in serious harm, we will notify you and the OAIC as the law requires.
Keeping & deleting
We keep your information only as long as needed for the purpose you shared it, or as the law requires, and then securely delete or de-identify it. You can ask us to access, correct or delete your information at any time; we will act on your request unless a legal obligation requires us to retain it, in which case we will tell you.
Complaints
If you believe we have mishandled your personal information, please contact us first — we will acknowledge your complaint and respond within a reasonable time. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
Contact us about privacy
To ask about your information or exercise your rights, contact us using the details on our contact page. We will acknowledge your message and respond within a reasonable time.