Redgum Foundation Ltd

Privacy

How we handle what you tell us

People reach out to us at hard moments. This page says plainly what we collect, where it goes, how long we keep it, and who never sees it.

Last updated 23 August 2026

Draft for board review. This policy describes what the website actually does today. It has not yet been reviewed by the Foundation’s board or a lawyer, and it is not legal advice. Please confirm the retention periods and the complaints contact before launch.

The short version

  • We never share your details with the Department of Veterans’ Affairs, your employer or your service.
  • You do not need a referral, a diagnosis or a claim to contact us.
  • We count page views with a privacy-first tool that uses no cookies and cannot identify you. We run no advertising or tracking of any other kind.
  • We do not set cookies.
  • This website never asks for, sees or stores payment card details.
  • You can ask us to delete everything we hold about you, at any time, and we will.

What we collect

We only collect what you type into a form on this site. There are two:

Program interest form

When you register interest in a program we ask for:

  • your name;
  • your email address;
  • your mobile number — optional, and the form works without it;
  • whether the program is for you, you and your family, or someone you care about;
  • your suburb or town, so we can tell you what is running near you;
  • which program you registered for.

Contact form

When you send us a message we ask for your name, email, an optional mobile number, what the message is about, and the message itself.

We do not ask for your service number, your DVA client number, your medical history or your diagnosis. Please don’t send them. If you choose to tell us something about your health in a message, we treat it as sensitive information: it is only read by the people who need to answer you, and it is covered by everything on this page.

Why we collect it

To answer you, and to run the program you asked about. That is the whole purpose. We use your details to have a conversation with you, work out which program fits, and let you know when dates are confirmed.

We do not use your details for marketing unless you separately subscribe to our newsletter, and you can unsubscribe from that at any time.

Who never sees it

We do not disclose what you tell us to the Department of Veterans’ Affairs, to your employer, to your commanding officer, to your service or agency, or to any insurer. Contacting us has no effect on a DVA claim, an employment record or a service record, and nothing you say here gets back to them through us.

The narrow exception is where the law requires disclosure, or where there is a serious and imminent threat to someone’s life or safety. If we ever had to act on that, we would tell you unless we were legally prevented from doing so.

Where it goes

Form submissions are delivered to a hosted form service, which stores them so our team can read and reply. They are not emailed to anyone’s personal address and they do not pass through a custom server we built.

The other services involved in running this site are:

  • Cloudflare — hosts the website and keeps short-lived security and access logs, which include IP addresses. This is standard infrastructure logging, not analytics.
  • Cloudflare Web Analytics — counts how many people visit each page, which site they came from, and roughly where in the world they are. It sets no cookies, does not fingerprint your device, cannot identify you, and never sees what you type into a form. We use it only to learn which pages are useful.
  • Cloudflare Turnstile — a spam check on our forms. It runs only on the pages with a form and is designed not to track people across websites.
  • Stripe — if you choose to donate, the Donate button takes you to a Stripe payment page. That happens entirely on Stripe’s systems under Stripe’s privacy policy. This website never receives your card details.

Some of these providers store data outside Australia. Fonts are served from our own site rather than a font network, so no third party is told which pages you read.

How long we keep it

Program interest details are kept while we are in contact with you and for up to two years afterwards, so we can let you know about later intakes. Contact messages are kept for up to two years.

After that we delete them, unless you have asked us to keep them or we are required to retain something for our reporting obligations as a registered charity — in which case we keep the minimum required and nothing more.

Ask us to delete your details sooner and we will do it, without asking why.

Your choices

You can, at any time:

  • ask what we hold about you;
  • ask us to correct it;
  • ask us to delete it;
  • ask us to stop contacting you;
  • ask a question about any of this and get a straight answer.

Email [email protected]. We aim to respond within two working days.

If you are not happy with how we handled it

Tell us first — email [email protected] and we will look into it and come back to you.

If you are still not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth).

Who we are

The Redgum Foundation Limited
66 Rundle St, Kent Town, SA 5067, Australia
ABN 26 695 742 520