1. Who we are
[Legal Entity Name], trading as IndoCommunity (“IndoCommunity”, “we”, “us”, or “our”), is responsible for the personal information described in this policy. Our contact details appear in Section 15.
2. Information we collect
The information we collect depends on how you use the Services and may include:
- Account and identity information: name, profile photograph, date of birth or age range, gender (if provided), username, password, and account identifiers.
- Contact information: email address, mobile number, postal address, and communication preferences.
- Community information: interests, community memberships, volunteer details, campaign participation, posts, comments, reviews, images, videos, and other content you submit.
- Event and transaction information: registrations, bookings, tickets, attendance, donations, purchase history, invoices, refunds, and related communications.
- Payment information: payment status and limited transaction details. Full card or bank details may be collected directly by our payment provider rather than stored by us.
- Location information: approximate location derived from an IP address and, only where you grant permission, precise device location for location-based features.
- Device and usage information: IP address, device type, operating system, app version, browser, language, unique device identifiers, crash logs, pages or features used, and access dates and times.
- Communications: support requests, feedback, complaints, survey responses, and records of messages sent to us.
- Permissions: information accessed through device permissions you enable, such as camera, photos, microphone, contacts, location, or notifications. The app should request these permissions only when needed for a feature.
Please do not provide sensitive information unless it is necessary and you consent to its collection, or collection is otherwise permitted by law.
3. How we collect information
We may collect information directly from you when you register, update your profile, publish content, book an event, make a payment, volunteer, contact support, or otherwise use the Services. We may also collect information automatically from your device and receive it from event organisers, community administrators, service providers, payment processors, analytics providers, social sign-in providers, or another user where permitted by law.
If you provide information about another person, you must have authority to do so and, where required, tell them about this policy.
4. Why we use your information
We use personal information where reasonably necessary to:
- create, verify, secure, and manage your account;
- provide community features, event bookings, campaigns, volunteering, listings, and support;
- process transactions, confirmations, cancellations, and refunds;
- personalise content and recommend relevant events or services;
- send service messages, security alerts, booking updates, and notifications;
- send marketing communications where you have consented or where otherwise permitted by law;
- moderate content, investigate reports, prevent fraud and misuse, and protect users;
- analyse performance, troubleshoot problems, develop features, and improve the Services;
- comply with legal obligations and respond to lawful requests; and
- establish, exercise, or defend legal claims.
5. Public content
Profile details, event listings, posts, comments, reviews, photographs, and other content you choose to publish may be visible to other users or the public. Public content may be copied or shared by others outside IndoCommunity. Review your audience and privacy settings before posting, and avoid publishing information you want to keep private.
6. When we disclose information
We may disclose relevant information to:
- event organisers, community administrators, service providers, volunteers, or campaign owners when needed to provide a feature you request;
- hosting, cloud storage, payment, email, SMS, push-notification, analytics, security, customer-support, and technology providers working for us;
- professional advisers, insurers, auditors, and regulators;
- law-enforcement bodies, courts, government agencies, or other parties where required or authorised by law;
- a purchaser or successor involved in a merger, restructure, financing, sale, or transfer of all or part of our organisation; and
- other parties where you direct or consent to the disclosure.
We do not sell personal information for money.
7. Overseas disclosures
Some technology and service providers may store or process information outside Australia. Likely locations include [list countries where your hosting and service providers process data]. Where required, we take reasonable steps to ensure overseas recipients handle personal information consistently with applicable Australian privacy requirements. Because provider locations may change, contact us for current information.
8. Cookies, analytics, and similar technologies
Our website and app may use cookies, local storage, software development kits, pixels, and similar technologies to keep you signed in, remember settings, understand usage, measure performance, prevent fraud, and improve the Services. You can control some technologies through browser, device, or app settings. Disabling them may affect functionality.
9. Marketing and notifications
You may opt out of promotional emails or SMS messages using the unsubscribe option provided or by contacting us. You can manage push notifications in the app or device settings. We may still send essential messages about your account, security, transactions, or changes to the Services.
10. Storage, security, and retention
We use reasonable administrative, technical, and physical safeguards designed to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. No internet service or storage system can guarantee absolute security.
We retain information only for as long as reasonably necessary for the purposes described in this policy, including legal, accounting, fraud-prevention, dispute-resolution, and security requirements. When information is no longer required, we take reasonable steps to delete it or permanently de-identify it, unless the law requires continued retention.
11. Access, correction, and account deletion
You may request access to personal information we hold about you or ask us to correct inaccurate, out-of-date, incomplete, irrelevant, or misleading information. You may also request account deletion. We may need to verify your identity before acting and may retain limited information where required or permitted by law. If we refuse an access or correction request, we will explain the reason where required.
Submit a request using the contact details in Section 15 or through any account controls provided in the app.
12. Children’s privacy
The Services are not intended for children under [minimum age] without the involvement and consent of a parent or legal guardian. We do not knowingly collect a child’s personal information contrary to applicable law. A parent or guardian who believes a child has provided information without appropriate permission should contact us so we can investigate and take appropriate action.
13. Third-party services
The Services may link to or integrate with third-party websites, maps, social platforms, payment services, or event providers. Their privacy practices are governed by their own policies. We encourage you to review those policies before providing information.
14. Privacy complaints
To make a privacy complaint, contact our Privacy Officer using the details below and explain your concern. We will acknowledge and investigate the complaint and aim to respond within a reasonable period. If you are not satisfied, you may be entitled to contact the Office of the Australian Information Commissioner at www.oaic.gov.au.
15. Contact us
Privacy Officer — [Legal Entity Name]
Trading as IndoCommunity
Email: privacy@indocommunity.com.au
Address: [Business Address]
ABN/ACN: [ABN or ACN]
16. Changes to this policy
We may update this policy when our Services, information-handling practices, or legal obligations change. We will publish the revised policy and update the date above. Where a change is material, we will provide reasonable notice through the app, website, or your registered contact details.