Privacy Policy | Alannah & Madeline Foundation Skip to main content

Date last updated: 28 February 2024

Privacy Statement

Personal information collected by the Alannah & Madeline Foundation is protected by the Privacy Act 1988 (Cth) (Privacy Act). Personal information is any information or an opinion that identifies you or is reasonably identifiable and includes sensitive information.

We comply with the Australian Privacy Principles contained in the Privacy Act in handling personal information collected from clients and beneficiaries, business partners, donors, members of the public and Foundation staff and volunteers (including employees, volunteers, Board members and other delegates, candidates for volunteer work and prospective employees).

We have developed a Privacy Policy to protect your privacy. You can read the Policy in full here or in hard copy on request. It contains more information about our responsibilities, your rights, the information that may be collected by us, and how it would be used.

The primary purpose for collecting personal information from individuals is to provide a service to you. The kind of information we collect will depend on your relationship with us (e.g. as a client, donor, business partner, employee, volunteer, online user of the Foundation’s websites or products). A collection notice will be given to you setting out these uses at or close to the time we collect any information.

Your personal information may be used to:

  • provide you with a service,
  • report to government or other funding bodies how funding is used,
  • process your donation or purchase and provide receipts,
  • communicate with you about how your donation is used or about programs, events, products and services, which we believe may be of interest to you,
  • respond to your feedback or complaints, and
  • answer your queries.

It may also be used for:

  • any other specific purpose for which it was requested and which was advised to you in the collection notice, and
  • directly related purposes.

Wherever possible, we use information in a de-identified form. Personal information will not be disclosed to third parties without your consent, except where permitted or required under the Privacy Act.

All personal information collected from individuals will be securely stored by us and protected from unauthorised use or access. All reasonable steps will be taken to ensure information is accurate and up-to-date.

Our Privacy Policy also provides a process for requesting access to your personal information and making a privacy complaints.

If you have any enquiries in relation to privacy or personal information please contact:

Privacy Officer
Alannah & Madeline Foundation
387 City Road, South Melbourne

Phone: 1300 720 747
Email: [email protected]

If you wish to change how you receive communications from us (via mail, phone, SMS or email) please email us at [email protected] or call us on 1300 720 747.

Privacy Policy

1. Introduction

The Alannah & Madeline Foundation (ABN 96 514 115 810) including Dolly’s Dream (‘the Foundation / we / us / our’) is strongly committed to protecting the privacy of your personal information. We are subject to the Privacy Act 1988 (Cth), including the Australian Privacy Principles.

The purpose of this policy is to outline:

  • the type of information that we may collect about you; and
  • the purposes for which we will hold, use and/or disclose your personal information.

This Privacy Policy applies to the Foundation’s services and activities including:

  • our fundraising activities;
  • Children Ahead Program;
  • Trauma Consultancy Service (TraCS);
  • eSmart Schools;
  • eSmart Digital Licence+ ;
  • Smart Media Literacy Lab; and
  • Dolly’s Dream.

2. What is personal information

Personal information’ is any information or opinion about an identified individual or an individual who is reasonably identifiable (regardless of whether the information or opinion is true or not or whether it is recorded in a material form or not).

Sensitive information’ is a subset of personal information. It is given a higher level of protection because of its sensitive nature. It includes health information, as well as personal information that is about an individual’s:

  • racial or ethnic origin
  • political opinions
  • membership of a political association, a professional or trade association, or trade union
  • religious beliefs or affiliations
  • philosophical beliefs
  • sexual orientation or practices, or
  • criminal record.

3. What personal information do we collect?

The types of personal information we collect depends on the dealings you have with us.

We may collect and store personal information such as:

  • identifying information about you (for example, your name, email address, gender, phone number, address, the name of the organisation you work for, your interests and preferences);
  • in the case of a participating child, details of that child's gender, year of birth, school, year level, student identifiers, names of teachers and key contacts, and student email address;
  • if you are an authorised school staff member or representative, your job title and school contact details;
  • information, including sensitive information, about you and/or your child or children’s social, educational and financial circumstances, health and wellbeing and/or requirements for assistance and support, including:
    • cultural background;
    • lived experiences;
    • Learning module results data (including overall module scores, levels of achievement on student outcomes and how students interact with the modules);
  • and information about your, or your child's, current and previous engagements with us, including involvement in any of our activities and programs.

If you engage financially with us, we may also store your tokenised credit card information, bank account details or donation history in accordance with law.

If you are applying to work or volunteer with the Foundation, we may require additional information such as your work history, qualifications, criminal record check, relevant medical information, personal alternative contact details, references, and Working With Children check.

4. What happens if I do not provide this information?

We may be unable to process your donation (including providing a receipt), verify or respond to your enquiry, provide you or your child with the requested information or service, or offer you employment/volunteer opportunities (as applicable).

Where lawful and practical, you may communicate with the Foundation anonymously or using a pseudonym. For example, if you contact us with a general question, we will not require that you provide us with your name. However, for many of our functions and activities, we may need your name, contact and information to be able to communicate with you. If you do not wish to provide this information, it may impact how we can assist, respond or otherwise communicate with you.

5. Ways we collect your personal information

The Foundation may collect personal information in different ways including:

However, we only collect personal information about a participating child if that information is provided to us by:

  • the child’s parent or legal guardian, or
  • an educational organisation representative, providing we have consent from the child’s parent or guardian permitting us to collect, use and disclose the child’s information for the purposes set out in this Privacy Policy (but not including direct marketing).

We will seek consent before collecting any personal information about your child from a third party, unless it is unreasonable or impracticable for us to do so, or it is not required by law.

If you are applying to work or volunteer with the Foundation, we may also collect personal information about you from third parties and publicly available sources including:

  • recruiters;
  • government departments to verify your entitlement to work;
  • police agencies to obtain your criminal history record;
  • academic institutions; and
  • your referees.

When you visit any of the Foundation websites we may also use ‘cookies’ or other online browsing tracking technologies such as Facebook tracking pixels or Google Tag Manager Analytics. These cookies collect IP addresses, browser details, dates and times of requests and browser identity. These services help us track your website usage and remember your preferences.

Whilst we do not use browsing information to identify you personally, we may record certain information about your use of our website, such as which pages you visit, the time and date of your visit, search engine referrals and the internet protocol address assigned to your computer to provide aggregate, anonymised user behaviour and engagement data.

We use Google Analytics features based on Remarketing, Google Analytics Demographics, and Interest Reporting. These features use first-party and third-party cookies to inform and optimise content based on your past visits to any of the Foundation's websites.

Google Analytics informs us of how visitors use our site based on your browsing habits, so that we can improve our sites to make it easier for you to find the information you are seeking. Google also receives this information as you browse our site and other websites on the Google Display Network using Remarketing.

In addition:

  • third-party vendors, including Google, show our ads on sites across the Internet, and
  • we and third-party vendors, including Google, use first-party cookies (such as the Google Analytics cookie) and third-party cookies (such as the DoubleClick cookie) together to inform, optimise, and serve ads based on someone’s past behaviour to our website.

If you would like to opt-out of customised Google Display Network services you can use Ad Settings You can also use the Google Analytics opt-out browser add-on

6. What do we do with your personal information?

Your personal information is held and used to:

  • provide you with the information and services you have requested and associated administrative tasks;
  • provide you and/or any child participating in our programs with information and services which the Foundation considers to be appropriate in accordance with our purpose;
  • deliver our eSmart digital learning programs (including Digital Licence+ and eSmart Media Literacy Lab), including by:
    • activating and providing you with access to those programs;
    • issuing a participating child with a ‘Digital Licence’ or 'Certificate of Achievement' following successful completion of the applicable digital learning modules; and
    • responding to enquiries about the provision of our programs, including product-related customer service.
  • process donations and payments that you may make to the Foundation, or assist you in your fundraising activities for the Foundation;
  • contact you to respond to an enquiry, or provide you with information or services you have requested;
  • process any application you make for employment or volunteering opportunities;
  • manage, monitor and conduct the Foundation and its activities including the specific programs;
  • obtain feedback for the purposes of evaluating and improving our products or services, which may involve sending voluntary customer surveys from time to time;
  • for direct marketing by the Foundation and affiliated organisations in relation to our services and activities and the services and activities of other 'for purpose' organisations;
  • preparing de-identified data for internal and external reporting purposes (including to funders), including Child Online Safety Index, and our DQ Institute Impact Portal;
  • investigating and taking appropriate action in relation to an identified potential or serious threat or risk to you, other customers, our staff, or members of the public; and
  • comply with our legal obligations, resolve any disputes and enforce our agreements and rights with third parties.

We may also use your personal information to provide you with information about the Foundation or invite you to donate. We might do this by sending you our newsletter (via post or email) or other information, or by telephoning you. If you do not wish to receive this type of contact from us, please use the ‘opt out’ or ‘unsubscribe’ option contained in the relevant communication, let us know if we telephone you, or contact our Privacy Officer.

7. Disclosure of your personal information

With your consent, we may disclose your personal information (but not sensitive information) to third parties, for the purpose of marketing directly to you about:

  • our services and activities; and
  • the services and activities of other like-minded 'for purpose' organisations.

You can request not to receive direct marketing communications from us, and for us not to disclose your personal information to third parties at any time by contacting our Privacy Officer.

We may also disclose your personal information to:

  • third party service providers who work with us or provide services to us and you;
  • other organisations which partner with us to help our cause; and
  • your financial institution where this is required for direct debit or credit card transactions.

Other than as described above, we will not use or disclose personal information about you, or your child or children, to any third party unless:

  • you, or your authorised representative, provide your consent to the use or disclosure; or
  • it is required or authorised by law, including under the Australian Privacy Principles.

Sometimes the Foundation is involved in partnerships or funding arrangements which require that it disclose data to third parties. Usually this involves reporting information which will be de-identified.

8. Direct Marketing

You can opt out of receiving direct marketing communications at any time by contacting our Privacy Officer, or clicking on the ‘unsubscribe’ link included in marketing communications. We will process your request as soon as practicable.

9. Sharing outside of Australia

We primarily store your personal information in Australia. However, your personal information may be stored in cloud or other types of networked or electronic storage, including overseas, including the United States of America.

Prior to disclosing personal information overseas, we will take steps to ensure your personal information will be afforded the level of protection required of us and our service providers in accordance with applicable data protection laws and current legally recognised data transfer mechanisms.

Overseas organisations may be required to disclose information we share with them under an applicable foreign law.

10. Protecting the privacy of the children and families we assist

The Foundation’s purpose is to empower children and young people to be safe. The privacy of the children and families we assist is of the utmost importance. The Foundation will only collect, handle and disclose personal information in accordance with this policy and privacy laws.

Some legislation requires or authorises the Foundation to collect or disclose personal information without consent including (but not limited to):

  • Health Records Act 2001 (Vic)
  • Data Protection Act 2014 (Vic)
  • Data Protection Act 2014 (Vic)
  • Family Violence Protection Act 2008 (Vic)
  • Child Wellbeing and Safety Act 2005 (Vic)
  • Children, Youth and Families Act 2005 (Vic).

Some examples of situations where the Foundation is required or authorised by law to collect or disclose personal information without consent include:

  • if the Foundation reasonably believes a child is in need of protection from physical injury or sexual abuse, the Foundation is usually required to report that information to a child protection agency and/or police;
  • if the Foundation reasonably believes it is necessary to lessen or prevent a serious threat to the life, health or safety of any individual, or to public health or safety, the Foundation may collect, use or disclose information for that purpose;, or
  • if the Foundation receives a valid request for information by way of subpoena or by other legal mechanism, the Foundation is generally required to respond.

Names and photographs used on our website are always used with consent. Sometimes, subject names will have been changed to protect privacy.

The Foundation’s Child Safe Policy is available on our website.

11. Keeping your information safe

The Foundation takes your privacy seriously. We may hold your personal information in different ways, including in physical (hard copy) or electronic form. We take all reasonable and appropriate steps to protect your personal information from misuse, interference and loss, as well as unauthorised access, modification or disclosure. This includes the secure storage of any electronic documents within Australia and storage of paper files in secure locations such as locked filing cabinets. The Foundation will not disclose your personal information to overseas recipients unless you request that we do so, or we are required by law to do so.

We will only keep your personal information for as long as we require it:

  • for the purposes of providing access to our services;
  • for our business operations; or
  • in accordance with, and for the purposes of, applicable laws.

12. Access to, and correction of, your personal information

We endeavour to ensure that the personal information collected from you is up to date, accurate and complete.

You may request access to, or correction of, the personal information held by the Foundation about you or your child. To do this, please contact our Privacy Officer in writing on the details below. We will respond to your request promptly, generally within 30 days.

We may need to verify your identity before responding to your request.

We will generally provide access where a request is made, unless an exception under the relevant privacy laws applies, such as where giving access would have an unreasonable impact on the privacy of others, or where we are required or authorised by law to deny access. If we refuse your request, we will give you written notice of our decision, including our reasons and how to complain if you are not satisfied with our decision.

13. Privacy queries and complaints

If you would like to contact the Foundation about the way we manage your personal information or make a complaint, you can contact our Privacy Officer at: [email protected]. We will make all reasonable efforts to investigate and respond to any complaint, query or privacy question within 30 days.

We may need to request more information from you before we can achieve an effective resolution.

If you are not satisfied with our response, you can make a further complaint to the Office of the Australian Information Commissioner on the details below:

Office of the Australian Information Commissioner

Phone: 1300 363 992

Post: GPO Box 5218, Sydney NSW 2001

Online form:

14. Other enquiries

If you have a general enquiry or would like to contact the Foundation for a reason that is not related to the way we manage your personal information, you can contact us at: [email protected].

15. Changes to this Privacy Policy

The Foundation may, from time to time, update or change this Privacy Policy to ensure that it reflects the acts and practices of our organisation as well as any changes in the law. Any changes will take effect from the time that they are posted on our website.

Date last updated: 28 February 2024

Privacy collection notice

Who is collecting the information?
Alannah & Madeline Foundation

Privacy concerns can be sent to:

Privacy Officer
Alannah & Madeline Foundation
387 City Road, South Melbourne

Phone: 1300 720 747
Email: [email protected]

How do you collect information?
We may collect your information in a number of ways:

  • directly from you (for example, when you send us an email, make a donation, or contact us by telephone)
  • from third parties (for example, our professional marketing and fundraising contractors)
  • from publicly available sources or information (for example, social media).
Why does the Alannah & Madeline Foundation need to collect this information?
We need to collect this information so that we can do one or more of the following:
  • process your donation or purchase;
  • to verify your identity;
  • enable you to participate in our activities or provide you with information about our activities;
  • provide you with a tax receipt at tax time;
  • enable you to participate in or invite you to participate in our fundraising campaigns including appeals, raffles and other events such as Alannah & Madeline Day;
  • to gain an understanding of your communication needs, to perform research and analysis to improve the way in which we engage with you as a supporter.

We also use your information for direct marketing. We use your information to promote our programs and activities and other services that we think will interest you. This marketing may be by email, phone, SMS, post or online. You are entitled to opt out of direct marketing at any time.

The primary purpose for which the information is being collected
The primary purpose of collecting your information depends on why we initially collected your information. Typically, the primary purpose will be one or more of:

  • to process your donation
  • to process your raffle ticket purchase
  • to participate in our activities (for example, Alannah & Madeline Day, or Do It For Dolly Day, etc)
  • to provide you with direct marketing and tell us how your donations have been used to support our mission and purpose.

The secondary purposes (if any) for which we are collecting this information
The secondary purpose of collecting your information is to profile our supporters so that we provide you with the high-quality service and information that you expect from us.

For some fundraising activities (such as Alannah & Madeline Day) we may use your name on our website for the leaderboard. You can elect to opt-out of this at any time.

What happens if we don’t collect this information?
If we don’t collect this information from you, we may not be able to process your donation or raffle ticket purchase, enable you to participate in our activities or provide you with direct marketing.

You have the right to ask that we do not record your real name. Sometimes we may require your real name, for example, in order to claim your raffle prize.

Organisations we may disclose this information to
We may disclose your information to third parties that provide services to us. These services include professional marketing and fundraising organisations who provide us with letter printing, call centre, email and data analysis services. These organisations may provide us with other similar services. We may also disclose your information to organisations that provide us with information technology and banking services.

We may also occasionally disclose your personal information to other reputable Australian charities (third parties) for the purpose of conducting fundraising direct marketing, so these like-minded charities can market their services and activities to you. Those organisations allow us to do the same with their supporters and in this way, both the Foundation and the other organisations can reach more people with vital information about our services and programs and the ways people can make a donation to support our work.

You can tell us at any time if you do not wish for your information to be shared with these organisations by contacting us on 1300 720 747 or emailing [email protected].

Access and correction
Information about accessing your information
and requesting corrections is set out in our Privacy Policy.

Information about how to complain
is also included in our Privacy Policy. You can also complain directly to the Privacy Commissioner at

Will my information be stored offshore?
Your information is stored in Australia. Sometimes organisations that we may disclose your information to are located outside Australia. For example, we may disclose your information to service providers in New Zealand.

You can make a request not to receive direct marketing at any time by emailing [email protected],au or calling by calling us on 1300 720 747.