Privacy Policy

Introduction

This Privacy Policy explains how Kharchu Centre Brisbane Inc. handles personal information when you use the Kharchu Membership Portal. We aim to handle personal information responsibly and in accordance with applicable Australian privacy requirements.

Information we collect

Depending on how you use the portal, we may collect information you provide, information needed to administer membership, account and sign-in information, and records of portal activity and transactions. The information collected will depend on the service or function you use.

Membership information

Membership information may include your name, contact details, Membership ID, membership status, contribution arrangement and information you provide when registering or updating your details. We use this information to administer membership and provide relevant portal services.

Account and authentication information

The portal processes account identifiers and authentication-related information needed to sign you in, maintain your session and protect your account. Depending on the sign-in method, this may include your email address and authentication tokens or session information managed by the authentication service. We do not ask you to provide your Google password to the portal.

Google Sign-In

If you choose Google Sign-In, Google may provide basic account or profile information needed for authentication, such as your name, email address and profile information, depending on the permissions granted. The portal uses Google authentication to identify and authenticate you and provide portal access. The portal does not collect or store your Google password. The portal requests information for sign-in and does not request access to Gmail, Google Drive, contacts, calendar or other Google services.

Payment information

Payment processing may be provided through Square. Card details are entered using Square's payment service and are tokenised or handled by Square; the portal is not designed to store full card numbers or card security codes. The portal may retain transaction, payment-status, amount, date and membership-payment records for administration, reconciliation and legal or accounting purposes.

How information is used

Personal information may be used to:

• create and maintain portal accounts and authenticate users;
• administer membership, contact members and provide membership services;
• process and reconcile membership contributions and provide payment records or receipts;
• maintain portal security, investigate issues and support the portal; and
• meet applicable record-keeping or other legal obligations.

When information may be disclosed

We may disclose information where needed to provide a service you request, administer membership, maintain the portal, or meet a legal obligation. We do not describe this as selling personal information. We aim to limit access and disclosure to what is reasonably needed for the relevant purpose.

Service providers

The portal relies on service providers for functions such as authentication and data hosting, payment processing, and application hosting or delivery. These may include Google, Supabase, Square and infrastructure providers. Their services may process information under their own terms and privacy notices. Information may be handled in locations outside Australia depending on the provider and service configuration.

Data security

We use administrative and technical measures intended to protect information from unauthorised access, loss, misuse or alteration. No online service can be guaranteed completely secure. Please keep your sign-in details confidential and contact us if you believe your account has been accessed without permission.

Data retention

We retain information for as long as reasonably needed to provide portal and membership services, maintain appropriate records, resolve issues, and meet applicable legal or accounting requirements. Retention periods may differ depending on the type of information and the reason it is held.

Access and correction

You can review some account and membership information in the portal. To request access to or correction of information that is not available there, contact us using the details below. We may need to verify your identity before responding to a request.

Privacy enquiries

For privacy questions or requests, email kharchubrisbane@gmail.com. Please include “Privacy enquiry” in the subject line and do not send passwords or payment-card details.

Changes to this Privacy Policy

We may update this Privacy Policy when our practices or the portal change. The current version and its last-updated date will be published on this page.