What we do with your details
Last updated 13 October 2026. This policy covers The Airlie Fairy Foundation Limited (ABN 51 692 730 279) and the website at airliefairy.org.
Your card number never reaches us
When you donate, you are taken to a payment page hosted by Stripe, and your card number, expiry and security code are typed there, on Stripe's own systems. They are never sent to this website, never stored by us, and nobody at the foundation can see them. Stripe tells us only that a payment succeeded, how much it was for, and the name and email address you gave. We are told nothing at all about the card itself, not even the last four digits.
If you give monthly, Stripe holds your card so it can take the gift each month. We hold a reference number that points at Stripe's record, not the card.
What we collect
- When you donate. Your name, your email address, the amount, the date, whether the gift is one-off or monthly, and Stripe's reference numbers for the payment, for you as a customer and, for a monthly gift, for the arrangement itself.
- When you ask to manage a monthly gift. Your email address, and a one-time code we email you, which we keep only as a scrambled value and delete within a day.
- When you send us a message. Your name, email address, phone number if you give one, the subject and what you wrote.
- When anyone visits. Our host keeps ordinary technical records of requests to the site for security and for keeping it running. We also use Google Analytics to count visits and see which pages are read, so we know what is useful. It sets cookies in your browser for that. It does not receive your name, your email address or anything about a donation. There are no advertising cookies and no advertising tracking pixel on this site.
We do not ask for, and do not want, information about health, disability, race, religion or anything else the law treats as sensitive. If you choose to tell us something like that in a message, we use it only to answer you.
How we hold it
Donation records live in a database run by Cloudflare, the company that also serves this website. Access to it needs a login that only named people at the foundation and at Webics, who built and maintain the site, are given, and every time one of them exports a list it is recorded. Emails are sent through Resend. Messages you send us arrive in the foundation's own inbox.
What we use it for
- Taking your donation, and emailing you a receipt for it.
- Letting you change or stop a monthly gift without having to contact anyone.
- Thanking you, and answering you when you write to us.
- Keeping the financial records a registered charity has to keep, and reporting totals (never names) to our board, our auditors and the regulators we answer to.
We do not sell, rent, swap or share your details with anyone for their own marketing. We do not add you to a mailing list because you donated.
Who else handles it, and where they are
These are the only organisations that handle your details for us. All four are overseas companies, so yes, your information is likely to be handled outside Australia.
- Stripe
- Takes the payment and holds the card. Stripe operates in Australia through Stripe Payments Australia Pty Ltd and processes payment data in the United States and other countries where it operates. Stripe's privacy policy.
- Cloudflare
- Serves this website, stores the donation records, and runs the “are you a person” check on our forms (Cloudflare Turnstile). A United States company with servers worldwide, including in Australia. Cloudflare's privacy policy and its Turnstile privacy addendum.
- Resend
- Sends our receipts and notifications. A United States company; the mail for this site is sent through its servers in Japan. Resend's privacy policy.
- Runs Google Analytics, which counts visits to this website. A United States company that processes this data in the United States and other countries. It never receives donation or contact details. Google's privacy policy. You can opt out with Google's browser add-on or by blocking cookies in your browser.
Turnstile checks whether a visitor is a person before a form is accepted. It is not an advertising tool and it does not profile you.
How long we keep it
Donation and receipt records are kept for at least seven years, because they are financial records of a charity and we are required to be able to produce them. A one-time code emailed to you is deleted within a day. Messages sent through the contact form are kept while they are useful and then deleted.
Seeing your details, or correcting them
Email info@airliefairy.org and ask. We will tell you what we hold about you and correct anything that is wrong. We will not charge you for it, and we aim to answer within 30 days. We may need to check who you are first, so that we do not hand your details to somebody else.
You can ask us to delete what we hold. We will, except for the donation and receipt records we are required to keep, and we will say plainly which ones those are.
Stopping a monthly gift
At manage your monthly gift. Enter the email your receipts come to and we send you a link that opens your settings, where you can change the card or stop the gift. It takes effect straight away and you do not have to speak to anyone.
If you are unhappy with how we have handled your details
Email info@airliefairy.org with “Privacy complaint” in the subject. A person, not a form, will read it. We will acknowledge it within 5 business days, look into it, and write back to you within 30 days with what we found and what we are doing about it.
If you are not satisfied with our answer, you can take it to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
If this policy changes
The date at the top changes with it. If we ever change something that affects donations already set up, we will email the people it affects rather than leaving it on a page for them to find.