This policy explains how Not Just A Statistic Ltd handles personal and financial information. It is written to comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth) and the Payment Card Industry Data Security Standards (PCI-DSS).
Last updated: 8 September 2026
We collect personal information necessary to process your donations, issue official tax receipts, and comply with Australian taxation laws. This includes your full name, email address, physical address (for tax receipting), and billing information.
We also collect information you provide via our referral, volunteer, membership and contact forms to enable us to deliver services and respond to enquiries.
All online credit card transactions are processed securely through our third party payment gateway provider (Stripe, once activated). Your credit card details are encrypted using Secure Sockets Layer (SSL) technology and sent directly to the processor.
Not Just A Statistic Ltd does not capture, store, or view your full credit card number or CVV/CVC security code on our internal servers or systems. All processing complies strictly with the Payment Card Industry Data Security Standard (PCI-DSS).
Financial data is used solely to process your authorised transaction, manage recurring donation schedules (if selected), and handle refund requests.
Your financial information will never be shared, sold, rented, or disclosed to third parties for marketing purposes. It will only be disclosed if required by law or to verify transactions with our financial institution.
Personal information collected through client, volunteer and membership channels is held in strict confidence and handled in accordance with our internal Privacy & Confidentiality Policy and applicable safeguarding legislation.
Some of our third party service providers and payment processors utilise cloud based infrastructure located outside of Australia (such as the United States). By submitting your donation or personal information, you consent to the secure transfer and storage of your information on these secure international servers in compliance with global data protection standards.
Under Australian taxation law, records of your donation and tax receipt must be retained by us for a minimum of seven (7) years.
All tokenised or temporary credit card data used for a live transaction is cleared or securely deleted immediately upon successful completion of the payment.
Client case records and referral information are retained in accordance with our internal Case Notes Policy and any applicable legal requirements, and are securely destroyed at the end of the required retention period.
You have the right to request access to the personal information we hold about you, to request correction of any inaccuracies, and to lodge a complaint about how we handle your information.
To exercise these rights, or if you have any questions about this policy, please contact us at info@njas.org.au. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
This policy should be read alongside our Company Constitution and any additional internal privacy and confidentiality policies maintained by the Board.
