Your data, your story — handled with respect.

Privacy Policy

← Back to PAPASITO

Privacy Policy

Draft v0.1 — 6 November 2026 — for review before publication

PAPASITO respects your privacy. This policy explains what personal information we collect, why we collect it, how we look after it, and what your rights are. We aim to handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), whether or not they apply to us by law.

In this policy, "PAPASITO", "we", "us" and "our" means [legal entity name, ABN — to be confirmed]. "You" means anyone who visits our website, registers, or takes part in PAPASITO crews, events or online spaces.

1. What we collect

When you register or contact us:

  • your name, email address, mobile number, city or suburb and age bracket
  • the activities you're interested in (for example crew check-ins, Sunday table, rides)
  • how you heard about us
  • anything you choose to tell us in free-text fields, such as "What brings you to PAPASITO?"
  • your consent to be contacted

When you take part:

  • event RSVPs and attendance
  • photos or video taken at events, but only where you've agreed (see section 6)
  • messages you send us, and feedback you give

When you become a paying member (future):

  • billing details. Payments are handled by our payment provider (for example Stripe) and we do not store your full card details.

Automatically, when you visit the website:

  • basic technical information such as browser type and pages visited, if we use analytics. If we do, we'll prefer privacy-friendly analytics and won't use it to identify you.

2. Sensitive information

PAPASITO is about wellbeing, so some members may choose to tell us about their mental or physical health, relationships or personal struggles. This is sensitive information under the Privacy Act and we treat it with extra care:

  • We never require you to share health information to join.
  • We only collect it if you choose to share it, and only use it to support you and to make PAPASITO safe.
  • Access is limited to the founder and, where relevant, your crew leader.
  • We will not use it for marketing, and we will never sell it.

Please don't share anything in our forms that you aren't comfortable with us holding.

3. Why we collect it

We use your information to:

  • process your registration and welcome you
  • match you with a crew and invite you to events
  • run PAPASITO safely, including responding if we're worried about someone's safety (see our Crisis Response & Safeguarding Policy)
  • send you updates about PAPASITO. You can unsubscribe at any time, in line with the Spam Act 2003 (Cth)
  • manage memberships and payments (when introduced)
  • improve what we do

We will not sell, rent or trade your personal information. Ever.

4. Who we share it with

We only share personal information:

  • within PAPASITO: with your crew leader, and with other members only what you choose to share (for example your first name and city in your crew)
  • with service providers who help us run PAPASITO, such as our form provider, email platform, website host and payment processor. They may only use it to provide their service to us
  • in an emergency: with emergency services, or a person you've nominated, if we reasonably believe it is necessary to lessen or prevent a serious threat to someone's life, health or safety
  • where required by law

Overseas service providers

Some of our providers store data outside Australia, for example in the United States or the European Union. We choose reputable providers and take reasonable steps to make sure they handle information consistently with the APPs. Current providers: [list once chosen, e.g. Formspree (US), MailerLite (EU), Stripe (US)].

5. How we protect it

We take reasonable steps to protect your information from misuse, loss, and unauthorised access or disclosure. These include:

  • using reputable, secure platforms
  • strong passwords and two-factor authentication
  • limiting who has access
  • deleting information we no longer need

If a data breach is likely to cause you serious harm, we will tell you and, where required, the Office of the Australian Information Commissioner (OAIC).

6. Photos and stories

We love capturing the good times, but your image and your story belong to you.

  • We'll ask before taking or publishing photos where you can be identified.
  • Tell us at any time if you'd like a photo removed and we'll take it down from our channels as soon as practicable.
  • We won't share anything you've said in a crew or one-on-one without your permission.

7. How long we keep it

We keep your information while you're involved with PAPASITO and for a reasonable period afterwards. After that we delete it or remove anything that identifies you, unless the law requires us to keep it longer. If you register but don't join a crew, we'll delete your details after [24 months] of no contact.

8. Your rights

You can:

  • ask what information we hold about you
  • ask us to correct it
  • ask us to delete it
  • unsubscribe from emails at any time
  • deal with us using a nickname where that's practical. You'll need to give us a real way to contact you to join a crew.

Email us at [hello@papasito.com.au] and we'll respond within 30 days.

9. Complaints

If you're concerned about how we've handled your information, please contact us first at [hello@papasito.com.au]. We'll take it seriously and respond within 30 days.

If you're not satisfied, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.

10. Changes

We may update this policy as PAPASITO grows, for example when we launch memberships. We'll post the new version here and tell registered members about significant changes.

Contact: [hello@papasito.com.au] · [postal address — optional]