Privacy policy

StandWith (standwith.com.au) helps people publish fundraising pages and sell tickets to fundraising events. It is run by Jon Lee Taylor, a sole trader based in New South Wales (ABN 50 154 134 393). This policy explains what personal information we collect, what we do with it and the choices you have. For any privacy question, request or complaint, use our contact page and choose “Something else”.

If you organise a fundraiser: your name, email address and password (we never see or store your password in readable form), the names of the organisation and the person or cause you’re fundraising for, your event details, and the words and photos you add to your page. If you sell paid tickets, we also collect the bank account details we need to pay you.

If you buy tickets: your name and email address, what you bought and your order reference. Card and wallet details go straight to our payment provider, Stripe. We don’t receive or store your card number.

If you start a page or event before signing in: we keep your working title and choice of page or event in this browser tab so you can continue after signing in. This temporary start can be resumed for 24 hours and is cleared after you save it in the editor. It is not a public page or a saved account draft. Avoid private details at this step.

If you contact us: your name, email address, what your message is about, any reference you give us and your message.

If you register your interest: your email address, what you’re interested in, when you agreed to hear from us, and the page or campaign that brought you to us.

If you bid in a silent auction: your name, phone number or email address, and your bids.

When you use the site: to limit spam and abuse, we keep a scrambled version of your IP address that can’t be turned back into the address. Our hosting provider keeps short-term server logs, which include IP addresses. If you sign in, we set a cookie that keeps you signed in. We don’t use advertising or tracking cookies.

When an organiser publishes a page, everything on it can be seen by anyone with the link, including the organiser’s words, photos and the name of the person or cause they’re fundraising for. Buyers’ details are never shown on a public page.

• to run your account and publish your pages
• to process ticket orders, send confirmations and handle refunds
• to pay organisers the money they raise
• to reply to messages and look into reports
• to send emails you need, such as order confirmations and password reset links
• to send updates about StandWith, but only if you’ve asked for them
• to prevent spam, fraud and misuse, and to keep records the law requires

Event organisers. When you buy tickets, the organiser of that event can see your name, email address and order, so they can run the event and contact you about it. Organisers agree to only use these details for their event.

Service providers who help us run StandWith:

• Vercel, which hosts the website
• Supabase, which stores our database and uploaded photos
• Stripe, which processes payments
• Resend, which sends our emails

We also share information when the law requires it. We don’t sell personal information, and we don’t share it with advertisers.

Our database and uploaded photos are stored in Sydney, Australia. Some of our service providers, including Stripe, Resend and Vercel, may process information in other countries, including the United States.

• Account and page details: while your account is open, and for a short time after you close it.
• Orders and payment records: for as long as we need them for financial records.
• Contact form messages: deleted from StandWith after 30 days. If we reply by email, that conversation stays in our inbox.
• Silent auction bidder details: deleted 30 days after the auction closes.
• Photos uploaded but never used on a page: deleted within a day.
• Interest registrations: until you ask us to remove you.

StandWith accounts are for adults. Many fundraisers are for families, so pages sometimes include children. Organisers must have a parent or guardian’s permission before adding a child’s name, photo or story, and should share only what’s needed. A parent or guardian can ask us to remove a child’s information through the contact page.

You can update your pages and events yourself when you’re signed in. To ask for a copy of your information, a correction, deletion, or to stop hearing from us, send us a message through the contact page. We may need to confirm who you are first. We’ll respond within 30 days. We may need to keep some records, such as orders, for the reasons above.

If you’re unhappy with how we’ve handled your information, tell us through the contact page and we’ll look into it. If you’re not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

We’ll update this policy when what we collect or who we share it with changes, and change the date at the top. If a change makes a real difference to you, we’ll let you know.