Policies

The Innocent Souls Foundation Ltd ("TISF", "we", "our", or "us") is committed to protecting the privacy, confidentiality, integrity, and security of personal information entrusted to us.

As an Australian not-for-profit organisation dedicated to child protection, cyber safety, prevention, education, research, advocacy, victim support, safeguarding initiatives, and community engagement, we recognise the importance of maintaining the highest standards of privacy and information governance.

This Privacy Policy explains how we collect, use, disclose, store, protect, and manage personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and, where applicable, international privacy obligations including the General Data Protection Regulation (GDPR).

By accessing our website, engaging with our programs, making a donation, subscribing to communications, submitting information, applying to volunteer, or otherwise interacting with TISF, you acknowledge and agree that your personal information may be handled in accordance with this Privacy Policy.

The Innocent Souls Foundation Ltd
ABN: 64 697 123 783
Registered Address: 3 Amy Close, Wyong NSW 2259, Australia
Privacy Enquiries: info@tisf.org.au

This Privacy Policy applies to personal information collected through:

• Our website
• Online forms
• Volunteer applications
• Donations and fundraising activities
• Newsletter subscriptions
• Event registrations
• Research initiatives
• Child protection and cyber safety programs
• Community engagement activities
• Safeguarding and reporting mechanisms
• Partnership enquiries

Communications by email, telephone, social media, online platforms, and written correspondence.

Depending on the nature of your interaction with TISF, we may collect:

Personal Information

• Full name
• Email address
• Telephone number
• Residential or postal address
• Organisation name
• Position or professional title
• Date of birth where necessary
• Communication preferences

Volunteer and Applicant Information

• Curriculum vitae (CV)
• Employment history
• Qualifications
• Certifications
• References
• Screening information
• Working with Children Check details where required by law

Donation Information

• Donor name
• Contact details
• Donation amount
• Transaction records
• Tax receipt information

TISF does not store complete payment card information. Payment processing is conducted through authorised third-party payment providers.

Communications Information

• Emails
• Enquiries
• Contact forms
• Feedback submissions
• Surveys
• Event registrations
• Support requests

Child Protection and Safeguarding Information

• Child welfare concerns
• Child safeguarding matters
• Online exploitation concerns
• Cyber safety reports
• Grooming indicators
• Victim support referrals
• Community reports
• Public submissions
• Research participation

Sensitive Information

• Information relating to vulnerable individuals
• Child protection information
• Information provided as part of safeguarding reports
• Information relevant to referrals and support services
• Volunteer screening information

Sensitive information will only be collected where reasonably necessary for our functions, with consent where required, or where authorised by law.

Protecting children is central to our mission. TISF recognises that children and young people require enhanced privacy protections.

Where information relating to children is collected, we will take reasonable steps to:

• Obtain parental or guardian consent where appropriate
• Limit collection to information reasonably necessary for the intended purpose
• Apply enhanced safeguards and security controls
• Restrict access to authorised personnel and approved service providers

Parents, guardians, authorised representatives, schools, support organisations, or government agencies may provide information relating to children where appropriate and lawful.

If we become aware that information has been collected from a child inappropriately or without required authority, we will take reasonable steps to address the matter.

We may collect information directly from you when you visit our website, contact us, subscribe to newsletters, register for events, make donations, submit forms, apply to volunteer, participate in research activities, request assistance, or submit reports, concerns, referrals, or safeguarding information.

We may also collect information from parents or guardians, government agencies, educational institutions, professional referees, partner organisations, publicly available lawful sources, and third-party service providers acting on our behalf.

• Deliver charitable programs and services
• Advance child protection and safeguarding initiatives
• Provide cyber safety education
• Manage donations and fundraising activities
• Process volunteer applications
• Conduct research and prevention activities
• Assess safeguarding concerns
• Facilitate referrals to support services
• Respond to enquiries and requests
• Improve our programs and website
• Communicate with stakeholders
• Comply with legal obligations
• Protect children and vulnerable persons
• Prevent fraud, misuse, or unlawful conduct

TISF may receive reports, referrals, concerns, intelligence submissions, safeguarding information, cyber safety reports, or other information relating to children, vulnerable persons, online exploitation, grooming behaviours, child sexual abuse material, cyber-enabled offences, or related risks.

Individuals submitting information should provide only information reasonably necessary to explain the concern being reported.

TISF may assess, record, analyse, refer, share, or disclose such information where reasonably necessary to protect children or vulnerable individuals, prevent harm, support safeguarding activities, facilitate referrals, meet legal obligations, or assist authorised government agencies, regulators, child protection authorities, or law enforcement bodies.

Submission of information to TISF does not create a contractual relationship or a duty to investigate every report received. TISF reserves the right to determine how information is assessed, prioritised, referred, retained, or otherwise managed in accordance with applicable laws, internal policies, available resources, and organisational objectives.

As part of our charitable purposes, TISF may conduct research activities, educational initiatives, prevention programs, community awareness campaigns, child protection projects, cyber safety initiatives, and intelligence-led safeguarding activities.

Information may be aggregated, anonymised, de-identified, analysed, or used for statistical purposes to identify trends, risks, vulnerabilities, and opportunities for prevention and public benefit.

TISF will take reasonable steps to ensure that publicly released research does not identify individuals unless authorised by law or consent has been obtained.

TISF may facilitate referrals to external service providers including psychologists, counsellors, healthcare professionals, legal practitioners, government agencies, community support organisations, and victim support services.

TISF does not provide psychological, medical, legal, or clinical treatment services unless expressly stated. Services provided by third-party organisations are governed by their own privacy policies, professional obligations, and terms of service.

We may disclose personal information where reasonably necessary to employees and authorised volunteers, professional advisers, technology providers, cloud service providers, payment processors, government agencies, child protection authorities, law enforcement agencies, regulators, contractors and consultants, and partner organisations supporting our charitable objectives.

Information will only be disclosed where consent has been provided, disclosure is reasonably necessary for our activities, or disclosure is authorised or required by law.

Some service providers engaged by TISF store or process personal information outside Australia. These providers are located primarily in the United States, and in some cases the European Union (including Ireland).

Current overseas service providers include:

• Shopify Inc. (United States) — website platform, online store, donation and product transactions, customer/donor records, form submissions
• Microsoft 365 (United States / EU) — email, document storage, collaboration tools
• Google LLC (United States / EU) — Google Analytics, Google Workspace, cloud infrastructure
• Dropbox Inc. (United States) — file storage and document management
• Canva Pty Ltd (Australia, with US/EU infrastructure) — design and content creation
• Recharge Payments (United States) — subscription and recurring donation processing
• Email marketing platform(s) (United States) — newsletter and communication delivery

The categories of personal information transferred to overseas recipients are limited to contact details, donation and transaction records, email communications and newsletter subscriptions, website analytics data, and form submissions and event registrations.

Safeguarding reports, child protection information, and sensitive personal information are not intentionally transferred to overseas systems and are managed under enhanced access controls.

TISF takes reasonable steps to ensure that overseas recipients handle personal information in a manner consistent with the Australian Privacy Principles, including engaging providers bound by contractual data protection obligations (DPAs and, where applicable, Standard Contractual Clauses), selecting providers subject to substantially similar privacy frameworks, and obtaining individual consent to overseas disclosure prior to transfer where required.

Where it is not practicable to ensure an overseas recipient complies with the APPs, TISF will notify individuals before disclosure and, where required, seek consent in accordance with APP 8.2(a).

Individuals may contact us at info@tisf.org.au with any questions about overseas disclosure of their personal information.

Our website uses cookies and similar technologies to improve security, functionality, performance, and user experience. Information collected may include IP address, device information, browser type, operating system, geographic location data, website usage information, and referring websites.

We currently use, or may implement in the future, Google Analytics, website performance monitoring tools, security monitoring technologies, and cookie consent management systems.

Users may manage cookie preferences through browser settings and available website controls. Where required, consent will be obtained before non-essential cookies are activated.

TISF takes information security seriously and implements administrative, technical, and physical safeguards designed to protect personal information. Measures may include multi-factor authentication, access controls, role-based permissions, encryption technologies, secure cloud storage, cybersecurity monitoring, staff and volunteer confidentiality obligations, and information governance procedures.

While we take reasonable precautions, no electronic transmission or storage system can be guaranteed to be completely secure.

Personal information is retained only for as long as reasonably necessary to fulfil operational requirements, meet legal obligations, protect children and vulnerable persons, maintain organisational records, resolve disputes, and support safeguarding and compliance activities.

When information is no longer required, it will be securely destroyed, deleted, anonymised, or de-identified where appropriate.

From time to time, TISF may send newsletters, program updates, educational resources, event invitations, fundraising communications, and awareness campaigns. Individuals may unsubscribe at any time using the unsubscribe mechanism provided or by contacting us directly.

Individuals may request access to personal information held by TISF, subject to applicable legal exceptions. Individuals may also request correction of inaccurate, incomplete, outdated, or misleading information.

Requests should be submitted to info@tisf.org.au. We may require reasonable verification of identity before processing requests.

Where applicable under the GDPR or similar international privacy laws, individuals may have additional rights including right of access, rectification, erasure, restriction of processing, objection to processing, data portability, and withdrawal of consent.

Requests may be submitted to info@tisf.org.au.

If you believe TISF has breached applicable privacy obligations, you may submit a complaint to the Privacy Officer, The Innocent Souls Foundation Ltd, at info@tisf.org.au.

We will investigate complaints and respond within a reasonable timeframe. If you remain dissatisfied, you may contact the Office of the Australian Information Commissioner (OAIC).

Our website may contain links to third-party websites. TISF is not responsible for the privacy, security, content, or practices of external websites or services. Users should review the privacy policies of those third parties independently.

We may amend this Privacy Policy from time to time to reflect changes in laws and regulations, technology, organisational practices, programs and services, and security requirements. The most current version will always be published on our website. This policy is reviewed at least annually by the Board.

The Innocent Souls Foundation Ltd · ABN 64 697 123 783 · 3 Amy Close, Wyong NSW 2259, Australia · info@tisf.org.au

The Innocent Souls Foundation is committed to maintaining the trust of children, families, supporters, volunteers, donors, partners, and the broader community through responsible, transparent, and secure management of personal information.

Welcome to The Innocent Souls Foundation Ltd ("TISF", "we", "our", or "us").

These Terms of Service ("Terms") govern access to and use of the TISF website, services, programs, online platforms, reporting mechanisms, volunteer applications, donations, research resources, educational materials, and related activities.

By accessing or using our website or services, you agree to be bound by these Terms. If you do not agree to these Terms, you must not use our website or services.

The Innocent Souls Foundation Ltd is an Australian company limited by guarantee.

At the time of publication, TISF is pursuing charitable registration and related endorsements. References to charitable status, tax deductibility, or fundraising activities are subject to applicable laws and regulatory approvals.

Nothing on this website constitutes a representation that tax-deductible status applies unless expressly stated.

You must use the website lawfully and responsibly. If you create an account, submit information, make a donation, apply to volunteer, or otherwise engage with TISF, you represent that:

• The information you provide is accurate
• You have authority to provide that information
• You will comply with applicable laws
• You will not use the website for unlawful, abusive, misleading, fraudulent, or harmful purposes

TISF may allow users to create accounts. You are responsible for maintaining the confidentiality of account credentials, restricting access to your account, and all activities conducted through your account.

TISF may suspend, restrict, or terminate accounts at its discretion where necessary to protect users, children, vulnerable persons, TISF operations, or legal compliance.

TISF exists to support child protection, safeguarding, cyber safety, prevention, education, research, advocacy, and community engagement.

Nothing on this website should be interpreted as law enforcement advice, legal advice, medical advice, psychological advice, clinical treatment, or professional investigative services. Information provided through the website is intended for informational and charitable purposes only.

The TISF website is not an emergency service. Do not rely on this website where a child, vulnerable person, or any individual is in immediate danger.

In an emergency: call 000 immediately; contact relevant child protection authorities; contact law enforcement; contact emergency medical services where appropriate.

For mental health emergencies or crisis support, contact Lifeline on 13 11 14 or another appropriate crisis support provider.

TISF may receive reports relating to child safety concerns, safeguarding issues, grooming concerns, online exploitation, harmful online behaviour, cyber-enabled offences, community concerns, and other matters consistent with our charitable purposes.

By submitting information, you acknowledge and agree that information may not be independently verified, TISF is not obligated to investigate or respond to every report, TISF is not obligated to provide updates regarding any report, and TISF may determine, in its sole discretion, how information is assessed and managed.

Submission of a report does not create a contractual relationship, a duty of care beyond legal obligations, or an obligation to investigate, refer, or take action.

TISF may permit anonymous reports. You acknowledge that anonymous submissions may limit our ability to assess information, reduce our ability to investigate concerns, prevent follow-up communications, and limit actions available to TISF.

TISF makes no guarantee that anonymous information will result in investigation, referral, action, or response.

TISF may, where considered appropriate, refer information to police, child protection agencies, government authorities, regulators, support organisations, and other authorised bodies. TISF is under no obligation to make such referrals and retains discretion regarding how information is managed, subject to applicable laws.

You must not:

• Submit false information
• Deliberately make misleading allegations
• Impersonate another person
• Harass, threaten, abuse, or intimidate others
• Interfere with website operations
• Attempt unauthorised access to systems
• Upload malicious code
• Engage in unlawful activity
• Infringe intellectual property rights

TISF may suspend or terminate access where prohibited conduct is suspected.

TISF may accept one-time and recurring donations. Unless required by law, donations are non-refundable, voluntary, and do not create membership rights, ownership interests, or decision-making authority.

Tax deductibility, where applicable, will be clearly stated at the time of donation.

Submission of a volunteer application does not guarantee acceptance, does not create employment, does not create a contractual relationship, and does not guarantee participation in TISF activities.

TISF may conduct screening, verification, interviews, reference checks, Working with Children Check verification, and other lawful assessments. TISF may accept or reject applications at its discretion.

TISF may publish research, reports, educational materials, cyber safety resources, awareness content, and public interest information. Such content is provided for general informational purposes only and should not be relied upon as legal, medical, psychological, clinical, investigative, financial, or professional advice. Users should seek independent professional advice appropriate to their circumstances.

All content on the website — including text, research, reports, publications, educational materials, logos, graphics, branding, design elements, databases, and software components — is owned by or licensed to TISF and protected by intellectual property laws.

No content may be reproduced, distributed, modified, published, transmitted, displayed, or commercially exploited without prior written consent from TISF.

The website may contain links to third-party websites, services, platforms, or resources. TISF does not control and is not responsible for third-party content, privacy practices, security, services, or actions. Accessing third-party services is at your own risk.

TISF may suspend, restrict, remove, or terminate access to any account, submission, service, or website feature where considered necessary to protect children or vulnerable persons, maintain security, comply with legal obligations, protect TISF operations, or prevent misuse. No compensation will be payable for suspension or termination.

To the maximum extent permitted by law, TISF excludes all liability for losses arising from website use, inaccuracies in information, delays or interruptions, decisions made by users, third-party conduct, and reliance on reports, research, publications, or educational materials.

Where liability cannot be excluded by law, liability is limited to the minimum extent permitted by law.

You agree to indemnify and hold harmless TISF, its directors, officers, volunteers, employees, contractors, and representatives from claims, losses, damages, liabilities, costs, and expenses arising from your breach of these Terms, unlawful conduct, information you submit, misuse of the website, or violation of another person's rights.

Use of the website is also governed by TISF's Privacy Policy and Privacy-First and No-Advertising Data Use Commitment. By using the website, you acknowledge that your information may be collected, used, disclosed, and managed in accordance with those documents.

TISF may amend these Terms at any time. Updated versions will be published on the website together with a revised "Last Updated" date. Continued use of the website after publication of updated Terms constitutes acceptance of those changes.

These Terms are governed by the laws of New South Wales, Australia. Any dispute arising from these Terms or use of the website shall be subject to the exclusive jurisdiction of the courts of New South Wales.

The Innocent Souls Foundation Ltd · ABN 64 697 123 783 · 3 Amy Close, Wyong NSW 2259, Australia · info@tisf.org.au

These Terms are intended to support the responsible operation of The Innocent Souls Foundation while protecting children, vulnerable persons, supporters, volunteers, donors, partners, and the broader community.