Date approved: 30 June 2026 Next review date: 30 June 2028
1. Introduction
FEAST Festival is committed to protecting the privacy and confidentiality of personal information entrusted to us. This Privacy Policy outlines how we collect, use, disclose, and protect personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).
2. Types of Personal Information Collected
FEAST Festival may collect the following types of personal information:
Contact information: name, address, email address, phone number.
Demographic information: access requirements, gender identity, age.
Donation information: donation history, payment details.
Volunteer information: skills, experience, availability.
Employee information: employment history, qualifications, payroll information.
Client information: information related to services provided.
Website usage information: IP address, browser type, pages visited.
3. How Personal Information is Collected
FEAST Festival collects personal information in the following ways:
Directly from individuals with their consent (for example, when they make a donation, register as a volunteer, apply for a job, or use our services).
From third-party service providers (for example, payment processors and event ticketing platforms).
From our website (for example, through cookies and other tracking technologies).
In collaboration with reputable and trusted partners to assist in LGBTQIA+ research.
From publicly available sources.
4. Use of Personal Information
FEAST Festival uses personal information for the following purposes:
To process donations and provide donation receipts.
To manage volunteer programs.
To administer employment relationships.
To provide services to clients.
To communicate with donors, volunteers, employees, and clients.
To promote FEAST Festival’s activities and events.
To improve our website and services.
To comply with legal and regulatory requirements.
5. Disclosure of Personal Information
FEAST Festival may disclose personal information to the following parties:
Third-party service providers who assist us with our operations (for example, payment processors, IT providers, and marketing agencies).
Government agencies as required by law.
Other organisations with the individual’s consent.
We will take reasonable steps to ensure that any third parties to whom we disclose personal information are bound by confidentiality obligations and protect the privacy of the information.
6. Data Security
FEAST Festival takes reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. These steps include:
Using encryption technologies.
Implementing access controls and password protection.
Training staff on privacy and security procedures.
Regularly reviewing our security measures.
7. Data Retention
FEAST Festival will retain personal information only for as long as it is necessary for the purposes for which it was collected, or as required by law. When personal information is no longer needed, FEAST Festival will take reasonable steps to destroy or de-identify it.
8. Data Risk
Collecting, storing, and using people’s information and data comes with risks. Knowing the risks and taking steps to mitigate them are important elements of good governance. More information is available from the ACNC: https://www.acnc.gov.au/tools/guides/managing-peoples-information-and-data
FEAST Festival staff are responsible for mitigating risks in information and data management, including oversight of any external service providers we contract to manage people’s information and data. While FEAST Festival can outsource this work, it cannot outsource the responsibilities that come with it. FEAST Festival complies with the ACNC Governance Standards.
9. Access and Correction
Individuals have the right to access and correct their personal information held by FEAST Festival. To request access or correction, please contact the Chair of the Governance + Risk Sub-Committee (see contact details below). FEAST Festival will respond to requests within a reasonable time.
10. Complaints
For complaints about FEAST Festival’s handling of personal information, contact the Chair of the Governance + Risk Sub-Committee (see contact details below). FEAST Festival will investigate the complaint and take reasonable steps to resolve it. If the complainant is not satisfied with the response, they can lodge a complaint with the Office of the Australian Information Commissioner (OAIC).
11. Website Privacy
The FEAST Festival website may use cookies and other tracking technologies to collect information about website usage. This information is used to improve the website and services. Users can disable cookies in their browser settings, but this may affect the ability to use certain features of the website.
Our website may contain links to other websites. We are not responsible for the privacy practices of those websites.
12. Contact Information
For any questions or concerns about this Privacy Policy or the handling of personal information, contact the Chair of the Governance + Risk Sub-Committee: enquiries@feast.org.au
13. Artificial Intelligence Tools
Please refer to the FEAST Festival Artificial Intelligence (AI) Policy.
14. Policy Review
This policy will be reviewed every two years, or as required, to ensure it remains relevant and effective.