Privacy Policy

Last updated: 3 November 2026

Our Safe Place is an initiative of LAHAT Foundation Ltd (ABN 74 670 634 312), a registered Australian charity. We respect the privacy of everyone who contacts us, donates or visits this website. This policy explains what personal information we collect, how we use it and the choices you have.

In this policy, “we”, “us” and “our” mean LAHAT Foundation Ltd, including when we act as Our Safe Place.

What we collect

We only collect the personal information we need. Depending on how you deal with us, this may include:

• When you contact us: your name, email address, phone number (if you give it) and the content of your message.
• When you donate: your name, email address, postal address, business name (if you are giving on behalf of a business), the amount, date and frequency of your gift, and the cause you chose.
• When you partner with us or fundraise for us: your contact details and the details of the activity.
• When you visit our website: basic technical information, such as your browser type and the pages you view, which our hosting provider records in server logs for security and to keep the site running.

We do not ask for sensitive information, such as health information, and we ask that you do not send it to us. If you tell us about your own circumstances, for example in a message, we will only use that information to respond to you.

You can contact us without giving your name, but we will need contact details to reply. A tax receipt requires your name.

Donations and payment details

Online donations are made through Donorbox, a donation platform, and paid through Stripe, a payment provider. When you give, Donorbox and Stripe collect your name, email address, postal address, business name (optional) and payment details. Donorbox issues your tax receipt and lets you change or cancel a recurring donation.

Your card details are entered directly into Stripe’s secure systems through the donation form. Card details are not stored on our website, and we never see your full card number.

Donorbox and Stripe handle your information under their own privacy policies, available at donorbox.org and stripe.com. Both may process information outside Australia, including in the United States.

How we use your information

We use personal information to:

• respond to your enquiry;
• process your donation and send you a receipt for tax purposes;
• make sure your gift goes to the cause you chose;
• keep the records we are required to keep as a registered charity and Deductible Gift Recipient, for example for the Australian Charities and Not-for-profits Commission (ACNC) and the Australian Taxation Office (ATO);
• prevent fraud and protect the security of our website; and
• with your consent, send you updates about our work.

We will not sell, rent or trade your personal information.

Updates and fundraising messages

We will only send you news or fundraising messages if you have agreed to receive them. Every message will include a simple way to unsubscribe, and you can ask us to stop at any time by contacting us.

Who we share it with

We share personal information only where needed to do the things described above, with:

• Donorbox and Stripe, to process donations, issue receipts and manage recurring gifts;
• the providers that host our website and email, so that the site works and messages reach us;
• our professional advisers, such as our accountant or auditor, where needed; and
• government bodies or others where the law requires or allows it.

We do not share donor or contact details with the organisations we grant funds to unless you ask us to.

Some of these providers may store or process information outside Australia, including in the United States. Where that happens, we choose providers that take reasonable steps to protect it.

Cookies and third-party services

Our website uses only the cookies it needs to work. We do not currently use advertising or analytics cookies. If that changes, we will update this policy first.

• Our contact form uses Cloudflare Turnstile to check that messages are sent by a person and not a spam program. To do this, Cloudflare processes technical information about your browser and device.
• Our pages load fonts from Google Fonts, so your browser connects to Google’s servers, which receive your IP address.
• On our donation page, Donorbox and Stripe may set cookies to run the donation form, process the payment securely and prevent fraud.

You can set your browser to block or delete cookies, but parts of the donation process may not work without them.

How we keep it safe

We take reasonable steps to protect personal information from misuse, loss and unauthorised access. Access is limited to the people who need it for their role. Our website uses an encrypted (HTTPS) connection.

We keep donation records for as long as the law requires, generally at least seven years for tax records. We keep messages sent through our contact form for 12 months, then delete them. We delete or de-identify other information when we no longer need it.

Accessing or correcting your information

You can ask to see the personal information we hold about you, or ask us to correct it, through our contact page. We will respond within 30 days. We may need to confirm your identity first.

Questions and complaints

If you have a question about privacy or think we have mishandled your information, please contact us first so we can try to fix it:

LAHAT Foundation Ltd (ABN 74 670 634 312)
Get in touch through our contact page.

We will acknowledge your complaint within 7 days and aim to resolve it within 30 days. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.

Changes to this policy

We may update this policy from time to time, for example when we start using a new service. The latest version will always be on this page, with the date it was last updated. The policy for LAHAT Foundation’s main website is at lahat.org.au/privacy-policy.