Type of website: Not-for-profit healthcare and charitable organisation

Effective date: 14th day of September, 2026

---

The purpose of this privacy policy (this “Privacy Policy”) is to inform users of our Site of the
following:

1. The personal data we will collect;
2. Use of collected data;
3. Who has access to the data collected; and
4. The rights of Site users.
   This Privacy Policy applies in addition to the terms and conditions of our Site.

---

By using our Site users agree that they consent to:

1. The conditions set out in this Privacy Policy; and
2. The collection, use, and retention of the data listed in this Privacy Policy.

---

We only collect data that helps us achieve the purpose set out in this Privacy Policy. We will not
collect any additional data beyond the data listed below without notifying you first.

When you visit and use our Site, we may automatically collect and store the following information:

1. IP address;
2. Location;
3. Hardware and software details;
4. Clicked links; and
5. Content viewed.

We may also collect the following data when you perform certain functions on our Site:

1. First and last name;
2. Email address;
3. Phone number; and
4. Address.

This data may be collected using the following methods:

1. Website forms, enquiries, purchases and donations.

---

Data collected on our Site will only be used for the purposes specified in this Privacy Policy or
indicated on the relevant pages of our Site. We will not use your data beyond what we disclose in
this Privacy Policy.

The data we collect automatically is used for the following purposes:

1. Website analytics, including understanding how visitors use our website, measuring website traffic and performance,
   and improving our website and services.

The data we collect when the user performs certain functions may be used for the following
purposes:

1. Responding to enquiries and communicating with individuals;
2. Processing and administering donations and purchases;
3. Providing receipts and other transaction-related communications;
4. Sending newsletters, fundraising appeals and other marketing communications where the
   individual has consented; and
5. Maintaining donor, supporter and customer records.

---

We may disclose user data to any member of our organisation who reasonably needs access to user
data to achieve the purposes set out in this Privacy Policy.

We may share user data with the following third parties:

1. Google Analytics;
2. Stripe;
3. ECWID;
4. Raisely; and
5. Mailchimp.

We may share the following user data with third parties:

1. Name and contact information;
2. Donation and transaction information;
3. Order and delivery information;
4. Payment information;
5. Website usage and analytics data; and
6. Device, browser, IP address and approximate location information.

We may share user data with third parties for the following purposes:

1. Processing donations and payments;
2. Processing and fulfilling purchases;
3. Website analytics and performance monitoring;
4. Providing and maintaining website services; and
5. Sending communications and marketing where consent has been provided.

Third parties will not be able to access user data beyond what is reasonably necessary to achieve the
given purpose.

We will not sell or share your data with other third parties, except in the following cases:

1. If the law requires it;
2. Website Privacy Policy Page 3 of 5
3. If it is required for any legal proceeding;
4. To prove or protect our legal rights; and
5. To buyers or potential buyers of this company in the event that we seek to sell the company.

If you follow hyperlinks from our Site to another Site, please note that we are not responsible for
and have no control over their privacy policies and practices.

---

User data will be stored until the purpose the data was collected for has been achieved.
You will be notified if your data is kept for longer than this period.

---

We take reasonable administrative, technical and physical measures to protect personal information
against misuse, interference, loss, and unauthorised access, modification or disclosure. These
measures include access controls, password-protected systems, secure website connections, and the
use of reputable third-party service providers. Access to personal information is limited to
authorised personnel where appropriate.
While we take all reasonable precautions to ensure that user data is secure and that users are
protected, there always remains the risk of harm. The Internet as a whole can be insecure at times
and therefore we are unable to guarantee the security of user data beyond what is reasonably
practical.

---

We disclose user personal data to the following countries:

1. United States of America.

When we transfer user personal data we will protect that data as described in this Privacy Policy and
comply with applicable legal requirements for transferring personal data internationally.

---

We do not knowingly collect or use personal data from children under 16 years of age. If we learn
that we have collected personal data from a child under 16 years of age, the personal data will be
deleted as soon as possible. If a child under 16 years of age has provided us with personal data their
parent or guardian may contact our privacy officer.

---

If you would like to know if we have collected your personal data, how we have used your personal
data, if we have disclosed your personal data and to who we disclosed your personal data, or if you
would like your data to be deleted or modified in any way, please contact our privacy officer here:

Business Manager
admin@ipswichhospice.org.au
(07) 3812 0063
37 Chermside Road, Eastern Heights Qld 4305

---

In addition to the method(s) described in the How to Access, Modify, Delete, or Challenge the Data
Collected section, we provide the following specific opt-out methods for the forms of collection,
use, or disclosure of your personal data specified below:

1. Use of personal information for email marketing and promotional communications. You can opt-out by clicking the unsubscribe link in any marketing email or by contacting us to request removal from our marketing communications.
2. Use of personal information for SMS marketing and promotional communication. You can
   opt-out by following the opt-out instructions in the SMS or by contacting us to request
   removal from SMS marketing communications.

---

This Privacy Policy may be amended from time to time in order to maintain compliance with the
law and to reflect any changes to our data collection process. When we amend this Privacy Policy
we will update the “Effective Date” at the top of this Privacy Policy. We recommend that our users
periodically review our Privacy Policy to ensure that they are notified of any updates. If necessary,
we may notify users by email of changes to this Privacy Policy.

---

If you have any questions, concerns or complaints, you can contact our privacy officer, Business
Manager, at:

admin@ipswichhospice.org.au
(07) 3812 0063
37 Chermside Road, Eastern Heights Qld 4305