Privacy policy
Last updated 26 August 2026
This policy explains what personal information the AusLCI website collects, why we collect it, and what we do with it. It applies to auslci.com.au and is written to meet our obligations under the Australian Privacy Act 1988 and the Australian Privacy Principles.
The short version
We ask you to register before downloading data so we can tell you when that data is corrected or updated. That is the only thing we use your details for. We do not sell, rent, share or disclose them to anyone else, and we do not use them for marketing.
What we collect
When you register
- Your name
- Your email address, which is also your sign-in name
- Your organisation and country, if you choose to give them
- What you intend to use AusLCI data for, if you choose to say
- Whether you want to be told about updates
- Your password, stored only as a salted cryptographic hash — we cannot read it
When you send us a question or comment
- Your name and email address, so we can reply
- Your message, and which dataset it was about
Automatically
Our web server keeps short-term technical logs (IP address, page requested, time, browser type) for security and diagnosing faults. We do not use advertising or analytics trackers, and we do not build profiles of visitors.
Why we collect it
| Information | Purpose |
|---|---|
| Email address | Signing in, and sending notices about corrections and updates if you opted in |
| Name | Addressing correspondence to you |
| Organisation, country, intended use | Understanding, in aggregate, who uses the database and reporting that to AusLCI's funders and contributors |
| Your questions and comments | Replying to you, and improving the data |
Where organisation, country and intended use are reported to funders or contributors, it is only ever as totals and summaries. Individuals are never identified.
Update notifications
Notices are sent only when AusLCI data or documentation actually changes — never on a schedule, and never as marketing. Every notice carries an unsubscribe link that works immediately and without signing in. You can also change your preference at any time under Your details.
Turning notifications off does not affect your access to downloads.
Who else sees your information
Nobody, other than the service providers that operate the site on our behalf. We do not sell, rent, trade or otherwise disclose your personal information to third parties. Specifically:
- Website hosting — the site and its databases run on Fly.io infrastructure located in Sydney, Australia.
- Email delivery — we use Postmark to send email. Postmark processes the recipient address and message content solely to deliver the message. Postmark's servers are located in the United States, which means email addresses are disclosed overseas for this purpose.
Both act as processors on our instructions and are not permitted to use your details for their own purposes. We may also disclose information where required by Australian law.
How long we keep it
- Account details — until you ask us to delete them.
- Questions and comments — kept while we deal with them and for a reasonable period afterwards, so we have a record of issues raised about a dataset.
- Server logs — a short period, then discarded.
Security
The site is served only over HTTPS. Passwords are stored as salted hashes using Django's password hashing, and cannot be recovered or read by us or by anyone with access to the database. Access to the underlying systems is limited to the people who administer AusLCI.
No system is perfectly secure. If we ever became aware of a data breach likely to cause you serious harm, we would notify you and the Office of the Australian Information Commissioner as the Notifiable Data Breaches scheme requires.
Your rights
You may at any time:
- See what we hold about you
- Correct it — most of it directly under Your details
- Stop update emails — via the unsubscribe link or your preferences
- Have your account and details deleted — email us and we will do it
- Complain if you think we have mishandled your information
Contact us
For anything in this policy, including access, correction and deletion requests, or to make a complaint, email auslci@auslci.com.au or use the contact form. We aim to respond within 30 days.
If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Changes to this policy
If we change this policy we will update the date at the top. If a change materially affects how we use your details, we will tell subscribers by email before it takes effect.