Collect less. Keep it only for a reason.

Information involved in an ordinary visit

• Hosting and security systems may process an IP address, request time, requested page, browser or device information, and security signals needed to deliver and protect the site.
• openaus.org has not added advertising trackers, session replay, behavioural profiles or a marketing analytics service.
• The application does not set an account or analytics cookie. Hosting infrastructure may use essential security or delivery mechanisms.

When you contact us

If you send an email, we receive the address you use, the message, attachments and related delivery information. We use it to respond, investigate a correction or security report, maintain an appropriate decision record, and protect the project.

Do not include sensitive personal information, information about another person, credentials or confidential documents unless necessary and agreed in advance.

Use, disclosure and overseas processing

Information is not sold or traded and is not added to a marketing list. It may be handled by email, hosting, infrastructure and security providers that help operate the site, or disclosed where reasonably necessary to investigate an issue, protect someone, or meet a legal obligation.

Those providers may process information outside Australia. Provider access, support, security telemetry and backups can involve more than one country. We seek to minimise what is sent and disclose only what is needed for the service or issue.

Retention

• General and correction correspondence is normally deleted or de-identified within 24 months after the matter is closed.
• Security reports and the minimum record needed to understand a resolved vulnerability may be kept for up to 36 months after closure.
• A published correction record may be retained as part of the editorial history, without unnecessary contact details.
• Infrastructure logs and backups follow the relevant provider’s operational schedules. We do not copy them into a separate visitor database.

Information may be kept longer where reasonably required for a legal, security or evidentiary hold. Retention should be reviewed when that reason ends.

Access, correction and complaints

To ask what contact information is held about you, request a correction or deletion, or raise a privacy concern, email contact@openaus.org. We may need enough information to locate the record and confirm that a request concerns you.

The operator aims to use privacy-by-design practices whether or not a particular provision of the Australian Privacy Act applies in the circumstances. If a complaint is not resolved and the Privacy Act applies, information about external privacy complaints is available from the Office of the Australian Information Commissioner.