This policy explains how the Headland Preservation Group handles personal information collected through the Not For Sale petition at notforsale.sydney. It is prepared in accordance with the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth), which we follow as a matter of policy.
Headland Preservation Group Inc. is a non-profit association incorporated in New South Wales (INC1400126), opposing the proposed sale of Commonwealth land at HMAS Penguin, Middle Head. We operate the notforsale.sydney petition and are the entity responsible for the personal information described in this policy.
This policy applies to the notforsale.sydney petition. The HPG website at hpg.org.au has its own privacy policy.
When you sign the petition we collect:
| Information | Required |
|---|---|
| First name and last name | Yes |
| Email address | Yes |
| Postcode | Yes |
| Your comment about the site | No |
| Whether you consent to campaign updates | Yes (yes or no) |
We also automatically record, for each submission:
We do not store your IP address itself. We store only the hash, which cannot be converted back into your IP address. We do not collect any sensitive information as defined in the Privacy Act.
We collect personal information directly from you, through the petition form on notforsale.sydney. We do not buy, rent or otherwise obtain personal information about you from any other source.
You may not sign the petition anonymously or under a pseudonym. The purpose of the petition is to demonstrate to Parliament that identifiable individuals oppose the sale, and an anonymous entry cannot serve that purpose.
| Information | Purpose |
|---|---|
| Name | To record your signature and present it to decision makers. |
| Email address | To identify your signature as distinct from anyone else's, so the petition counts one signature per person; and, only if you consented, to send campaign updates. |
| Postcode | To show decision makers where support is concentrated. |
| Comment | To quote public support in submissions and campaign material. |
| Hashed IP, user-agent, country, timestamps | To detect and prevent automated or fraudulent signatures, so the total we report is accurate. |
Your signature is counted as soon as you submit the form. We do not send a confirmation email, and we do not email you at all unless you asked for campaign updates.
We do not use your personal information for any purpose other than those listed above. We do not sell, rent or trade personal information, and we do not use it for advertising or profiling.
We disclose your name, postcode and comment to Members of Parliament, Senators, parliamentary committees, and government ministers and departments, as part of the campaign. Material given to a parliamentary committee may be published by that committee.
We may publish signature totals, postcode breakdowns, and comments. Comments are published attributed to a first name and postcode only.
We do not disclose your email address to any person or organisation outside the service providers listed at 5.4, in any circumstance, other than where required by law.
| Provider | Role |
|---|---|
| Cloudflare, Inc. | Hosts the website, stores the signature database, and provides the automated bot check on the form. |
Cloudflare processes personal information on our instructions and is not permitted to use it for its own purposes.
Yes. Cloudflare, named at 5.4, is a United States company, so your information is stored and processed overseas, mainly in the United States.
We take reasonable steps to ensure it is handled consistently with this policy, but information held overseas is subject to the laws of the country it is held in.
We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. These steps include:
No system is perfectly secure. If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.
We keep signature records until the future of the HMAS Penguin site is resolved, and for twelve months after that so we can report the outcome to supporters. We then de-identify the records.
If you consented to campaign updates, we keep your email address for that purpose until you withdraw consent.
You may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. Contact us using the details at section 14.
We will respond within 30 days. We do not charge a fee. If we refuse a request, we will tell you why in writing and explain how to complain.
You may at any time ask us to:
Every campaign update we send also contains an unsubscribe link. Note that we cannot recall material already provided to a parliamentary committee or already published.
If you believe we have breached the Australian Privacy Principles, contact us using the details at section 14. Please describe what happened and what you would like us to do.
We will acknowledge your complaint within 7 days and respond substantively within 30 days. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner:
Cookies are small files a website asks your browser to store. This site may use cookies for the following purposes only:
| Purpose | Why |
|---|---|
| Security | The bot check on the petition form sets a short-lived cookie to confirm you are a person and not an automated script. |
| Essential function | To make the site work as intended, for example remembering that you have already signed so we do not show you the form again. |
| Measuring use of the site | To count visits and see which pages people read, so we can improve how we communicate the campaign. This tells us about patterns across all visitors, not about you individually. |
We do not use cookies for advertising, and we do not sell or share cookie data.
At the date of this policy the only cookie set is the short-lived security cookie described above. If we later add measurement, it will be limited to the purpose stated in the table.
You can block or delete cookies in your browser settings. Blocking the security cookie may prevent the petition form from working.
Separately, the interactive map loads its background images from CARTO, a mapping provider. If you scroll to the map, your browser requests those images directly from CARTO, which will receive your IP address. Nothing you enter in the petition form is involved.
We may update this policy. The version number and effective date at the top of this page will change. If we make a change that materially affects how we handle information already collected, we will notify affected signatories by email.
For any privacy question, request or complaint, contact the Headland Preservation Group:
This petition is separate from the official e-petition system operated by the Australian Parliament. If you also sign a parliamentary e-petition, that is handled by Parliament under its own privacy arrangements, not by us.