Privacy Policy

Last updated: June 2026

1. Introduction

This website (https://www.nochance.com.au) is owned and operated by No Chance Ltd (ABN 68 695 897 931), a registered charity under the Australian Charities and Not-for-profits Commission Act 2012 (ACNC Act). No Chance Ltd is referred to as “we”, “our” and “us” in this Privacy Policy.

We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This Privacy Policy explains how we collect, use, store, disclose and protect your personal information when you use our website or interact with us.

We may update this Privacy Policy from time to time. The current version will always be available at https://www.nochance.com.au/privacy-policy. We encourage you to review this policy periodically.

2. What Personal Information We Collect

“Personal information” means information or an opinion about an identified individual, or an individual who is reasonably identifiable. We may collect the following types of personal information:

Contact and identity information: name, email address, phone number, and mailing address, where you provide these to us (for example, via our contact form or when registering interest in our programs).

Donation and payment information: when you make a donation, payment details (such as card type and last four digits) are processed by Stripe on our behalf. We do not receive or store your full card details. We do retain a record of the donation amount, date and your contact details for accounting and communication purposes.

Communications: the content of any messages, enquiries or feedback you send us.

Website usage information: technical data such as your IP address, browser type, pages visited, and time spent on our site, collected automatically via HubSpot and cookies (see Section 8).

3. How We Collect Personal Information

We collect personal information directly from you when you:

  • Complete a contact form, donation form or any other form on our website;
  • Subscribe to our newsletter or communications;
  • Contact us by email, phone or social media; or
  • Make a donation via our website.

We also collect information automatically when you visit our website through cookies, tracking pixels and analytics tools (see Section 8).

Where practicable, you may interact with us anonymously or by pseudonym. However, some services (including making a donation or submitting an enquiry) require us to identify you.

4. How We Use Your Personal Information

We use your personal information only for the purposes for which it was collected, or for closely related secondary purposes, including to:

  • Respond to your enquiries and provide information about our programs and activities;
  • Process and administer donations, including issuing receipts;
  • Send you updates, newsletters and communications about No Chance Ltd (see Section 5 for your opt-out rights);
  • Maintain and improve our website and services;
  • Meet our legal and regulatory obligations as a registered charity; and
  • Detect and prevent fraud or unauthorised activity.

5. Direct Marketing

We may use your contact details to send you communications about our work, events, campaigns and donation opportunities. We will only do this where you have consented or where we are otherwise permitted to do so under applicable law.

You can opt out of receiving marketing communications from us at any time by clicking the unsubscribe link in any email we send, or by contacting us directly at the details in Section 14. We will honour opt-out requests promptly.

6. Disclosure of Personal Information

We do not sell, rent or trade your personal information to third parties for their own marketing purposes.

We may disclose your personal information to third parties in the following circumstances:

  • Service providers: we engage third-party service providers to help operate our website and process donations, including HubSpot (website platform and CRM) and Stripe (payment processing). These providers are authorised to use your information only as necessary to provide services to us.
  • Legal requirements: we may disclose personal information if required to do so by law, or if we believe in good faith that disclosure is necessary to protect our rights, your safety or the safety of others.
  • Charity governance: as a registered charity, we may be required to disclose certain information to the ACNC or other regulatory bodies.

7. Overseas Disclosure

Some personal information we collect may be processed outside of Australia. In particular:

  • HubSpot, Inc. is headquartered in the United States. Our HubSpot account may be hosted on HubSpot’s Australian data centre (Sydney), meaning CRM and contact data may be stored locally. However, HubSpot confirms that even with Australian hosting, certain processing can still occur overseas, including analytics, sub-processor activity, HubSpot support access, and HubSpot affiliate operations. You can review HubSpot’s current sub-processor list at https://legal.hubspot.com/sub-processors-page.
  • Stripe, Inc. is headquartered in the United States. HubSpot Payments is not available in Australia, so donations are processed via Stripe connected as an external payment processor. Stripe processes all payment transaction data on its own infrastructure, which is based in the United States, regardless of where HubSpot data is hosted. Stripe’s privacy policy is available at https://stripe.com/au/privacy.

Before disclosing personal information to these overseas recipients, we take reasonable steps to ensure they handle your information in a manner consistent with the Australian Privacy Principles. By using our website or making a donation, you consent to your personal information being processed overseas in accordance with this policy.

8. Cookies and Tracking

Our website uses cookies and similar technologies. Cookies are small text files placed on your device when you visit our site. We use the following types of cookies:

  • Essential cookies: required for core website functionality (e.g. remembering your preferences).
  • Analytics cookies: used to understand how visitors use our site (e.g. pages visited, time on site). We use HubSpot Analytics for this purpose.
  • Marketing cookies: used to track interactions with our site for the purpose of understanding campaign effectiveness. These are set by HubSpot.

You can control or disable cookies through your browser settings. Disabling certain cookies may affect the functionality of our website.

9. Security

We take reasonable steps to protect personal information we hold from misuse, interference and loss, and from unauthorised access, modification or disclosure. These measures include secure server environments, access controls and using reputable third-party processors (HubSpot and Stripe) who maintain their own security programs.

No data transmission over the internet is completely secure. While we endeavour to protect your personal information, we cannot guarantee the absolute security of information you transmit to us. Once we receive your information, we take all reasonable steps to protect it.

10. Data Retention

We retain personal information for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Donation records are retained for a minimum of 7 years to meet our financial and charity reporting obligations. Contact and communication records are generally retained for 3 years, after which they are securely deleted or de-identified unless there is an ongoing reason to retain them.

11. Children’s Privacy

Our website is not directed at children under the age of 16. We do not knowingly collect personal information from children under 16 without the consent of a parent or guardian. If you believe we have inadvertently collected personal information from a child, please contact us and we will take prompt steps to delete it.

12. Access and Correction

Under the Privacy Act, you have the right to:

  • Request access to the personal information we hold about you; and
  • Request that we correct personal information that is inaccurate, out of date, incomplete or misleading.

To make an access or correction request, please contact us using the details in Section 14. We will respond within 30 days. In some cases we may need to verify your identity before providing access. We will not charge a fee for access requests.

We may decline an access request in limited circumstances permitted by the Privacy Act (for example, where providing access would unreasonably affect the privacy of another individual). If we decline, we will give you written reasons.

13. Privacy Complaints

If you believe we have breached the Australian Privacy Principles or mishandled your personal information, please contact us first using the details in Section 14. We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

Office of the Australian Information Commissioner (OAIC)
Website: https://www.oaic.gov.au
Phone: 1300 363 992
GPO Box 5218, Sydney NSW 2001

14. Contact Us

For any privacy-related enquiries, access requests, correction requests or complaints, please contact us:

No Chance Ltd
ABN: 68 695 897 931
Website: https://www.nochance.com.au
Contact form: https://www.nochance.com.au/contact