1. Scope and who we are

This policy applies to Kingdom Governance (“Kingdom Governance”, “we”, “us” or “our”) and to personal information handled through kingdomgovernance.com and the connected community, membership, group, project, communications and marketplace functions (together, the “Platform”).

It applies to visitors, applicants, members, organisation representatives, group leaders, advisers, overseers, vendors, customers, project participants and other people who interact with the Platform.

We intend to handle personal information consistently with the Privacy Act 1988 (Cth), the Australian Privacy Principles and other applicable privacy laws. Where a local law gives you additional rights, we will apply those rights as required.

2. Information we collect

We collect only information reasonably needed to operate, protect and develop the Platform and its community. The information collected depends on how you participate.

Account and identity information

• Name, username, email address, password credentials in protected form, contact preferences and account status.
• Application answers, membership level, role, approval history and identity or authority checks where a trusted role requires verification.
• Organisation name, position and evidence that you are authorised to represent or administer an organisation or group.

Community and professional profile information

• General location, industry, skills, qualifications, work history, lived experience and areas of interest.
• Business information, enterprise or project ideas, collaboration needs, services offered, profile links and any CV or document you choose to provide.
• Group memberships, organisation or church affiliations, contributions, connections and participation history.

Content, communications and governance records

• Posts, comments, reactions, group discussions, private messages, files, meeting or event information and other material you submit.
• Project briefs, roles, milestones, decisions, reports, reviews, business or collaboration records and contributions to working groups.
• Complaints, flags, safeguarding concerns, moderation material, mediation or restorative-resolution records and communications about those matters.

Transactions and commercial activity

• Membership, order, vendor, billing, product, service, refund and transaction-status information.
• Payment providers generally process full card or banking details. We do not intend to store complete payment-card numbers on the Platform.
• Tax, accounting, fraud-prevention and compliance records where required.

Technical and usage information

• IP address, device and browser type, operating system, login and security events, referring pages, pages viewed, timestamps and diagnostic logs.
• Cookie identifiers and information about how features are used, subject to available preferences and applicable law.

How information reaches us

We collect information directly from you, automatically when you use the Platform, from an organisation or group that validly invites or administers you, from another member where appropriate, and from service providers or public sources used for verification. If you give us information about another person, you must be authorised to do so and must tell them how it will be handled where required.

3. Why we use personal information

We may use personal information to:

• create and administer accounts, applications, memberships and role-based access;
• operate member profiles, connections, private groups, messages, notifications, projects, events and directories;
• help people and organisations discover relevant skills, opportunities, groups and projects;
• review applications and verify group leaders, organisation representatives, advisers, overseers, vendors or other trusted roles;
• provide marketplace, membership, billing, customer-support and transaction functions;
• communicate service notices, invitations, community updates, renewal information and requested communications;
• moderate content, investigate reports, manage conflicts, support restorative processes and protect people, organisations and the integrity of the community;
• prevent fraud, scams, misuse, cyber threats and unlawful activity;
• maintain records, analyse and improve performance, accessibility and user experience; and
• meet legal, regulatory, insurance, accounting and governance obligations or establish, exercise or defend legal claims.

We will seek consent where required. You may withdraw consent for future handling that depends on consent, although this may affect features we can provide and does not invalidate earlier lawful handling.

4. Profiles, groups, messages and collaborative work

The Platform includes spaces with different visibility. Some information may be visible publicly, some to signed-in members, some only to a group, and some only to authorised administrators or case handlers. Before posting, check the relevant field, group or content visibility.

• Profiles and directories: profile fields may have different visibility settings. Only provide information suitable for the selected audience.
• Organisation and group spaces: group administrators and authorised participants may see membership and activity within their workspace. An organisation may have its own privacy duties for information it collects or exports.
• Private messages: messages are intended for their participants, but no online message should be treated as absolutely confidential. We may access or preserve communications when reported, reasonably necessary for security or moderation, or required by law.
• Projects: project teams may see briefs, roles, documents and activity needed for collaboration. Project access does not authorise a participant to reuse personal or confidential information outside the project.
• Reports and restorative matters: access is restricted to people reasonably involved in intake, safety, assessment, response, mediation, oversight or legal compliance. Information may need to be shared where safety, fairness or law requires it.

Other members control what they do with information they can legitimately see. Our Terms prohibit unauthorised copying, scraping, disclosure or commercial use, but we cannot guarantee that every member will comply. Use sound judgment and report misuse promptly.

5. When we disclose information

We do not sell personal information. We may disclose the minimum reasonably necessary information to:

• members, groups, project teams or organisation administrators according to the visibility and collaboration settings you use;
• hosting, security, email, communications, analytics, customer-support, payment, accounting and software providers that help operate the Platform;
• professional advisers, insurers, auditors, investigators, mediators or service providers subject to appropriate duties;
• regulators, law-enforcement bodies, courts or other parties where required or authorised by law, or where reasonably necessary to prevent a serious threat or protect legal rights;
• a successor or proposed successor in a genuine restructure, merger or transfer, subject to appropriate confidentiality and legal safeguards; or
• another party with your consent or at your direction.

Vendors, organisations, project proponents and third-party service providers may separately collect information and must give their own notices where they determine how that information is used.

6. International members and overseas disclosure

Kingdom Governance is intended as a global community. Personal information may therefore be accessible to authorised members, group leaders, project participants or service providers outside Australia. Relevant countries may include those where a participant is located and those where our hosting, communications, payment or software providers operate.

Where Australian privacy law requires it, we will take reasonable steps in relation to overseas recipients. Privacy protections and legal remedies can differ between countries. Where practicable, more specific information about a relevant overseas recipient or country will be provided at collection or on request.

7. Cookies, analytics and linked services

We use cookies and similar technologies to keep accounts signed in, remember preferences, protect the Platform, operate shopping and membership functions, understand performance and improve services. Some cookies are necessary for requested features. Optional analytics or marketing technologies, if introduced, will be managed in accordance with applicable notice and consent requirements.

You can control many cookies through your browser, but disabling necessary cookies may prevent login, checkout, messaging or other functions from working. Links, embeds and services operated by other organisations are governed by their own privacy practices.

8. Security, retention and data breaches

We take reasonable technical and organisational steps appropriate to the nature of the information we hold. These may include role-based access, account controls, software and security maintenance, monitoring, backups and procedures for handling incidents. No internet service is completely secure, and you are responsible for protecting your password, devices and account access.

We retain information for as long as reasonably needed for the purposes described above, including active membership, project and transaction records, community safety, dispute management, fraud prevention, legal compliance and legitimate recordkeeping. When information is no longer required, we take reasonable steps to delete, de-identify or securely dispose of it, subject to backup cycles and legal holds.

If a data breach occurs, we will assess and respond to it. Where the Notifiable Data Breaches scheme or another applicable law requires notification, we will notify affected people and the relevant regulator.

9. Your choices and privacy rights

Subject to applicable law and any lawful exception, you may:

• access or correct profile information through your account settings;
• ask us for access to, or correction of, other personal information we hold;
• change available profile, notification and communication preferences;
• withdraw consent where processing depends on consent;
• request account closure or deletion, noting that some records may need to be retained or de-identified;
• object to or complain about how information has been handled; and
• exercise any additional rights available under the law that applies to you.

We may need to verify your identity and authority before acting on a request. We will respond within a reasonable period and explain any lawful reason why a request cannot be fully met.

Children and young people

General Platform accounts are intended for people aged 18 or over. Organisations working with children or young people must use appropriate, separately approved safeguarding, consent and access arrangements. They must not create ordinary member accounts for minors or upload children’s personal information without lawful authority and suitable safeguards.

10. Questions, requests and complaints

To make a privacy request or complaint, contact the Kingdom Governance site administrator through the support or contact channel shown in your account or elsewhere on the Site. Please identify your account email, the nature of your request and the information or activity concerned. Do not send passwords, payment-card details or unnecessary sensitive documents.

We may update this policy as the Platform, technology or law changes. Material changes will be communicated through the Site or account channels, and the “Last updated” date will be revised.