Privacy
We're a small volunteer-run organisation. We're not covered by the Privacy Act, and we haven't opted in.
Small organisations under a certain turnover are exempt, and we haven't opted in because we can't promise the level of compliance that would commit us to.
What we can promise is that we handle information thoughtfully, we collect as little as we need, and we'll tell you the truth about it. This page is that.
What we collect, and why
As little as we need.
If you're a member, your membership is held in MyTurn. That's where your name, email, username, address, phone number and postcode live, along with a record of what you've borrowed. We need your name and email to run the membership, and your contact details so we can reach you about something you've borrowed. Payments go through Stripe, and you can choose to store a card.
If you volunteer with us, we collect your name, contact details, pronouns, availability, and whether you hold a Working With Children Check. Once you start, we also collect an emergency contact, and anything you'd like to tell us about access or health so we can set shifts up to suit you.
Working With Children Checks are sighted by a volunteer lead or someone from the Volunteer squad. We record the expiry date so we know when to check again, not the check number itself.
If you email us, we have your email and whatever you wrote.
When you visit this website, our host records the standard things a web server records: which pages were requested, when, roughly where from, and what browser was used. This includes your IP address, which is used to work out a general location. There are no cookies on this site, no tracking scripts, and no third-party analytics. Nothing leaves our hosting.
Who else sees it
The services we use.
We use these services, and your information passes through them.
- MyTurn — our borrowing system, and where memberships are held. Membership details and borrowing history.
- Stripe — payments. Card details go to Stripe, not to us.
- SuperSaaS — volunteer rostering. Volunteers hold their own account with their name, email and shift history. SuperSaaS is based in the Netherlands, so this information is held outside Australia.
- Kudosity — text message reminders about shifts. Mobile numbers only. Australian owned, and this information stays in Australia.
- Google — our email is Gmail, so Google holds our correspondence.
- Dropbox — where we keep scanned volunteer forms and a spreadsheet with volunteer contact details.
Each of these publishes its own privacy policy, and we'll point you to any of them.
We don't sell your information, and we don't share it with anyone else unless you ask us to or we're legally required to.
Who at The Share Shop can see it
Volunteers on a shift, and the shared inbox.
Volunteers on a shift can see member records in MyTurn, because that's how borrowing works. Our Code of Conduct is clear that this is for running the shop and nothing else.
Our email inbox is shared across the volunteer team, so anything you email us can be seen by any of them. If you'd rather say something privately, tell us and we'll find a better way.
Paper
Some things are still on paper.
We hold some things on paper: volunteer induction forms with signatures, emergency contacts and photo consent. These are scanned into Dropbox and the same principles apply.
How long we keep it
While you're a member, and after.
Member records stay in MyTurn while you're a member, and afterwards in case you come back.
If you'd like yours deleted, email us and we'll do it.
Your information
Ask, correct, or delete.
You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Email us and we'll sort it out. We won't make it difficult.
If something goes wrong
We'll tell you what we know.
The services listed above will usually contact people directly if something happens at their end. If we find out that information we hold has been lost or ended up somewhere it shouldn't, we'll tell the people affected what we know.
Last reviewed: 18 September 2026.