Privacy Policy
Last Updated: July 7, 2026
At SponsorLink, we value the trust you place in us to protect your information. This Privacy Policy details how we handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
1. What Information We Collect
We only collect information that is necessary to provide and secure our digital sponsorship and loyalty services. This includes:
A. Member Accounts & Digital Passes
- Profile Details: Full name, email address, mobile phone number, and date of birth (used exclusively for optional Birthday Blast promotions).
- Affiliations & Preferences: Club affiliation and your custom discount split preference (e.g. 50/50, 20/80).
- Loyalty Cards (Wallet Drawer): Card name, membership or barcode number, merchant brand, and optional latitude/longitude coordinates of nearby merchants (used locally to auto-sort cards based on your physical location).
- Transaction History: Date, description, transaction amount, and status of support payments.
B. Club & Merchant Accounts
- Entity Profile: Legal name, physical address, ABN (Australian Business Number), website domain, contact email, and phone number.
- Integration Tokens: Cryptographically generated portal credentials, PINs, and Stripe merchant identifiers.
2. Third-Party Subprocessors & Analytics
We do not use tracking pixels, ad networks, or behavioral marketing analytics platforms. To deliver transaction processing, authentication, and core notification services, we securely transmit specific data to the following subprocessors:
- Stripe Connect: All credit card details and payment flows are processed directly by Stripe. SponsorLink does not receive, view, or store payment card details on our servers.
- GCP Identity Platform (Firebase Auth): Coordinator and executive portal credentials (emails/passwords) are securely handled and verified through Google's cloud identity platform.
- SendGrid: Used to dispatch transactional receipts, monthly newsletters, and notifications. Only your email address and transaction context are shared.
- Google Maps API: Used locally within the portal to determine nearby merchant sponsors and map club locations. Location coordinates are processed on your device and are not stored permanently by SponsorLink.
3. Storage and Data Security
All personal information is stored securely within Google Cloud Platform (GCP) databases located in the Sydney, Australia region.
Sensitive club data is encrypted at rest using AES-256 blocks at the application layer. Access is protected by Multi-Factor Authentication (MFA) and industry-standard security protocols.
4. Accessing and Correcting Your Information
Under the APPs, you have the right to request access to the personal information we hold about you and to ask for updates or corrections. Please contact our Privacy Officer at privacy@sponsorlink.au to make a request.
5. Complaints & Contact Details
If you have questions or wish to file a privacy complaint, please contact us at:
- Email: privacy@sponsorlink.au
- Location: Sydney, NSW, Australia