Privacy Policy
Last Updated: June 16, 2026
Eritrean Community in Western Australia Incorporated (ECWA) is committed to protecting your privacy. This Privacy Policy details how we collect, use, disclose, and safeguard your personal information in compliance with the **Australian Privacy Principles (APPs)** under the *Privacy Act 1988* (Cth).
1. Information We Collect
We collect personal information necessary to offer our programs, manage membership profiles, process donations, and coordinate communications. This includes:
- Identity Details: Full name, email address, phone number, and physical address.
- Member Accounts: Login credentials (hashed passwords) and community portal records.
- Inquiry Inputs: Messages and interest categories submitted through our Contact & Suggestion forms.
- Transaction Records: Payment histories (such as membership tier selections) handled securely via Stripe.
2. How We Use Your Information
We use your personal data for the following purposes:
- To register your member account and manage your community profile.
- To respond to suggestions, questions, and contact requests submitted to our committee coordinators.
- To send important notices, cultural announcements, and administrative updates.
- To process donations and membership payments securely.
3. Data Disclosure & Third-Party Services
ECWA does not sell, rent, or trade your personal information. We only share data with trusted third-party service providers necessary to operate our digital infrastructure, including:
- Stripe: Processing payments (transactions occur directly on Stripe's secure PCI-compliant servers).
- Cloudflare: Secure database storage (D1) and edge caching delivery.
4. Security of Your Personal Data
We apply robust technical and organizational measures to safeguard your information. All connections enforce HTTPS encryption. Password hashing uses PBKDF2 cryptography with unique random salts, and session tokens are signed with HMAC-SHA256 Web Crypto signatures set as HTTP-Only secure cookies to defend against security vulnerabilities.
5. Your Rights and Access
Under the Australian Privacy Principles, you have the right to request access to the personal information we hold about you and ask for updates or corrections. If you wish to make an access request or delete your member profile, please contact our secretary at secretary@ericwa.org.au.