PRIVACY POLICY

Who we are

This policy explains how the Sunset Concert Auction Organisers handle personal information collected through the Sunset Concert Silent Auction website.

You can contact us through the Contact the organisers form on this website. For a privacy question, access or correction request, or complaint, use that form and say that your message is a privacy request.

What we collect

When you place a bid, we collect your name, mobile number, optional email address, bid amount, lot, bid time, bid history, a submission reference and a hashed IP address used for security and rate limiting.

When you contact us, we collect your name, message, mobile number or email address, and any lot or bid amount you choose to include. We also store a hashed IP address for security and rate limiting.

If you win, we may collect the handover details needed to release the prize, such as an agreed collection time or drop-off address.

We do not collect payment card details. Winning bidders receive direct payment details for an account nominated by Hayden’s father; the organisers do not process or hold winning-bid payments.

Why we collect it

We use personal information only to operate and protect the auction, accept and rank bids, contact winners and fallback bidders, answer enquiries, resolve a failed-bid report, arrange prize release, and prevent misuse of the site.

We do not sell personal information or use it for advertising or unrelated marketing.

Who can see it

Bidder names, phone numbers, email addresses and bid histories are never displayed publicly. They are available only to authorised auction organisers who need them to administer the event.

We use Vercel to host the website and Supabase to store the auction data. We do not intentionally disclose your personal information to the Pisarski family merely because you bid or win. The organisers contact winners directly.

If you make a winning-bid payment, the payment account holder may see payer or payment-reference details through their bank.

Storage and security

We use reasonable safeguards for a small community fundraiser, including restricted administrator access, server-side database access and security controls designed to prevent public access to bidder details. No online service can guarantee absolute security.

We do not knowingly use advertising or tracking cookies. An essential session cookie is used only if an organiser signs in to the private administration area.

Retention and deletion

Bid records, bidder contact details and bid-related IP hashes are scheduled to be automatically deleted 30 days after the auction closes. We retain only non-identifying prize and fundraising records after that point.

Contact-form messages, contact details and related IP hashes are scheduled to be automatically deleted 30 days after the message is sent.

Access, correction and complaints

You may ask to access or correct personal information we hold about you by contacting us through the form above. We will take reasonable steps to respond. If you are unhappy with our response, you may contact the Office of the Australian Information Commissioner.

Changes to this policy

We may update this policy if the auction or our information-handling practices change. The current version and its last-updated date will always appear on this page.