Privacy Policy
This Policy was last reviewed and updated on [5 August 2026]
The Australian Sustainable Finance Institute Limited (ASFI) values and respects the privacy of the people who engage with our products and services. ASFI is committed to protecting your privacy when you engage with us, by implementing and maintaining reasonable organisational, technological and physical practices to mitigate against unauthorized access and use of personal information collected and held by us.
This Privacy Policy (Policy) describes how we collect, hold, use and disclose your personal information, and how we maintain the quality and security of your personal information that we handle, in accordance with our obligations under the Privacy Act 1988 (Cth) (Privacy Act) and Australian Privacy Principles (APPs) contained therein, and other applicable privacy laws and regulations relevant to our products and services.
When you provide us with your personal information, you are consenting to ASFI’s collection and use of your personal information in accordance with this Policy.
What is personal information?
The Privacy Act defines “personal information” as: information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not, and whether the information or opinion is recorded in a material form or not.
How and what personal information do we collect?
We collect personal information about you when you choose to engage with our products and services, including when you contact us via phone, email or visit our website to:
• on behalf of your organisation to apply to be a member;
• to act as a representative of your organisation who is a member;
• register for an event;
• participate in surveys or questionnaires;
• register to receive our newsletter, media alerts, or other marketing communications;
• apply for a job or volunteer position; or
• in person, when you attend an ASFI event.
The personal information we collect about you depends on the nature of your engagement with us, and what you choose to share with us at the time of collection, but may include, your:
• name (actual or pseudonym);
• company;
• mailing or street address (business or personal);
• email address (business or personal);
• phone number (business or personal);
• communication preferences;
• communication history, including where you have sought information, made a complaint, or other
interaction; and • credit or debit account information to facilitate payments when you purchase products and services from us.
Personal information we might generate about you include:
• membership data (including, organisational membership type, status, renewal dates, history);
• communication data (including, subscription preferences, engagement (event participation, engagement with email, newsletters, etc.); and
• financial information (including, invoice records and payment status relating to membership and events).
You can choose what personal information that you share with us, including the option to interact with us anonymously or by using a pseudonym, where possible. However, to the extent that you provide with limited or inaccurate personal information, we may not be able to communicate with you or provide you with the full extent or benefit of our products and services.
How do we use your personal information?
ASFI will identify any specific purposes for collecting your personal information at the time of collection. However, we may use your personal information to communicate with you for various purposes related to our usual business practices, products and services, including to:
• to communicate with our members, customers, contractors and suppliers about products, activities (such as, upcoming events, projects and programs that might be of interest) and services;
• provide you with information that you request from us;
• improve the quality, scope and type of products and services we offer;
• administrative and usual business operation purposes; and
• marketing and research purposes.
We may collect and retain your personal information for our legitimate business purposes, including to:
• comply with a legal process or obligation;
• enforce or comply with a contract or agreement with you or a third party (including any violations of them), this Privacy Policy or other applicable policies;
• respond to claims of alleged violations of the rights of a third party; and/or;
• protect the rights, property or personal safety of ASFI, its agents and affiliates, its customers and/or the public. This includes exchanging information with other companies and organizations for fraud protection, and spam/malware prevention, and similar purposes.
We may also collect or be supplied with information about your access, usage and interaction with our website using first and third party cookies. We may do this using tools such as GlueUp, YouTube and LinkedIn. This information may include:
• the location from which you have come to the site and the pages you have visited; and
• technical data, which may include IP address, the types of devices you are using to access the website, device attributes, browser type, language and operating system; and
• usage metrics and data, which may include identifying the types of users (individuals or business), user behaviour, engagement, and form submissions.
You can opt-out, change and manage your marketing preferences at any time via our website or by following the information provided within our communications.
What personal information do we disclose to third parties?
Circumstances in which we may disclose or transfer your personal information are:
• where you have provided your express consent; or
• to selected third party service providers who perform services on our behalf (such as payment processing, accounting, and CRM platforms); or
• where we are required, authorised or permitted to do so by the laws in the applicable jurisdiction.
To the extent required to receive the services, we may disclose your personal information to our service providers who may be located or store date overseas, such as:
• Stripe
• Glue Up
• Xero
Under no circumstances will we:
• disclose your information to third parties for the purposes of direct marketing;
• sell, license, or transfer your information to third parties for any profit or similar benefit.
Website analytics and links to third party sites
Our website (www.asfi.org.au) uses data analytic tools to help us better understand visitor traffic, so we can improve our services. Although this data is mostly anonymous, it is possible that under certain circumstances, we may be able to connect it to you.
Our website may contain links to websites operated by third parties. If you choose to engage with these sites or features, you may disclose your information to those third-parties and the collection, use, and disclosure of your information on those sites will be subject to the privacy policies of these third-party websites or services.
How do we safeguard your personal information?
We take commercially reasonable physical, technological and organisation measures to ensure that the personal information that we collect, use and hold about you is kept confidential and secure, including by implementing and maintaining:
• appropriate technical and organisational security measures (for example: role-based access controls and authentication practices, anti-virus software, and fire walls), policies and procedures designed to reduce the risk of accidental destruction, or loss, or unauthorised disclosure or access to information in our possession;
• physical security protocols (such as authorised or restricted access measures, and lockable storage), at our premises and of our physical databases/ records.
Whilst we take appropriate technical and organisational measures to safeguard your personal information, no transmission over the Internet can ever be guaranteed to be secure. Therefore, we cannot guarantee the security of any personal information that you transfer over the internet to us and any such transmission is at your own risk.
How long do we retain your personal information?
We will retain your personal information only for as long as required to achieve the purposes for which it was collected, or for any secondary purpose permitted, or required by law. We will delete or destroy personal information once we no longer require it for the purpose it was collected.
How to access and correct your personal information
We take all reasonable steps to ensure that the personal information that we collect and hold about you remains relevant, accurate and secure. You are entitled to access the information that we hold about you and to contact us to request that we provide you with a copy of or amend any personal information that we hold about you. We may consider requests for deletion or de-identification where appropriate and permitted by law.
We will attempt to respond to, and comply with, your requests within a reasonable time, although there may be circumstances in which we are not required to give you access to your personal information, for example if we need to keep processing your information for our legitimate business purposes, or to comply with a legal obligation. We may request you provide us with information necessary to confirm your identity before responding to your request.
If you request a copy of any of your personal information. We will provide it you in a structured, commonly used and machine-readable format.
There is no charge for requesting access to your personal information, but we may require you to meet our reasonable costs in providing you with access (such as photocopying costs or costs for time spent on collating large amounts of material).
Inquiries and complaints
To make a request to access your personal information, or make a query or complaints about how ASFI handles, processes or manages your personal information, please contact:
Privacy Officer: Stephanie Bates
Email: stephanie.bates@asfi.org.au
Address: ASFI Privacy Officer
C/- Hub Civic Quarter, 68 Northbourne Avenue Canberra ACT 2601
If you are not satisfied with ASFI’s response to a complaint, you have the right to contact the Office of Australian Information Commissioner (at www.oaic.gov.au/) to lodge a complaint.
