FirstCard is operated by Barayamal (ABN 13 618 487 139), an Indigenous-led not-for-profit based in Gunnedah, NSW. We treat your personal information — especially the eligibility information you share with us — with the care and respect it deserves. This policy explains what we collect, how we use it, and your rights over it.

1. What we collect

When you apply for FirstCard membership we collect your name, email, and optionally your phone, community or organisation, state, and postcode. We collect eligibility information you provide so a reviewer can assess your application. When you submit a partner offer we collect business contact details and offer details. We never collect data you have not deliberately given us.

2. How we use it

We use your information only to: (a) review and approve your membership application; (b) issue and verify your FirstCard; (c) send you offers, updates, or operational messages you have opted into; (d) match relevant partner offers to your stated interests and region; (e) maintain the integrity of the platform.

3. Eligibility information — sensitive data

Information about your Aboriginality, community, country, or family connection is treated as sensitive personal information under the Australian Privacy Principles. It is visible only to the small reviewer team that processes membership applications. It is never shared with partners, advertisers, or third parties. It is stored separately from your public member profile.

4. Who we share with

We do not sell your information — ever. Partners offering discounts to members do not receive your personal information from us. When you redeem an offer, you may share your name and FirstCard membership identifier with that partner; whatever you share with them is then governed by their own privacy policy. We use trusted infrastructure providers (WordPress.com, email and SMS services) that process data on our behalf under data processing agreements.

5. How long we keep it

Active member data is retained while you remain a member. If you cancel your membership we keep a minimal audit record (your name and approval decision date) for accountability and reapplication purposes, and delete the rest within 90 days. Eligibility information is deleted when no longer needed for review or audit.

6. Your rights

You can request a copy of the information we hold about you, ask us to correct anything that’s wrong, or ask us to delete your account and personal data. Contact us using the email below and we’ll respond within 30 days. If you’re not satisfied with our response you can complain to the Office of the Australian Information Commissioner (OAIC).

7. Cookies and tracking

We use minimal cookies for site functionality (login sessions, anti-spam) and basic anonymous analytics. We do not run advertising trackers and we do not share visitor data with ad networks.

8. Contact us

For privacy enquiries, account changes, or to exercise your rights:
Email: firstcard@barayamal.com.au
Mail: Barayamal, Gunnedah NSW, Australia