Privacy policy

Last updated 28 October 2026

Brigalow Avenue is a free, community-run noticeboard for neighbours in and around Camden South, NSW. We collect only what we need to run it, we don’t sell anything to anyone, and there’s no advertising or tracking. This policy explains what we hold and why, in plain English. We aim to follow the Australian Privacy Principles in the Privacy Act 1988.

What we collect

• Your account: name, email address, suburb or street, mobile number and password. Your password is stored scrambled (hashed), so nobody can read it, including us.
• What you post: listings, photos, prices, locations and event dates you add.
• Messages you send to and receive from other members on the site.
• Remembered devices: if you choose “Remember this device”, the type of browser and device (like “Chrome on Windows”), when you remembered it and when it was last used.
• Reports you make about listings, and bug reports (which include the page you were on and your browser type).
• Technical details: your IP address is used briefly to stop spam and too many sign-ups or messages from one connection. Those records are deleted automatically after two days. Our web server also keeps standard access logs (IP address, pages visited, browser type) for security, which are deleted on a rolling basis.

Every photo is re-saved when you upload it, which removes hidden camera details such as GPS location.

What other people can see

• Anyone can see your listings, their photos and the location you add, plus your name and the suburb or street you gave, next to them.
• Only the people you message can see your messages.
• Your email address and mobile number are never shown to other members or the public. Share contact details in a message only when you choose to.

Why we use it

• To create and run your account and log you in.
• To confirm you’re a real person: we email you a link and text you a code, and each mobile can only be used for one account.
• To protect your account: when you log in on a new device, we text a code to your mobile, so a stolen password isn’t enough to get in. Admins use an authenticator app instead.
• To show your listings and deliver your messages, and to email you when someone messages you.
• To keep the community safe: dealing with reports, removing listings that break the community rules, and suspending accounts.
• To fix problems you report.

We don’t use your details for marketing, and we never sell, rent or trade them.

Who else handles it

We share information only with the services that keep the site running, and only what they need:

• Hosting: the site and its database run on servers in Sydney, managed by Geekheads, a local IT company.
• ClickSend sends the text messages with your sign-up and login codes, so it receives your mobile number and the code.
• Google Fonts: your browser downloads the site’s typefaces from Google, which receives your IP address and browser type. Google doesn’t set cookies for this.
• Email: emails to you pass through our own mail server and your email provider.

Some of these providers may process information outside Australia. We may also disclose information if the law requires it, or to police or emergency services if someone’s safety is at risk.

How long we keep it

• Listings come off the site automatically after 30 days (7 days for free items) or when you mark them gone. We keep them in your account, so you can renew them, until you delete them or close your account.
• Messages stay until the account of the person who sent or received them is deleted.
• Sign-up and login codes expire after 10 minutes.
• Remembered devices are kept until you forget them on the Login & security page or change your password.
• When you ask us to close your account, we delete it with all your listings, photos and messages within 30 days.

Keeping it safe

The site uses HTTPS throughout, passwords and codes are stored hashed, and only a small number of volunteer admins can see members’ email addresses. No system is perfectly secure. If we ever have a data breach that’s likely to cause serious harm, we’ll tell the people affected.

Your choices

• You can edit, mark as gone or delete your listings at any time from My listings.
• You can ask to see the information we hold about you, have it corrected, or have your account deleted.

Email privacy@brigalowavenue.au from the address you signed up with, and we’ll reply within 30 days.

Cookies

We use two essential cookies, to keep you logged in and to remember devices you’ve confirmed, and no tracking or advertising cookies. See the cookie policy.

Questions or complaints

If you have a question or concern about your privacy, contact us first at privacy@brigalowavenue.au. If you’re not happy with our answer, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Changes

If we change this policy, we’ll update the date at the top, and we’ll tell members by email about any important changes.