Privacy Policy

Last updated: 3 November 2026

School Kids is an initiative of LAHAT Foundation Ltd (ABN 74 670 634 312), a registered Australian charity. We respect the privacy of everyone who contacts us, donates or visits this website. This policy explains what personal information we collect, how we use it and the choices you have.

In this policy, “we”, “us” and “our” mean LAHAT Foundation Ltd, including when we act as School Kids.

What we collect

We only collect the personal information we need. Depending on how you deal with us, this may include:

When you contact us: your name, email address and the content of your message. Messages sent through our contact form are emailed to us and also stored securely on our website, so they don’t get lost.
When you donate: your name, email address, postal address, business name (if you are giving on behalf of a business), and the amount, date and frequency of your gift.
When you partner with us or fundraise for us: your contact details and the details of the activity.
When you visit our website: basic technical information, such as your browser type and the pages you view, which our hosting provider records in server logs for security and to keep the site running.

We do not ask for sensitive information, such as health information, and we ask that you do not send it to us. If you tell us about your own circumstances, for example in a message, we will only use that information to respond to you.

You can contact us without giving your name, but we will need contact details to reply. A tax receipt requires your name.

Donations and payment details

When online donations open on this website, they will be made through Donorbox, a donation platform, and paid through Stripe, a payment provider. When you give, Donorbox and Stripe collect your name, email address, postal address, business name (optional) and payment details. Donorbox issues your tax receipt and lets you change or cancel a recurring donation.

Your card details are entered directly into Stripe’s secure systems through the donation form. Card details are not stored on our website, and we never see your full card number.

Donorbox and Stripe handle your information under their own privacy policies, available at donorbox.org/explore/privacy and stripe.com/au/privacy. Both may process information outside Australia, including in the United States.

How we use your information

We use personal information to:

respond to your enquiry;
process your donation and send you a receipt for tax purposes;
make sure your gift goes to School Kids;
keep the records we are required to keep as a registered charity and Deductible Gift Recipient, for example for the Australian Charities and Not-for-profits Commission (ACNC) and the Australian Taxation Office (ATO);
prevent fraud and spam, and protect the security of our website; and
with your consent, send you updates about our work.

We will not sell, rent or trade your personal information.

Updates and fundraising messages

We will only send you news or fundraising messages if you have agreed to receive them. Every message will include a simple way to unsubscribe, and you can also ask us to stop at any time through our contact form.

Who we share it with

We share personal information only where needed to do the things described above, with:

Donorbox and Stripe, to process donations, issue receipts and manage recurring gifts;
Google, through reCAPTCHA on our contact form (see Cookies below);
the providers that host our website and email, so that the site works and messages reach us;
our professional advisers, such as our accountant or auditor, where needed; and
government bodies or others where the law requires or allows it.

We do not share donor or contact details with the schools or programs we fund unless you ask us to.

Some of these providers may store or process information outside Australia, including in the United States. Where that happens, we choose providers that take reasonable steps to protect it.

Cookies

Our website uses only the cookies and similar technologies it needs to work:

Spam protection: our contact form uses Google reCAPTCHA to tell people from automated spam. reCAPTCHA collects information about your device and how you use the page, and sends it to Google, which handles it under its own privacy policy (policies.google.com/privacy).
Donations: once online donations open, Donorbox and Stripe may set cookies on our donation page to run the donation form, process the payment securely and prevent fraud.

We do not currently use advertising or analytics cookies. If that changes, we will update this policy first.

You can set your browser to block or delete cookies, but the contact form and parts of the donation process may not work without them.

How we keep it safe

We take reasonable steps to protect personal information from misuse, loss and unauthorised access. Access is limited to the people who need it for their role. Our website uses an encrypted (HTTPS) connection.

We keep donation records for as long as the law requires, generally at least seven years for tax records. We delete or de-identify other information when we no longer need it.

Accessing or correcting your information

You can ask to see the personal information we hold about you, or ask us to correct it, through our contact form. We will respond within 30 days. We may need to confirm your identity first.

Questions and complaints

If you have a question about privacy or think we have mishandled your information, please contact LAHAT Foundation Ltd first through our contact form so we can try to fix it.

We will acknowledge your complaint within 7 days and aim to resolve it within 30 days. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.

Changes to this policy

We may update this policy from time to time, for example when we start using a new service. The latest version will always be on this page, with the date it was last updated. The policy for LAHAT Foundation’s main website is at lahat.org.au/privacy-policy.