Full policy
Who we are
AFRAUSN — The Africa-Australia Community Network — is operated by the Malak Foundation, an Australian-incorporated entity. References to “we”, “us”, or “AFRAUSN” in this policy mean the Malak Foundation acting as the platform operator.
What information we collect
When your organisation applies to AFRAUSN, we collect: the organisation name, ABN or other registration details (if applicable), focus areas, city and state, year established, the name and role of the contact person, the contact email and (optionally) phone number, a brief description of your organisation, and a link to your public presence. When the charter is signed, we record the signatory’s name and role, the date and time, the IP address used to sign, and the charter version. When you log in, we record your last login time.
For the “Get help in your language” contact path, we collect your name, preferred language, preferred contact method, the contact value (email, phone, or WhatsApp), and any message you choose to provide.
How we use information
We use the information you provide to: review your application, list your organisation in the directory, route partnership invitations and consultation requests, send you transactional emails (magic login links, the Monday digest, compliance reminders), and respond to support requests.
What we do not do
- We do not sell your information to anyone.
- We do not share your information with government without your explicit per-instance permission for each instance.
- We do not run third-party advertising or marketing trackers.
- We do not expose your contact email to other members; messages route through the platform.
Where your data lives
Your data is stored in Supabase’s Sydney (ap-southeast-2) region. Transactional emails are sent via Resend. The website is hosted on Vercel (with edge caching at points of presence globally; only public, non-personal data is cached at the edge).
Cookies
AFRAUSN sets first-party cookies for authentication only. The cookies are HttpOnly, Secure, and SameSite=Lax. No third-party trackers are loaded.
Your rights
You may at any time: access the information we hold about your organisation; correct anything inaccurate; delete your account; or withdraw consent for a specific consultation or data-sharing request.
Account deletion
From your account settings, you may delete your organisation’s account in one click. A 30-day grace period applies during which you can reverse the deletion. After 30 days, all your data is permanently erased from the database. We retain only an audit-log record (anonymised) that an account was deleted, as required for compliance with our charter.
Data breaches
If a data breach occurs that is likely to result in serious harm, we will notify affected parties and the Office of the Australian Information Commissioner in accordance with the Notifiable Data Breaches scheme.
Contact
For privacy questions, requests, or complaints, contact us at info@malakfoundation.org.
Changes to this policy
We will publish any material changes to this policy on this page and notify participating organisations via the Monday digest at least 14 days before the changes take effect.
Last reviewed: May 2026.