Legal
Privacy Policy
We keep this simple: we only ask for what we need, we use it only for what you gave it to us for, and you can ask us to delete it at any time.
Last updated: 7 August 2026
Section 1
Who this policy covers
This policy explains how the Islamic Society of RMIT (“ISR”, “we”, “us”) handles personal information collected through this website, theisr.com.au.
ISR is a student club affiliated with RUSU (RMIT University Students Union). We are run by student volunteers, not a commercial organisation. We handle your information in line with the Australian Privacy Principles set out in the Privacy Act 1988 (Cth), and we apply those standards regardless of whether they are strictly required of a club our size.
This policy covers this website only. RMIT University and RUSU run their own systems under their own privacy policies, and any external site we link to is governed by its own terms.
Section 2
What we collect, and when
You can browse this website — prayer times, events, announcements, and everything else — without giving us any personal information. We only collect information when you actively choose to send it to us.
Newsletter subscriptions
If you subscribe to our newsletter, we collect your email address. We use it solely to send you ISR event announcements and community updates. We do not use it for anything else, and every newsletter includes a way to unsubscribe.
Contact enquiries
If you send us a message through our contact form, we collect your name, email address, and whatever you write in your message. We use this only to read and respond to your enquiry.
Committee administrator accounts
Members of the ISR committee who manage events and announcements sign in to a protected admin area. Their account email and sign-in session are handled by our authentication provider. This applies only to committee members, not to general visitors.
We do not ask for and do not want sensitive information — including details about your religious beliefs, health, finances, or background — beyond what you volunteer in a message to us. Please don't include anything sensitive you wouldn't want us to hold.
Section 3
Cookies and tracking
We do not run advertising trackers, analytics tools, or third-party marketing pixels on this website. We do not build profiles of visitors, and we do not track you across other sites.
The only cookies this site sets are essential ones: a secure session cookie that keeps a committee member signed in to the admin area. If you are not signing in as an administrator, no cookie is set for you.
Like any website, our hosting provider may keep short-term server logs (including IP addresses) for security and reliability. We do not use these logs to identify individual visitors.
If we ever introduce analytics, we will update this policy and note the change here before turning it on.
Section 4
How we use and share your information
We use your information only for the purpose you gave it to us: responding to your enquiry, or sending you the newsletter you signed up for.
We never sell, rent, or trade your personal information. We do not share it with advertisers or data brokers, and we do not pass it to other student clubs or external organisations for their own use.
We share information outside the ISR committee only where:
- it is handled by a service provider we use to run the site — our database and authentication provider, our email and hosting providers — strictly on our instructions;
- you have asked us to, or clearly agreed to it; or
- we are required to by law.
Some of these providers store data on servers outside Australia. We choose providers that offer appropriate security and privacy protections.
Section 5
Storage, security, and how long we keep it
Information is stored in our managed database and email accounts, protected by encryption in transit and access controls. Only committee members who need access for their role can reach it, and administrator accounts are protected by individual sign-in credentials.
We keep newsletter subscriptions until you unsubscribe or ask us to remove you. We keep contact enquiries only as long as we need them to deal with your message and any follow-up, then delete them.
No system is perfectly secure. If a breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner as required under the Notifiable Data Breaches scheme.
Section 6
Your rights
At any time, you can ask us to:
- tell you what personal information we hold about you;
- correct anything that is wrong or out of date;
- delete your information from our records; or
- stop sending you the newsletter.
Email us at isr@rmit.edu.au and we will action your request within a reasonable time, normally within 30 days. There is no charge for this.
Section 7
Young people
This website is intended for RMIT students and the wider campus community. We do not knowingly collect information from children under 15. If you believe a child has given us their details, contact us and we will delete them.
Section 8
Changes to this policy
We may update this policy as the website grows or our practices change. The current version always appears on this page, with the date it was last updated shown at the top. If a change materially affects how we handle information you have already given us, we will make that clear.
Questions about your privacy?
If anything here is unclear, or you want to know what we hold about you, just ask — a real member of the committee will read your message.