Privacy policy
Data controller
The operator of metrosydney.org is the data controller. For privacy questions, contact us via the contact form.
Data we collect
- Contact form: name, email and message — only when you submit the form, used solely to reply to you.
- Server logs: IP address, browser user-agent, requested URL and timestamp — kept temporarily for security and traffic analysis.
- Cookies: see the cookie policy for the full list.
Purpose of processing
- Respond to messages from the contact form.
- Maintain site security (anti-spam, anti-abuse).
- Aggregate traffic analysis (no individual identification).
Legal basis
Processing is based on your consent (contact form) and our legitimate interest in operating and securing the site. We handle personal information consistent with the Australian Privacy Principles.
Retention
Contact-form messages are kept for up to 24 months. Server logs rotate every 30 days.
Third parties
We do not sell or share personal data with advertisers. The site uses the following technical services which may receive limited data:
- Cloudflare (CDN and security) — handles IP addresses to filter abuse.
- Akismet (anti-spam) — only on contact-form submissions.
- Google reCAPTCHA — on the contact form.
Your rights
You can request access to, correction or erasure of your data, restriction of or objection to processing, and withdrawal of consent at any time.
Security
The site uses HTTPS and modern security headers. No personal data is sold to third parties.
Last updated: 2026