← Back to 2bfitfundraising.com.au 2BFIT Fundraising

Privacy Policy

Version 2.2  |  Last updated: 31 July 2026

This Privacy Policy explains what personal information 2BFIT Fundraising collects, why we collect it, who we share it with, and your rights to access, correct and delete it. We comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth) and the Notifiable Data Breaches scheme.

1. About us and our role

This Privacy Policy is published by Premier8 Pty Ltd (ABN 49 675 393 414), trading as 2BFIT Fundraising. In this Privacy Policy, "2BFIT", "we", "us" and "our" refer to Premier8 Pty Ltd. We design and run fundraising campaigns for school P&C Associations across New South Wales.

Online fundraising campaigns we run for P&Cs are delivered through the Raisely platform, with payments processed by Stripe. Under our agreement with Raisely, 2BFIT is the APP entity that collects and is responsible for donor and supporter information collected via these campaigns, and Raisely is our contracted service provider, handling that information only on our instructions and on our behalf.

The school P&C and the school have their own privacy obligations — NSW public schools are also subject to the Privacy and Personal Information Protection Act 1998 (NSW). This Policy covers only 2BFIT's handling of your information.

2. Your consent

By making a donation, registering as a fundraiser, submitting an enquiry, or otherwise providing personal information to 2BFIT, you consent to the collection, use and disclosure of your personal information as set out in this Privacy Policy. You can withdraw your consent at any time by contacting us (see section 12). Withdrawing consent does not require us to delete information we are legally required to retain — see section 10.

3. What personal information we collect

School and P&C enquiries

When you enquire about running an event at your school, we collect your name, email address, phone number, your role (for example P&C President, committee member, principal or teacher), your school's name, approximate student numbers and your preferred event timing.

Donors and supporters

When you donate to a campaign we manage, we collect your name, email address, optional mobile number, donation amount and donation history. Payment card details are collected and processed directly by Stripe — 2BFIT does not see or store full card numbers.

Student fundraisers

Where a school and P&C ask us to set up student fundraising pages, we collect only the minimum required: first name, last initial, year level or class, and fundraising goal. See section 7.

Website visitors

We collect standard technical information such as IP address, browser type and pages visited, through our website host and analytics tools.

4. Social media advertising and lead forms

We advertise on Facebook and Instagram, which are operated by Meta Platforms, Inc. ("Meta").

Some of our advertisements include an instant form (also called a lead form) that you can complete without leaving Facebook or Instagram. If you choose to complete one of these forms, we collect the information described under "School and P&C enquiries" in section 3 above.

5. Why we collect your information

6. Who we share your information with

We do not sell personal information, and we do not share it with third parties for their own marketing. We disclose personal information to the following service providers, who handle it on our behalf:

ProviderPurposeInformationLocation
RaiselyFundraising campaign platformDonor and fundraiser details, donation recordsAustralia, United States
StripePayment processingPayment details, donor name and emailAustralia, United States
Meta PlatformsAdvertising and lead formsEnquiry details submitted via instant formsUnited States
Google WorkspaceEmail, files and business recordsCorrespondence and enquiry recordsAustralia, United States
CloudflareWebsite hosting and securityTechnical website dataGlobal (Australian edge)
XeroAccounting and tax recordsDonation totals, donor name and email for receiptingAustralia, New Zealand

We also disclose information to the relevant school and P&C for the campaign you have supported, and where we are required or authorised to do so by law.

7. Overseas disclosure

Some of our service providers store or process information outside Australia, as set out in the table above. Before disclosing personal information overseas, we take reasonable steps to ensure the recipient handles it in a way consistent with the Australian Privacy Principles, including through contractual data protection terms.

8. Children's information

We do not knowingly collect personal information directly from children. Where student information is needed to run a campaign, it is provided to us by the school or P&C under their own consent arrangements with families, and we collect only the minimum described in section 3.

We assess a young person's capacity to consent on an individual basis, consistent with Australian privacy guidance, rather than applying a fixed age threshold. Where a young person does not have that capacity, we deal with a parent or guardian.

We are also preparing for the Children's Online Privacy Code, which registers on 10 December 2026, and will update this Policy as those obligations take effect.

9. Direct marketing

Where you have given us your details, we may contact you about our school programs and fundraising events. Every marketing email we send includes a functional unsubscribe link, and you can opt out at any time by contacting us or using that link. We comply with the Spam Act 2003 (Cth).

10. How long we keep your information

We keep personal information only for as long as it is needed for the purpose it was collected, or for as long as we are required to retain it by law — for example, financial and donation records retained for tax and audit purposes. When information is no longer needed and we are not required to keep it, we take reasonable steps to destroy or de-identify it.

11. Security and data breaches

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. These steps include access controls, multi-factor authentication on administrative accounts, and contractual security obligations on our service providers.

If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner in accordance with the Notifiable Data Breaches scheme.

12. Access, correction and contact

You can ask us for access to the personal information we hold about you, ask us to correct it, or ask us to delete it. We will respond within a reasonable period. In limited circumstances we may decline a request — if we do, we will tell you why in writing.

Privacy Officer — 2BFIT Fundraising

Premier8 Pty Ltd (ABN 49 675 393 414)

Email: support@2bfitfundraising.com.au

Phone: (02) 9758 1600

13. Complaints

If you believe we have mishandled your personal information, please contact our Privacy Officer first using the details above. We will acknowledge your complaint and aim to resolve it within 30 days.

If you are not satisfied with our response, you can contact:

14. Changes to this Policy

We may update this Privacy Policy from time to time. The current version is always available on this page, with the version number and date shown at the top. Material changes will be communicated to schools and P&Cs we are working with.