Privacy Notice

How Floasis collects, stores, and uses member information for administration, safety, and community coordination.

Placeholder content: Draft for committee review — this notice is plain-English MVP wording, not legal advice, and is not presented as legally compliant. It will be updated as Floasis systems and governance mature.

Why Floasis collects member information

Floasis Incorporated collects member profile information to help run the community safely and fairly. This includes administration, communication, safety coordination, volunteering, performing opportunities, and event coordination.

Information is collected when you join, update your member profile, or interact with Floasis systems that require an account.

What information may be collected

Depending on how you participate, Floasis may collect:

  • Name and preferred name
  • Email address
  • Phone number
  • Suburb or region
  • Social media links (such as Instagram or other links you provide)
  • Profile photo
  • Performer details (such as performer name and bio)
  • Volunteer or performer interest indicators
  • Insurance details (such as provider, policy number, and expiry date)
  • Uploaded documents (such as insurance documents or profile files you choose to upload)
  • Limited system logs related to account and portal activity (for troubleshooting and safety, not for marketing analytics)

Where information is stored

Member information is stored using Supabase (authentication, database, and private file storage).

Uploaded files stay in private storage and are not published as public objects. They are intended for Floasis administration and your own portal access where available, with the limited event-organiser sharing described below.

Your profile photo remains privately stored. After you have a Recruitment relationship with an event, authorised organisers for that event may see it through a short-lived signed URL. The photo does not become a public object.

Uploaded insurance documents stay private. They are not exposed through organiser Recruitment, Potential Matches, or application-review workflows.

Who can access member information

You can access your own profile through the member portal where that access exists.

Authorised Floasis admins may access member information where required for administration, safety, and platform operation.

Authorised event organisers and co-organisers do not receive unrestricted profile access. They may see limited information only through the event workflows described below. This is not a public member directory, and not every member is searchable.

Floasis does not publish member profiles on the public website as part of this MVP.

Invitation matching (Potential Matches)

If you enable the relevant Performer or Volunteer invitation-matching preference, an authorised organiser or co-organiser managing an eligible event may see approved Potential Match information:

  • Full name
  • Performer name where applicable
  • Rough suburb or region
  • Existing matching information, including the Performer matching summary where applicable
  • Confirmed Floasis contribution history

Potential Matches do not include email, phone, exact residential address, profile photo, insurance policy number, uploaded insurance documents, or unrelated profile data. Members who have not enabled the relevant invitation-matching preference are not included in this matching.

Event Recruitment relationships

Once you have a Recruitment relationship with an event — for example because you applied, or an organiser invited you — authorised organisers for that event may see your current profile photo using a short-lived signed URL.

The photo remains privately stored and is not published as a public profile.

Applications and accepted participants

When you apply, authorised organisers receive the contact, application, and profile information allowed by the application-review workflow. For applications captured by Floasis application snapshots, Floasis stores an application-time copy of the approved contact and role details with that application. Later profile edits do not change that submitted copy. Legacy applications without a snapshot continue to use current profile details in organiser review.

Profile images and confirmed Floasis contribution history remain current records rather than being frozen into the application snapshot. Insurance policy numbers, uploaded insurance documents, private storage paths, and unrelated private profile information are not included in organiser-visible application snapshots.

If you are accepted, authorised organisers receive contact information allowed by the current accepted-participant workflow.

Information that stays private from these event workflows

Event organisers do not receive the following through these Recruitment workflows: exact residential address, insurance policy number, uploaded insurance document, or unrelated private profile information.

This does not replace the separate sharing described later in this notice for administration, safety, legal obligations, or emergency response.

How Floasis may use email and contact details

Floasis may use your email address to send:

  • Login links (magic links) for member portal access
  • Membership and admin messages related to your account or participation
  • Event opportunities
  • Performer opportunities
  • Volunteer opportunities

Communications should reflect your participation and preferences where those are recorded in your profile.

When information may be shared

Floasis may disclose information where reasonably needed for:

  • Event coordination (for example, confirming participants, crew, or performers for an activity)
  • Safety (for example, responding to hazards, incidents, or safety planning)
  • Insurance-related administration where you have provided insurance details
  • Legal obligations Floasis reasonably believes apply
  • Emergency response where sharing information may help protect people
  • Other situations with your consent

Correction, updates, and removal requests

You can update much of your profile through the member portal. For correction or removal requests, or questions about your information, contact Floasis using the details below.

Floasis will handle requests in good faith as systems and volunteer capacity allow.

Contact

For privacy questions, correction requests, or removal requests, email Floasis at the address below.

contact@floasis.com.au

Updates to this notice

This privacy notice may be updated as Floasis systems, events, and governance mature. Material changes should be reflected on this page. Continued use of member systems after an update may indicate you have reviewed the current notice — check with Floasis if you are unsure.

See also the Community Rules and contact page.