Privacy and your information
I'm putting Gluten Free Club together here on Brisbane's northside. I want people to know what happens to the details they share with me.
Development notice, 10 November 2026: This collection notice is being prepared for a real postcode enquiry workflow. The public submission controls are not enabled until consent, retention and security requirements are approved. Website membership and ordering are also closed.
What the forms would ask for
For a Join the Club enquiry I'd ask for a first name, email, suburb and postcode, with an optional question. For future Local GF Legend interest I'd also ask about your preferred area and availability. Product ideas can be sent without an email address. You can provide one if you'd like a reply.
There's no need to tell me about medical conditions, a diagnosis or other sensitive health details in these forms.
Interest in a postcode or helping run a club
When the postcode enquiry forms have passed their security and privacy checks and are opened, I'd ask for your name, email address, suburb and postcode. You can also tell me which gluten-free foods you miss, or whether you'd be interested in helping as a Local GF Legend. I'll use these details to respond and to see which neighbourhoods are interested. A form submission will not make you a club member or approve a Legend role.
You can choose separately whether you would like occasional email updates about possible local clubs and other Gluten Free Club news. That updates box will start unticked. If you don't tick it, I won't add you to general marketing emails just because you enquired. If you do opt in, you can withdraw that choice by emailing hello@glutenfreeclub.com.au.
Enquiry details are intended to be held in a founder-access-controlled Cloudflare D1 database. Cloudflare Turnstile may handle technical connection information to help reject spam. Email addresses should only be shared with Brevo after a separate approved and consent-checked email workflow is ready. No automatic opening notification or marketing campaign is active yet.
Public postcode submission will remain disabled until the final collection notice, retention/deletion schedule, security controls and founder release approval are confirmed. While it's disabled, the page offers a separate email enquiry that you can choose to send yourself.
Why I'd use your details
I'd use an enquiry to answer your question, investigate local food requests and organise possible future community activities. A product suggestion isn't an order, and a club enquiry doesn't create an approved membership or Local GF Legend role.
Marketing emails are a separate optional choice. The checkbox won't be ticked for you. Submitting a question or a food request won't automatically add you to promotional emails. You can withdraw marketing consent later.
Where records would be held
The planned main database is Cloudflare D1. Only the contact details and interests needed for agreed email communications would be sent to Brevo. Google Sheets may be used for internal reports but isn't required for a website enquiry. Service providers may process information in other countries; their relevant arrangements need final review before real collection starts.
Security, access and keeping records
Founder-only records are intended to be protected by authenticated access, database permissions, rate limits and abuse checks. Form protection may use Cloudflare Turnstile, which verifies a challenge token and processes technical connection information.
Records should be kept only as long as needed for the stated purpose and any applicable legal obligations, then securely deleted or de-identified. The exact retention periods, consent-evidence schedule, backup deletion and overseas-processing details haven't been approved yet. They must be settled before the forms open.
Access, corrections and questions
If you'd like to ask what information Gluten Free Club holds about you, correct something or request removal, email hello@glutenfreeclub.com.au. A request will be reviewed against any necessary record-keeping obligations.
Optional website analytics
Google Analytics 4 and Matomo are planned, but neither should load unless you've chosen optional analytics. You can change your analytics choice from the footer. Private founder, account and checkout pages are excluded from optional analytics.
This is a development-stage explanation, not a founder-approved final privacy policy. The business identity, privacy obligations, collection notice, overseas service-provider details and retention schedule need a final review before any real website enquiries are accepted.