Last updated: 22 October 2026
OneBuy believes that your privacy is an important right, whether you deal with us as an individual or on behalf of an organisation. We are committed to handling your personal information professionally, openly and securely.
OneBuy is a ministry of Christian Venues Association Ltd (ABN 74 050 611 295) (“CVA”), which owns, operates and governs it. In this policy, “OneBuy”, “we”, “us” and “our” refer to OneBuy and CVA. This policy explains how we handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
“Personal information” means information or an opinion about an identified individual, or an individual who is reasonably identifiable.
Who this policy applies to
This policy applies to personal information we collect through onebuy.org.au, our member and OneBuy Personal accounts, our emails and events, and our dealings with:
- Member organisations – the contact people at churches, ministries, charities, not-for-profits and eligible businesses that use OneBuy for purchasing;
- OneBuy Personal members – individuals who join to access offers and support a nominated organisation;
- Suppliers and network partners – the people we deal with at those organisations; and
- anyone else who visits our website, contacts us or subscribes to our communications.
What we collect
We only collect personal information that is reasonably necessary for what we do. Depending on how you deal with us, this may include:
- your name, role, organisation, postal and email addresses, phone numbers and postcode;
- account and login details for the OneBuy member area or OneBuy Personal;
- your nominated church, charity or ministry and your chosen Impact Partner (OneBuy Personal);
- information about the offers and suppliers you are interested in, enquiries you make and referrals we pass on for you;
- information suppliers provide to us about eligible purchases, so we can confirm savings, rebates, commissions and the contributions owed to nominated organisations and Impact Partners;
- event registrations, survey responses and feedback;
- for organisations that receive OneBuy Personal contributions, the contact and bank account details we need to make those payments;
- your communication preferences; and
- technical information about your use of our website, such as IP address, browser type, pages viewed and how you arrived (see Cookies and website analytics below).
We do not seek to collect sensitive information (such as health information). If it is ever needed, for example dietary or accessibility needs for an event, we will only collect it with your consent and use it for that purpose.
How we collect it
Wherever practical, we collect personal information directly from you – for example when you fill in a form, create an account, register for an event, email or call us. We may also receive it from:
- your organisation, when it nominates you as a contact;
- suppliers, about your enquiries and eligible purchases made through OneBuy offers;
- network partners (such as denominations or associations) you have asked to connect you with OneBuy; and
- publicly available sources, such as organisation websites.
If you choose not to give us certain information, we may not be able to provide an account, process a referral or allocate contributions to your nominated organisation. You can browse our public website and make general enquiries without identifying yourself.
How we use it
We use personal information to:
- set up and manage member and OneBuy Personal accounts and verify eligibility;
- connect you with suppliers and offers you ask about, and (for member organisations) introduce you to suppliers whose offers may be relevant to you;
- track eligible purchases and calculate and pay savings, rebates and contributions to nominated organisations and Impact Partners;
- respond to enquiries and provide support;
- send you information about OneBuy, our suppliers, offers and events;
- run events and programs, and report on OneBuy’s activity and impact (generally in aggregated or de-identified form);
- improve our website and services; and
- meet our legal, accounting and governance obligations.
We will only use or disclose your personal information for a purpose other than the one it was collected for if you consent, you would reasonably expect us to, or it is required or authorised by law.
Who we share it with
We do not sell or rent your personal information. We may share it with:
- CVA, which operates OneBuy;
- suppliers, when you ask us to connect you with an offer or make a referral, and to confirm eligible purchases. In addition, as agreed when member organisations sign up, we may share member organisation contact details with OneBuy suppliers so they can contact you about relevant offers. Suppliers must not add these details to their mailing lists or use them for general marketing without your consent;
- your nominated organisation and Impact Partners – we report contribution totals to them, but we do not share your individual purchase details with them without your consent;
- network partners that referred you to OneBuy, in limited form for reporting and member support;
- service providers who help us run OneBuy, such as our website host, customer relationship management and email platform (HubSpot), accounting software and IT support. They may only use the information to provide services to us; and
- government bodies, regulators or others where required or authorised by law.
Overseas disclosure
Some of our service providers may store, process or access data outside Australia (for example, for support or backup purposes, or where a provider’s systems are located overseas). Where this happens, we take reasonable steps to ensure those providers handle personal information consistently with the APPs.
Direct marketing
We may send you emails and other communications about OneBuy, supplier offers, events and opportunities to support mission. You can unsubscribe at any time using the link in our emails or by contacting us. Some service messages, such as account or contribution notices, are not optional while you hold an account.
Cookies and website analytics
Our website uses cookies and similar technologies to keep you logged in, remember your preferences, understand how people use the site and measure the effectiveness of our communications. These include HubSpot’s analytics and tracking tools. When you first visit, our cookie banner lets you accept or decline non-essential cookies. Some of these tools may also be used to recognise you when you open our emails or return to our website.
You can set your browser to refuse or delete cookies, though some parts of the site (such as logging in) may then not work properly.
Security and retention
We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. Our website uses encrypted (HTTPS) connections, and access to our systems is limited to people who need it. We store bank account details for contribution payments securely and limit access to the staff who process payments. OneBuy does not store payment card details; purchases with suppliers are made directly with that supplier, and any payments to OneBuy or CVA are processed by secure third-party payment providers.
We keep personal information only for as long as we need it for the purposes in this policy or to meet legal and record-keeping requirements. After that, we take reasonable steps to destroy or de-identify it.
Accessing and correcting your information
You can ask for access to the personal information we hold about you, or ask us to correct it if it is inaccurate, out of date, incomplete or misleading. OneBuy Personal and member account holders can update many details directly in their account. We will respond within a reasonable time, usually within 30 days. If we cannot give you access or make a correction, we will explain why.
Questions and complaints
If you have a question or concern about how we have handled your personal information, please contact us using the details below. We will acknowledge your complaint promptly and aim to resolve it within 30 days. You can also read the CVA Complaints Policy.
If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or on 1300 363 992.
Whistleblower policy
OneBuy follows CVA’s whistleblower policy, which you can read here.
Contact us
Privacy Officer, OneBuy (Christian Venues Association)
2 Leabons Lane, Seven Hills NSW 2147
Email: info@onebuy.org.au
Phone: 1800 069 697
Changes to this policy
We may update this policy from time to time. The current version will always be available on this page, with the date it was last updated.