Privacy
Short version: we collect the information you choose to submit and basic site-usage information, use it to operate and improve the service, and do not sell it.
What we collect
Browsing requires no account. If you choose member access, we collect your email, preferred name or credit, role, subject interests, account-access level, sign-in and session timestamps. One-time sign-in tokens are stored only as hashes and expire after 15 minutes; browser sessions are revocable and expire after 30 days. Google Analytics may process usage information such as pages viewed, device/browser information and approximate location derived from network information. Our records, contributor, supplier, RFQ and divestment forms collect the fields you choose to enter, which may include your name, email, role, organisation, locality, topic, credit preference and message. Do not submit sensitive personal information or confidential project material unless we have first agreed a suitable process.
How it's used
We use member information to authenticate your browser, maintain the profile you request, associate later submissions with your member record and administer reviewed contributor access. Joining does not subscribe you to marketing. We use submissions to respond, assess the source or opportunity, prevent spam and progress the matter you raised. This may include a correction, article pitch, technical review, records conversation, supplier/RFQ request or confidential divestment enquiry. Personal archive material is not digitised, published or shared beyond review without an agreed written permission and rights process.
Storage and disclosure
Form submissions are stored in our Cloudflare-hosted submissions store. Member records, one-time-link states and sessions are stored in a separate Cloudflare database. Sign-in emails and form notices may be delivered through Resend when configured. Analytics is processed by Google. These providers operate global infrastructure, so information may be processed outside Australia. We do not sell or rent personal information. We disclose it only to operate the requested service, with permission, or where the law requires it, and retain it only for as long as reasonably needed for that purpose and our record-keeping obligations. Expired sign-in tokens and sessions are scheduled for deletion; member profiles remain until the member asks us to delete them or the account is administratively retired.
Your rights
We handle personal information in line with the Australian Privacy Principles (Privacy Act 1988 (Cth)). To access, correct or delete anything you've sent us, use the contact form or email records@minesandquarries.com.au. We will verify the request before changing or deleting information.