Privacy Policy

Who we are

I Promise To Act is a group of people who want to help people take action, and you can read more about us here. Our website address is:

We are not a commercial entity and we promise we are not collecting your data to sell to others, or for any other purpose than to let us help you keep your promise as described in our policy below.

What personal data we collect and why we collect it


When visitors post on the site we collect the data you enter with your promise as well as your IP address and browser user agent string to help spam detection.


If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website

Contact forms

The entire purpose of I Promise To Act is for us to help you generate a promise that you can share, and that we can remind you of via email. When you submit your promise to us, we will capture contact data through a form to help us generate your promise image, to help you share it and so that we can contact you. We will keep it indefinitely unless you contact us to ask us to delete it.

We promise only to contact you if you give permission and only regarding the promise(s) you have made. This may include contacting you with surveys or other news that might help you keep your promise. By submitting your promise, you are consenting to being contacted by us.


If you submit a promise on our site, we will save your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. I Promise To Act will help you generate posts to share on a number of social media websites, and will link you directly to them if you click on a share button.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.


Who we share your data with

We will not share your identifiable data with anyone that isn’t you. When you share your post, I Promise To Act will generate a post for you that you can share, but we will not share this on your behalf; you must login to your social media provider to share it, and we will not be able to collect any detail about your social media profile that isn’t public

Your post will be accessible to the full internet if someone accesses the correct url, but your email and name will be hidden.

We may share statistical reporting based on your promises with research bodies or public interest groups so that they can understand the kinds of promises being made and when. We will never share detailed information about you or your promise, or reports that can be used to re-identify you with anyone who isn’t a part of I Promise To Act.

We reserve the right to share personal information with legal entities if required by law in Australia, which is where we and the site are hosted.

How long we retain your data

If you leave a promise, the promise and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.

If you leave a promise and opt-in for additional reminders, we will use your information to contact you.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

If you have left a promise on this site, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

How to contact us

For any queries relating to your promise data, you can contact us at [email protected]

Additional information

How we protect your data

We will do our best to protect your data by using industry best-practices for security.

We use Azure-managed infrastructure to keep our infrastructure patched and up to date. We also keep the application we use to host this website up to date with security patches.

We test the application for vulnerabilities daily, and patch the application quickly if a new vulnerability is found.

What data breach procedures we have in place

While we will take steps to protect your data, there is always a small risk that your data could be stolen or lost. A loss of any personal, private or confidential data is called a data breach.

If a data breach occurs, we will let you know via email. We will also provide information about the breach to the cyber security authorities to determine the cause of the breach. We will investigate the issue to the best of our ability.

We at I Promise to Act acknowledge the people of the Woi wurrung and Boon wurrung language groups of the eastern Kulin Nation on whose unceded lands we live and work.