Regulatory Compliance Framework

SponsorLink.au adheres to Australian commercial, non-profit, payment security, and privacy regulations to ensure complete operational safety for clubs and businesses.

Pillar 1: Club Governance & ACNC Guidelines

Community Sports Club Governance

SponsorLink provides non-profit sporting clubs and associations with transparent, risk-free digital sponsorship infrastructure:

$0 Cost Guarantee for Clubs: Participating sports clubs are never charged membership, onboarding, or platform fees. 100% of sponsorship distribution flows directly to the club.
Commercial Sponsorship vs Tax Donation: SponsorLink partnerships constitute commercial advertising and local promotion (tax-deductible business expense for sponsors), distinct from non-tax-deductible philanthropic donations.
Audit-Ready Reconciliation: Club treasurers receive automated monthly distribution statements and Stripe Connect logs, simplifying annual ACNC and state association reporting.

Volunteer Board Protection: Our architecture operates without requiring club committee members to manage merchant accounts or store financial credentials, eliminating liability for volunteer treasurers.

Pillar 2: Payment Security & BECS Compliance

BECS Direct Debit & PCI-DSS Compliance

Financial transactions across SponsorLink are processed under strict Australian banking standards:

Stripe Connect Payouts: Automated monthly club disbursements are executed securely via Stripe Connect Express, maintaining automated identity verification (KYC/AML).
BECS Direct Debit Guarantee: Subscription processing for business partners complies with Australian Direct Debit System (BECS) rules and Australian Consumer Law guarantees.
Level 1 PCI-DSS Tokenization: SponsorLink servers never store or transmit raw credit card numbers or banking passwords. All payment details are tokenized via Stripe PCI-DSS Level 1 certified vaulting.

Pillar 3: ACMA Anti-Spam & Messaging

ACMA Spam Act 2003 Compliance

All automated notifications, digital pass updates, and proximity alerts operate under strict Australian Communications and Media Authority (ACMA) rules:

Registered Alpha Sender ID: Automated SMS notifications use our registered Sender ID SponsorLink with ACMA compliant routing.
Explicit Consent & Opt-Out: Members explicitly consent to mobile alerts upon joining. Every SMS notification includes clear opt-out instructions (replying STOP or via profile preference toggles).
No Cold Marketing Blasts: SponsorLink prohibits unsolicited cold SMS marketing. Alerts are triggered exclusively by proximity or member-initiated actions.

Pillar 4: Data Privacy & Security

Australian Privacy Principles (APPs)

Our data management policies strictly comply with the Privacy Act 1988 (Cth) and Australian Privacy Principles:

Data Minimization: We collect only essential profile information necessary to generate digital member passes and disburse sponsorship splits.
Encryption Standards: Data in transit is secured with TLS 1.3 encryption; persistent databases use AES-256 encryption at rest.
Right to be Forgotten: Members and business partners can request permanent data deletion at any time via automated profile settings or contacting [email protected].