canberra.beer Privacy Policy

How we protect your privacy and handle your personal information.

Last updated: July 2026

1. Overview

This website is an informational site operated from Australia.

Visitors can browse the public parts of this website without logging in. We do not seek to identify ordinary visitors.

Some personal information may be processed where necessary to operate, secure, and deliver the website, or where you choose to use optional features such as newsletter signup, location-based search, submission forms, book-exclusive content, or brewery dashboard access.

We believe websites should function without unnecessary data collection, and this site is designed with that principle in mind.

2. Data We Process

Technical and Request Data

When you visit this website, certain technical information is processed automatically by our hosting and security providers. This may include:

  • IP address
  • Browser type and version
  • Device and operating system
  • Pages visited and request timestamps
  • Referring website (if applicable)

We do not use this information to identify ordinary visitors.

Newsletter and Forms

If you subscribe for launch notifications or updates, we collect the email address you provide and send it to Brevo so it can be stored as a mailing list contact.

If you submit a brewery application or event submission form, we collect the details you provide in that form, such as names, contact details, brewery or event information, website links, descriptions, consent choices, and whether you asked to receive a copy. These submissions are sent through Brevo so they can be delivered to us by email and may be stored in our email account while we review and respond to them.

Brewery Dashboard Access

Most visitors can use this website without logging in.

Some brewery owners or authorised representatives may be given access to a dashboard to manage their brewery listing. Dashboard access is not available for public self-registration.

To support brewery dashboard access, we may collect and store:

  • name
  • email address
  • the brewery or breweries the person is authorised to manage

We use this information only to provide access to the relevant brewery listing, manage permissions, communicate about the listing, and protect the integrity of the website.

Brewery dashboard access may be authenticated through Cloudflare Access. In that case, Cloudflare may provide the authenticated email address to this website so we can check permissions.

We do not use brewery dashboard access information for advertising, profiling, or sale to third parties.

Access can be removed if it is no longer required, if the person is no longer authorised to manage the listing, or if we reasonably need to protect the accuracy or security of the website.

Dashboard, Membership and Billing Records

Where relevant, we may keep administrative records for brewery listings, memberships, invoices, receipts, reminders, permissions, and related communications. These may include brewery contact details, authorised dashboard users, membership status, invoice or receipt numbers, payment status, notes, reminder history, and related timestamps.

Images uploaded through the dashboard, such as brewery logos, gallery images, or map marker assets, may be stored in Cloudflare R2 and served from the configured image delivery domain.

Billing and membership records are used only to manage memberships, issue or track invoices and receipts, send billing communications, maintain financial records, and administer the website.

We do not collect or store card numbers or bank account details through this website.

3. Hosting, Delivery and Security

This website is hosted and delivered via Cloudflare, Inc.

Cloudflare provides hosting, content delivery (CDN), performance optimisation, security services, serverless functions, database storage, and media storage through services such as Cloudflare Pages, Pages Functions, D1, and R2.

For these services, Cloudflare acts as a service provider or processor that handles data on our behalf to operate and secure the website.

As part of these services, Cloudflare may process request and technical data to:

  • Protect the site from malicious traffic (e.g. bots, abuse, DDoS attacks)
  • Ensure reliable and efficient delivery of content
  • Enforce security rules and access controls

These measures are designed to distinguish legitimate users from automated or malicious requests. They are not used by us to track ordinary visitors or build behavioural profiles.

Cloudflare may process data on servers located in multiple jurisdictions.

For more information, see Cloudflare's Privacy Policy.

4. Analytics

We do not use analytics tools that track individual users or create behavioural profiles.

We may use aggregated hosting or security metrics provided by Cloudflare to understand site performance, errors, and abuse patterns. We do not use these metrics to identify individual visitors.

We do not use advertising or remarketing trackers.

5. Cookies

This website does not use cookies for analytics or advertising purposes.

If you unlock book-exclusive content, we set a necessary functional cookie to remember that this browser has entered the exclusives password. This cookie does not identify you personally, is used only to maintain access to the book-exclusive content, and expires after about 30 days.

If you access a protected dashboard or restricted area, Cloudflare Access may set necessary authentication cookies to confirm that you are signed in and authorised to access that area.

Cloudflare may also use necessary security cookies, or temporary challenge mechanisms when checking whether requests are legitimate. These mechanisms are used for authentication, security, and abuse prevention, not analytics, advertising, or marketing.

6. How Data Is Used

Any data processed through this website is used only to:

  • Operate and deliver the website
  • Maintain security and prevent abuse
  • Ensure performance and reliability
  • Respond to newsletter, application, event, billing, or dashboard-related requests
  • Manage brewery listings, memberships, permissions, invoices, receipts, and audit history

We do not use personal information for advertising, behavioural profiling, or sale to third parties.

7. Data Sharing

We do not sell personal information.

We only disclose or make personal information available to service providers where reasonably necessary to operate the website, provide requested functionality, send communications, protect the service, or meet administrative and record-keeping needs. Depending on the feature used, these providers may include:

  • Cloudflare, Inc. for hosting, delivery, security, access control, serverless functions, database storage, and media storage
  • Brevo for newsletter contacts, form delivery, billing emails, and related email communications
  • Proton Mail for receiving, storing, and responding to email communications
  • OpenStreetMap tile servers and related mapping infrastructure when map pages are loaded
  • Bunny Fonts when the timeline page requests timeline font files
  • Shopify or another external shop platform if you choose to access a linked online store

Some service providers may process data outside Australia. We aim to use reputable providers and to limit disclosure to what is reasonably necessary for the relevant service.

8. Third-Party Services and External Features

We may use third-party services for additional functionality. These are only relevant when you choose to use the relevant feature or load a page where that feature appears.

Email / Newsletter

If you subscribe to a newsletter, your email address will be sent to Brevo and stored there as a mailing list contact so we can send launch notifications and updates. We do not use Brevo for advertising or behavioural profiling. You can unsubscribe from the mailing list at any time.

Brewery Application Form

If you submit an application to list your brewery on this website, your submission details (such as brewery name, contact details, and application content) are processed by Brevo so they can be delivered to us by email.

We use this information only to assess listing requests and to contact you about your application. Delivered emails may be stored in our email account while we review and respond to the submission. If you choose the optional "email me a copy" setting, a separate confirmation email copy is also sent to your submitted email address.

Event Submission Form

If you submit an event through the Events page, your details (such as event information and contact details) are processed by Brevo so they can be delivered to us by email.

We use this information only to review event listing requests and to contact you about your submission. Delivered emails may be stored in our email account while we review and respond to the submission. If you choose the optional "email me a copy" setting, a separate confirmation email copy is also sent to your submitted email address.

Knowledge Gaps Form

If you submit a lead through the Knowledge Gaps submission page, your details (such as name, email, references, and submission content) are processed by Brevo so they can be delivered to us by email.

We use this information only to review research leads, verify historical context where possible, and contact you about your submission where needed. Delivered emails may be stored in our email account while we review and respond to the submission. If you choose the optional "email me a copy" setting, a separate confirmation email copy is also sent to your submitted email address.

Bot Protection (Cloudflare Turnstile)

To protect forms from spam and abuse, we use Cloudflare Turnstile. Turnstile may process technical browser and request metadata to distinguish human visitors from automated traffic.

Maps and Location Search

We use Leaflet JS, which is hosted locally on this website, to display interactive maps. Map tiles are loaded from OpenStreetMap tile servers.

When a page containing a map is loaded, your browser makes requests to external servers in order to display the map. These requests may include your IP address and standard technical information required to deliver web content. The services contacted include:

  • OpenStreetMap tile servers (tile.openstreetmap.org) — provide map tile imagery
  • OpenStreetMap — underlying map data contributors and dataset

If you choose a nearby-search feature such as Use My Location, your browser will ask for permission before sharing your location. If you allow it, the latitude and longitude provided by your browser are sent with that search request so we can find breweries near you and, on the map page, zoom the map closer to your area.

We do not use this location data for advertising or profiling, and we do not intentionally store it beyond what is required to process the request and operate the service.

TimelineJS and Bunny Fonts

We use TimelineJS by Knight Lab to display the interactive timeline on this website. The TimelineJS library (JavaScript and CSS) is self-hosted on this site.

The timeline's fonts are served via Bunny Fonts (fonts.bunny.net). When the timeline page is loaded, your browser requests font files from fonts.bunny.net. This request may include your IP address and standard technical request data.

Linked Online Stores

Some merch links take you to the Canberra Beer Shopify store. Others take you to a brewery's own merch site or another external ecommerce service.

Purchases are completed on those external sites, not on this website. Any customer, payment, shipping, order, or account information you provide there is handled under that site's own terms and privacy policy.

These services operate independently and have their own privacy policies. We recommend reviewing them before providing personal information or using features that connect to those services:

9. Data Retention

We do not store personal information directly for ordinary browsing of the public website.

Newsletter contact details are kept in Brevo while you remain subscribed or while we reasonably need to manage launch notifications and updates. You can unsubscribe or ask us to remove your email address.

Brewery application and event submission details are kept for as long as reasonably needed to review, respond to, and administer the submission.

Brewery dashboard access details are kept while access is required to manage a brewery listing. We may delete or disable dashboard access details when access is no longer needed, when the person is no longer authorised to manage the listing, or upon a valid request where we are reasonably able to do so.

Dashboard revision history, permissions, membership records, invoices, receipts, payment records, reminder logs, and related administrative records may be retained while needed for site integrity, accounting, record-keeping, dispute resolution, security, or legal purposes.

Uploaded images and media are kept while they are used for the relevant brewery listing, map, dashboard, or site content, unless removed or replaced.

Any data processed as part of hosting, delivery, or security is retained according to the policies of our service providers.

10. Jurisdiction and Applicable Laws

This website is operated from Australia. We aim to handle personal information consistently with the Australian Privacy Principles (APPs), where applicable and as a matter of good practice.

If you are located in another jurisdiction (such as the European Economic Area or United Kingdom), you may have additional rights under applicable data protection laws.

11. Your Rights

Depending on your location, you may have rights in relation to your personal information. These may include:

  • The right to access data held about you
  • The right to request correction or deletion
  • The right to object to or restrict certain processing

For personal information we directly hold or can reasonably access, we will take reasonable steps to assist with legitimate access, correction, deletion, or objection requests, and to direct you to relevant service providers where appropriate.

You may also contact us if you wish to complain about how personal information has been handled. We will consider the issue and respond in a practical, privacy-respecting manner.

If you are not satisfied with our response, you may be able to contact the Office of the Australian Information Commissioner.

12. Contact

For privacy-related enquiries, please contact:

privacy@canberra.beer

13. Updates

This policy may be updated from time to time to reflect changes in the website, services used, or applicable requirements.