Privacy Policy

1. Introduction

Kids Birthday Party Venues ("we", "our", "us") operates party-venues.com.au (the "Site"), an online directory of children's birthday party venues in New South Wales, Australia.

We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose and safeguard your personal information (as that term is defined in the Privacy Act 1988 (Cth)) when you use the Site.

By using the Site, you acknowledge this Policy and, where required, consent to the handling of your personal information as described below. This Policy should be read together with our Terms of Service.

2. What we collect

2.1 Information you provide

When you use our contact forms or enquiry services, we may collect:

• Contact details: name, email address, phone number
• Party details: preferred party date, number of guests, child's age
• Message content: any information you include in your enquiry

2.2 Information collected automatically

When you visit the Site, we automatically collect:

• Device and network information: IP address (used to derive approximate location and then discarded by our analytics tools), browser type, operating system
• Online identifiers: cookie IDs and similar identifiers used for analytics and advertising (see Section 9)
• Usage data: pages viewed, time on page, clicks and navigation behaviour, session duration
• Approximate location: inferred from IP address and/or device settings (city/region level)
• Referral information: the website or source that referred you

2.3 Cookies and similar technologies

We use cookies and similar technologies to operate the Site, remember preferences and analyse usage. You can manage cookies via your browser settings (see Section 9).

3. Third-party services we use

We use reputable providers to help deliver the Site. These providers may process limited personal information in accordance with their own privacy policies:

3.1 Google Analytics

Used to understand how visitors use the Site (e.g. pages visited, session duration, referring sites). Google may process data on servers outside Australia. Learn more in Google's Privacy Policy and Ads/Analytics settings. You can also install the Google Analytics Opt-out Browser Add-on.

3.2 Google AdSense

Used to display advertisements. AdSense uses cookies to serve ads based on your visits to this and other sites. You can manage ad personalisation in Google Ads Settings.

3.3 Google Maps / Places API

Used to display maps and venue locations. When you interact with embedded maps, Google may collect information in accordance with its policies.

3.4 Supabase (hosting/database)

We use Supabase to host the Site database. Venue information and your enquiries may be stored on Supabase infrastructure in data centres that may be located outside Australia (see Section 11 on cross-border disclosure).

3.5 Resend (email service)

When you submit a contact form, we send notification emails via Resend. Your contact details and message content pass through Resend's systems.

Attribution note: Maps/places data is provided by Google and used under licence. © Google.

4. How we use your information

We use personal information to:

• Facilitate enquiries and connect you with venues you ask about
• Respond to questions and provide customer support
• Operate, maintain and improve the Site and user experience
• Analyse usage trends and performance
• Send venue information or updates where you have opted in (you can unsubscribe at any time)
• Display relevant advertising via AdSense
• Comply with legal obligations and protect our rights, users and venues

5. When we disclose information

We do not sell or rent your personal information. We may disclose it:

• To venues you explicitly enquire about (we share your contact details and message so they can respond)
• To service providers (e.g. Google, Supabase, Resend) who help us operate the Site, under appropriate safeguards
• For legal reasons (e.g. a valid court order, regulatory request, to prevent or investigate wrongdoing)
• In a business transfer (e.g. merger, acquisition or sale of assets), subject to this Policy continuing to apply

6. Legal bases / consent (Spam Act)

While Australian law does not require us to list EU-style "legal bases", we aim to be transparent:

• We handle enquiries and support to provide the Site you request
• Analytics and ads are used to operate and improve the Site and keep it free
• Direct marketing (if any) is sent with your consent or as otherwise permitted by law
• We comply with the Spam Act 2003 (Cth) and include an unsubscribe option in marketing emails

7. Security

We use reasonable technical and organisational measures to protect personal information, including:

• HTTPS encryption in transit
• Access controls and authentication
• Secure database hosting (Supabase)
• Regular updates and reviews

However, no method of transmission or storage is completely secure. If we experience an eligible data breach, we will comply with the Notifiable Data Breaches scheme under the Privacy Act.

8. Your privacy rights (APPs)

Under the Australian Privacy Principles (APPs), you can:

• Access the personal information we hold about you
• Request correction if it is inaccurate, out-of-date, incomplete, irrelevant or misleading
• Withdraw consent to marketing at any time (use the unsubscribe link or contact us)

We will respond within a reasonable period and may require identity verification. If we decline a request (e.g. due to legal obligations), we'll explain why.

EU/UK visitors: If you're located in the EU/UK, you may also have rights under the GDPR/UK GDPR (e.g. erasure, objection, portability). Contact us and we will seek to honour those rights where applicable.

9. Managing cookies and online identifiers

You can control cookies by:

• Adjusting your browser settings to block or delete cookies
• Using Google Analytics Opt-out and Google Ads Settings to manage analytics/ads personalisation

Disabling cookies may affect Site functionality.

10. Children's privacy

The Site is intended for adults (18+) planning children's parties. We do not knowingly collect personal information from children under 15. If you are a parent/guardian and believe a child has provided personal information, please contact us; we will promptly delete it.

11. Overseas disclosures (cross-border)

Our service providers (e.g. Google, Resend and in some cases Supabase) may process personal information on servers located outside Australia (including the United States and other jurisdictions). Before disclosing personal information overseas, we take reasonable steps to ensure the recipient will handle it in a manner consistent with the APPs, or we obtain your consent where required.

By using the Site, you consent to such cross-border transfers as described in this Policy.

12. Retention

We retain personal information only as long as needed for the purposes in this Policy or as required by law. As a guide:

• Contact form submissions: up to 2 years for customer service and record-keeping
• Analytics data: retained per Google's settings and policies

When information is no longer required, we take reasonable steps to de-identify or securely destroy it.

13. Your privacy complaint process

If you have a privacy concern or wish to make a complaint, please contact us first (Section 15). We will investigate and respond within a reasonable time.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Phone: 1300 363 992

14. Changes to this Policy

We may update this Policy to reflect changes to our practices or legal requirements. For material changes, we will post a notice on the Site and update the "Last updated" date. Please review this Policy periodically.

15. Contact us