VenueGuide.au Privacy Policy

1. Information We Collect

Information you provide

• Email address and name (when you create an account)
• Enquiry details (name, email, event date, message — when you enquire about a venue)
• Venue listing information (if you claim or list a venue)

Information collected automatically

• IP address and approximate location
• Browser type, device, and operating system
• Pages visited and time spent on VenueGuide.au
• Referring website

Cookies

We use cookies for authentication (keeping you signed in) and basic analytics. We do not use advertising cookies or tracking pixels from third-party ad networks. Authentication cookies are set by Supabase and are essential for the sign-in experience.

2. How We Use Your Information

• To provide the venue search and shortlist features
• To deliver your enquiries directly to venue operators
• To maintain your account and saved preferences
• To send transactional emails (account confirmations, enquiry receipts)
• To improve the service based on aggregate usage patterns
• To comply with Australian legal obligations

We will never send you marketing emails unless you explicitly opt in via a separate checkbox. Enquiry consent and marketing consent are always separate choices on VenueGuide.au.

3. Who We Share Your Data With

• Venue operators — only the details you submit in an enquiry form, only to the specific venue you enquired about
• Supabase — database and authentication hosting (supabase.com/privacy)
• Cloudflare — website delivery and security (cloudflare.com/privacypolicy)

We do not sell your personal information. We do not share it with advertisers. We do not use it for purposes you have not consented to.

4. International Data Transfer

Our database is hosted by Supabase in the Asia-Pacific region (ap-northeast-1, Tokyo). Our website is delivered via Cloudflare's global edge network. Your data may be processed in countries outside Australia. We ensure appropriate safeguards are in place through our service providers' data protection agreements.

5. Data Security

We protect your information with:

• HTTPS encryption on all pages
• Secure HTTP headers (XSS protection, clickjacking prevention, content-type enforcement)
• Row-level security policies on all database tables
• Authentication tokens stored securely in HTTP-only cookies
• No plaintext passwords stored — all passwords are hashed by Supabase Auth

6. Data Retention

• Account data: retained while your account is active, deleted within 30 days of account deletion
• Enquiry records: retained for 2 years for dispute resolution, then anonymised
• Analytics data: retained for 26 months in aggregate form

7. Your Rights (Australian Privacy Principles)

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Opt out of any marketing communications
• Lodge a complaint with the Office of the Australian Information Commissioner (oaic.gov.au)

To exercise these rights, email privacy@venueguide.au.

8. Venue Data Sources

Venue listings on VenueGuide.au are sourced from publicly available information including venue websites, tourism directories, and industry listings. All imported data is marked with a status badge ("Unverified import", "Verified", "Claimed") so users can assess data quality. Venue operators can claim and update their listings at any time. We do not scrape competitor directories, social media, or login-protected pages.

9. Children

VenueGuide.au is not intended for users under 16. We do not knowingly collect information from children.

10. Changes to This Policy

We may update this privacy policy. Material changes will be communicated via email to registered users. The "last updated" date at the top reflects the most recent revision.

11. Contact

Privacy questions or data requests:
privacy@venueguide.au

VenueGuide.au is operated by Tayne Rongo
ABN 40 300 987 116
Perth, Western Australia

Office of the Australian Information Commissioner:
oaic.gov.au