PRIVACY POLICY

Bundaleer Rainforest Gardens Pty Ltd
Effective Date: 1/04/2026

  1. INTRODUCTION

Bundaleer Rainforest Gardens Pty Ltd (“Bundaleer”, “we”, “us”, “our”) is committed to protecting personal information and complying with the Privacy Act 1988 (Cth), including the Australian Privacy Principles (APPs).

This Privacy Policy explains how we collect, use, disclose, store, and protect personal information in connection with:

  • Wedding and event bookings
  • Supplier and contractor access
  • Website usage and enquiries
  • General business operations

By interacting with Bundaleer, you acknowledge and accept this Privacy Policy.

  1. WHAT INFORMATION WE COLLECT

2.1 Client Information

  • Full names (including couple details)
  • Contact information (email, phone, address)
  • Event details (date, schedule, guest numbers, preferences)
  • Payment and billing details (processed via third-party providers)

2.2 Supplier Information

  • Business name and contact details
  • Public liability insurance certificates
  • Licences and qualifications
  • Vehicle and delivery details

2.3 Website & Digital Data

  • IP address
  • Device/browser data
  • Website interactions and analytics
  • Enquiry form submissions

2.4 Event Media

We may collect or receive:

  • Photographs, videos, and event-related content
  • Social media tags or submissions
  • Media supplied by clients or third parties

2.5 Sensitive Information

We only collect sensitive information (e.g. accessibility requirements) where necessary and with consent.

  1. HOW WE COLLECT INFORMATION

We collect information through:

  • Website enquiries and forms
  • Booking agreements and correspondence
  • Supplier onboarding and communications
  • CCTV and security systems (see Section 10)
  • Third-party platforms (e.g. payment systems, CRM tools)

Where reasonable, information is collected directly from the individual.

  1. PURPOSE OF COLLECTION

We collect and use personal information to:

  • Manage bookings and event delivery
  • Communicate with clients and suppliers
  • Process payments and financial records
  • Ensure site safety, compliance, and security
  • Improve our services and website
  • Meet legal and regulatory obligations

We do not sell personal information.

  1. DISCLOSURE OF INFORMATION

We may disclose personal information to:

  • Payment providers (e.g. Stripe or equivalent)
  • Accounting platforms (e.g. Xero or equivalent)
  • IT, hosting, and CRM providers
  • Legal, financial, and professional advisers
  • Government or regulatory authorities where required

Supplier Independence Clause

Bundaleer:

  • Does not share client personal information with third-party suppliers engaged directly by clients, except where strictly necessary for safety or coordination
  • Does not control or supervise supplier data handling practices
  • Accepts no responsibility for privacy compliance of independent suppliers

Clients and suppliers acknowledge that all third-party suppliers operate independently.

  1. OVERSEAS DISCLOSURE

We may use third-party providers that store or process data overseas.

Where this occurs, we take reasonable steps to ensure compliance with Australian privacy laws.

  1. DATA STORAGE AND SECURITY

We take reasonable steps to protect personal information, including:

  • Secure systems and encrypted platforms
  • Restricted access controls
  • Password-protected environments
  • Use of reputable third-party providers

However, no system is completely secure.

  1. DATA BREACHES (NOTIFIABLE DATA BREACHES SCHEME)

In the event of a data breach involving personal information that is likely to result in serious harm, Bundaleer will:

  • Assess the breach promptly
  • Take steps to contain and mitigate the breach
  • Notify affected individuals where required
  • Notify the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme
  1. ACCESS AND CORRECTION

Individuals may request access to, or correction of, their personal information.

Requests should be made in writing and will be handled within a reasonable timeframe.

  1. CCTV AND SURVEILLANCE

Bundaleer uses CCTV and surveillance systems on the property for:

  • Security and crime prevention
  • Safety monitoring
  • Incident investigation

By entering the premises, individuals acknowledge and consent to:

  • Being recorded by CCTV systems
  • The use of footage for security, legal, or compliance purposes

CCTV footage is:

  • Stored securely
  • Retained for a reasonable period
  • Disclosed only where necessary (e.g. law enforcement)
  1. EVENT MEDIA & MARKETING USE

11.1 General Use

Bundaleer may use event-related media (including photographs and videos) for:

  • Website content
  • Social media (e.g. Instagram)
  • Marketing and promotional materials

11.2 Consent Position (Important)

  • Clients are responsible for obtaining consent from guests, photographers, and vendors
  • Suppliers (e.g. photographers/videographers) must comply with applicable privacy laws

11.3 Opt-Out

Clients may request that identifiable personal images not be used by providing written notice prior to the event.

  1. COOKIES AND ANALYTICS

Our website may use cookies and analytics tools to:

  • Improve user experience
  • Monitor website performance
  • Support marketing activities

Users can disable cookies via browser settings.

  1. DIRECT MARKETING

We may contact individuals regarding:

  • Booking enquiries
  • Event updates
  • Relevant services

Users may opt out at any time.

  1. RETENTION OF INFORMATION

We retain personal information only as long as necessary for:

  • Business operations
  • Legal compliance
  • Dispute resolution
  1. THIRD-PARTY LINKS

Our website may contain links to third-party websites.

We are not responsible for their privacy practices.

  1. LIABILITY LIMITATION

To the maximum extent permitted by law:

  • Bundaleer is not liable for any loss, damage, or claim arising from the acts or omissions of third-party suppliers
  • Bundaleer is not responsible for how third parties collect, use, or store personal information
  • Any exchange of personal information between clients and suppliers occurs at their own risk

This clause is fundamental to Bundaleer’s role as a venue provider only.

  1. INTERACTION WITH OTHER TERMS

This Privacy Policy operates in conjunction with:

  • Booking Terms & Conditions
  • Supplier Terms & Conditions
  • Venue Policies

In the event of inconsistency, these documents are to be read together to the fullest extent permitted by law.

  1. COMPLAINTS

If you believe your privacy has been breached, you may contact us.

We will investigate and respond within a reasonable timeframe.

You may also lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

  1. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time.

The latest version will always be available on our website.

  1. CONTACT DETAILS

Bundaleer Rainforest Gardens Pty Ltd

Privacy Office

59 Bundaleer Rd, Brookfield, Queensland, 4069