​

This Privacy Policy applies to the use of  wonderandwhimsy.com.au operated by Wonder and Whimsy Tamborine Mountain, ABN: 29 140 659 867 of Tamborine Mountain, Queensland, Australia.

The Website provides art and craft sessions for children aged 3 to 12 years. We are committed to protecting the privacy of parents, guardians, and the children who participate in our sessions.

This Policy explains how we collect, hold, use, and disclose personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and all other applicable Queensland and Commonwealth laws. By using the Website or providing us with personal information, you consent to the practices described in this Policy.

 

1. Personal Information We Collect

We may collect the following types of personal information:

• Parent/guardian details: name, postal address, email address, telephone number, and emergency contact details

• Child details: full name, date of birth, age, gender, and any health or allergy information you voluntarily provide for the safe conduct of sessions

• Payment information: credit or debit card details (processed securely by third-party payment providers; we do not store full card numbers)

• Website usage data: IP address, browser type, device information, pages visited, and session information collected through cookies and similar technologies

• Other information: any information you choose to provide (e.g. booking forms, enquiries, feedback)

We do not knowingly collect personal information directly from children under 18 without verifiable consent from a parent or legal guardian.

By providing personal information about a child, you confirm that you are the child’s parent or legal guardian and consent to the collection and handling of that information as described in this Policy.

 

2. How We Collect Personal Information

We collect personal information:

• Directly from you when you register, book a session, submit a form, or contact us

• Automatically via the Website (cookies and analytics tools)

• From third parties where you have authorised the disclosure or where required/permitted by law

 

3. Purposes of Collection and Use

We collect, hold, use, and disclose personal information only for the following purposes:

• To provide and manage our art and craft sessions

• To process bookings, payments, and confirmations

• To communicate important information (e.g. session updates, safety notices)

• To maintain records and improve our services and Website

• To comply with legal obligations

• To respond to enquiries or complaints

We do not sell, rent, or trade personal information.

We do not use personal information for advertising, profiling, or targeted marketing.

If we ever send communications that could be considered direct marketing, you may opt out at any time by contacting us.

 

4. Disclosure of Personal Information

We may disclose personal information to:

• Service providers (e.g. payment processors, email platforms, IT providers, venue operators)

• Professional advisers (lawyers, accountants)

• Government or regulatory authorities where required by law

All third parties are required to keep information confidential and use it only for authorised purposes.

 

5. Overseas Disclosure

Some of our service providers may store or process personal information overseas (for example, in the United States or other countries where cloud or payment systems operate).

We take reasonable steps to ensure that any overseas recipients handle personal information in accordance with the Australian Privacy Principles.

 

6. Security of Personal Information

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access or disclosure. These measures include:

• Secure servers (where practicable, located in Australia)

• Encryption of data in transit

• Access controls limiting staff access

• Regular security reviews

If a data breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by law.

 

7. Children’s Privacy

Our services are designed for children aged 3–12 years, but all information is collected from parents or guardians only.

We do not allow children to submit personal information without parental consent. Parents are responsible for supervising their child’s use of the Website.

Health or allergy information is treated as sensitive information and handled in accordance with applicable privacy laws.

 

8. Photos and Media

We will not photograph or record children, or use any images or videos for promotional purposes, without prior written consent from a parent or legal guardian.

 

9. Cookies and Analytics

We use:

• Essential cookies to enable bookings and Website functionality

• Analytics tools (e.g. website analytics services) to understand usage patterns

These tools generally collect aggregated, non-identifiable information.

You can disable cookies via your browser settings, but this may affect Website functionality.

 

10. Retention of Personal Information

We retain personal information only as long as necessary for:

• Providing services

• Legal and regulatory obligations (e.g. taxation, safety requirements)

When no longer required, information is securely destroyed or de-identified.

 

11. Access, Correction, and Complaints

You have the right to:

• Request access to personal information

• Request corrections

• Make a privacy complaint

To do so, contact us using the details below. We will respond within a reasonable time (generally within 30 days).

If you are not satisfied, you may contact the Office of the Australian Information Commissioner (OAIC):
https://www.oaic.gov.au

 

12. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on the Website with the updated date.

Continued use of the Website indicates acceptance of the revised Policy.

 

13. Contact Us

For any privacy-related enquiries or requests, please contact:

Phone: 0439704533

Email: wonderandwhimsy@outlook.com.au
Postal Address: Shop 2 104 Long Rd, Tamborine Mountain QLD, 4272

(At the top end of Galley Walk)

 

 

By using our Website and services, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy is governed by the laws of Queensland and the Commonwealth of Australia.