Privacy Policy

1. Scope and how this policy works

This policy applies to personal information handled by Back 2 Basics Traditions in Australia, whether collected online, in person, over the telephone, by email or message, through an ecommerce or payment platform, through a participant form, or in connection with an event or transaction.

It should be read with any collection notice, checkout notice, booking form, adult participant waiver, minor participant form, event notice or other privacy notice given at or before collection. If a specific notice explains a particular collection in more detail, both documents apply.

2. Personal information we may collect

• identity and contact details, including first and last name, postal address, email address, mobile number and emergency contact details;
• booking-owner and attendee information, including the first name, last name, email and mobile number of each guest included in a booking;
• order, booking, invoice, transaction, refund, transfer and communication records;
• age category and, where relevant, proof-of-age or identity information required for alcohol service, security, fraud prevention or legal compliance;
• participant information relevant to a cooking experience, including dietary requirements, allergies, intolerances, accessibility needs, relevant health or medical information, emergency-response information and responsible-adult details for minors;
• website, device and technical information generated through forms, cookies, logs, analytics, security tools and similar technologies;
• photographs, video, audio recordings, testimonials, reviews and other event or customer content;
• incident, safety, complaint, insurance, legal and regulatory records; and
• marketing preferences, consent records and unsubscribe records.

We do not seek to collect personal information that is not reasonably necessary for our functions or activities. Please do not provide general medical history or other sensitive information that is unrelated to safe participation, food safety, accessibility, emergency response or another legitimate purpose we identify.

3. Sensitive information, allergies and health information

Information about allergies, medical or health conditions and some accessibility matters may be sensitive information. Where consent is required by law, we seek express consent through the relevant booking, participant or collection process before collecting or using that information.

We use relevant health, allergy, dietary, accessibility and emergency information only for legitimate purposes such as assessing whether participation can be safely accommodated, food-safety and allergen management, reasonable adjustments, incident and emergency response, insurance or legal matters, and administering the experience.

Where reasonably necessary for those purposes, relevant information may be disclosed to personnel or contractors involved in the experience, emergency services, health professionals, insurers, advisers or regulators. We do not place participant health information in a shared participant signature schedule.

4. Children and young people

A participant under 18 must use the applicable minor participant process. The Privacy Act does not set a single age at which a young person can make their own privacy decisions. Where applicable, we consider the young person’s maturity and capacity and may seek consent from a parent or guardian, from the young person, or from both.

Where a parent, guardian or authorised adult gives us information about a minor, that person confirms that they have lawful authority to provide it. We may still involve a young person in decisions affecting their information where appropriate.

5. How we collect personal information

We may collect information directly when you browse or use our website, complete a form, enquire, order, book, pay, request a refund or transfer, sign a participant document, attend an event, communicate with us, enter a promotion, subscribe to marketing, or otherwise deal with us.

We may also receive information from a booking owner or person acting for you, a parent or guardian, an authorised supervising adult, our website and ecommerce systems, payment providers, delivery providers, photographers or videographers, advisers, insurers, regulators, fraud-prevention services or other persons where collection is lawful and reasonably necessary.

At or before collection, we may give a short collection notice explaining the purpose of collection, consequences of not providing required information, usual disclosures and other matters relevant to that particular collection.

6. Purposes for which we handle information

• process and administer orders, bookings, payments, refunds, credits and transfers;
• communicate with booking owners and attendees before, during and after an order or event;
• plan menus, ingredients, staffing, venue operations and participant allocations;
• assess dietary, allergy, accessibility, safety, supervision and emergency requirements;
• provide reasonable adjustments where required and reasonably practicable;
• verify identity or age and comply with liquor-licensing or other legal requirements;
• protect health, safety, food hygiene, our premises, participants, staff and the public;
• capture and use photography, video and audio as described below and in participant documents;
• process complaints, incidents, insurance matters, disputes and legal claims;
• operate, secure, analyse and improve our website, ecommerce, communications and business systems;
• conduct marketing where we have the required consent or other lawful authority; and
• comply with taxation, accounting, food, liquor, consumer, privacy, safety and other legal obligations.

7. Payments and payment information

We accept or may accept payment through methods and providers we approve from time to time, including without limitation WooCommerce checkout, Square, Stripe, PayPal, Apple Pay, credit and debit cards, digital wallets, payment links, invoices, direct bank transfer, EFT and direct deposit. We may add, replace or discontinue payment methods.

Card and wallet credentials are generally handled by the relevant payment processor, bank, card network or wallet provider. We do not intentionally retain complete payment-card credentials where they are processed by a third-party payment provider. We may retain transaction identifiers, payment status, amounts, refunds and other records required for accounting, fraud prevention, support or legal compliance.

Third-party payment providers handle information under their own privacy notices and security arrangements in addition to any obligations that apply to us.

8. Photography, video and audio – condition of attendance

Subject to applicable law and the specific participant authorisation, we may capture a participant’s or attendee’s image, likeness, appearance, voice and participation and use, reproduce, publish, communicate, display, distribute, store, archive, edit, crop, adapt, combine and caption that material, without further payment or approval, in any format or medium now known or developed in the future.

The material may be used for any lawful business, commercial, advertising, promotional, editorial, educational, archival, publicity or communications purpose that Back 2 Basics Traditions determines, including our products, services, cooking experiences, events, markets, website, social media, email, advertising, printed material, publicity, media relations and future campaigns. We may engage photographers, videographers, designers, agencies, publishers, platforms and other service providers to process or publish the material for those authorised purposes.

If applicable privacy law gives a person a right to withdraw consent for future handling, we will deal with a valid withdrawal in accordance with that law. Withdrawal before an event means the mandatory attendance condition is no longer met and we may refuse participation. Withdrawal does not necessarily require us or third parties to retrieve or undo uses lawfully completed before the withdrawal, and some published or printed material may be impossible to recall.

9. Direct marketing and electronic messages

We send commercial electronic messages only where we have consent or another lawful basis. Marketing consent is separate from the purchase of products or attendance at an experience unless a lawful exception applies.

Commercial messages identify Back 2 Basics Traditions, include current contact details and provide a functional unsubscribe method. We action valid unsubscribe requests within the period required by the Spam Act 2003 (Cth). We keep consent and unsubscribe records so that preferences can be respected.

Transactional and safety communications about an order, booking, payment or event may still be sent where necessary. If a service message also contains promotional material, we treat it as a commercial message where the Spam Act requires that result.

10. Cookies, analytics and online technologies

Our website may use cookies, pixels, logs, analytics, security and similar technologies to operate the website, maintain security, remember preferences, understand usage and improve content and conversion performance. A separate cookie or collection notice may provide more detail about specific tools.

Where information generated by these technologies identifies or reasonably identifies a person, we treat it as personal information. Where consent or another notice is required by law, we will seek or give it through the relevant website process.

11. Who we may disclose information to

Depending on the transaction, we may disclose relevant personal information to service providers involved in ecommerce, payments, banking, delivery, forms, hosting, cloud storage, email, marketing, analytics, social media, photography, video, IT security, professional advice, insurance and event administration; to emergency services and health professionals; to regulators, courts, law-enforcement agencies or other persons where authorised or required by law; and to a booking owner, parent, guardian or responsible adult where reasonably necessary and lawful.

Current or potential platforms may include WooCommerce, Square, Stripe, PayPal, Apple Pay and related banks, card networks and infrastructure, but this list is not exhaustive and may change as our systems change.

12. Overseas processing and disclosure

Some technology, payment, cloud, email, analytics, social-media and other service providers may store, process or permit access to personal information outside Australia, including in the United States and potentially other countries in which those providers or their subprocessors operate. Provider locations and infrastructure can change.

Where the Privacy Act applies and an overseas disclosure occurs, we take reasonable steps required by APP 8 or rely on an applicable exception. Where practicable, collection notices or provider notices identify material overseas handling and countries relevant to a particular service.

13. Security, retention and data breaches

We take reasonable steps appropriate to the information and our business to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. Measures may include access controls, strong authentication, limited permissions, reputable hosted services, payment-provider segregation, backups, device security and incident-response procedures.

We keep personal information only for as long as reasonably necessary for the purpose for which it is held, legitimate business recordkeeping, or applicable tax, insurance, food-safety, complaint, limitation, litigation or other legal requirements. When information is no longer required and the law does not require retention, we take reasonable steps to destroy or de-identify it.

If the Privacy Act and Notifiable Data Breaches scheme apply to an incident, we assess suspected eligible data breaches and notify affected individuals and the Office of the Australian Information Commissioner when required by law.

14. Data quality, access and correction

We take reasonable steps to keep personal information accurate, up to date, complete and relevant for the purposes for which it is used. You may ask to access or correct personal information we hold about you. We may verify identity before responding and may refuse access only where the law permits, in which case we will explain the basis to the extent required.

15. Anonymity and pseudonymity

Where the Privacy Act applies, you may deal with us anonymously or using a pseudonym where it is lawful and practicable. Identification will usually be required for transactions and activities that require delivery, payment, booking administration, participant identification, emergency management, age verification, waiver execution, legal compliance or another function that cannot practicably be performed anonymously.

16. Automated decision-making

We do not currently arrange for a computer program to make, or substantially and directly assist in making, decisions that significantly affect a person’s rights or interests based on personal information in a way that requires a specific automated-decision disclosure in this policy. If that changes, we will update this policy and any required collection notices to describe the relevant system, personal information and types of decisions.

17. Privacy complaints

Please contact us first if you have a privacy concern. Provide enough information for us to identify the issue and investigate it. We will respond within a reasonable period. If the Privacy Act applies and you remain dissatisfied, you may have a right to complain to the Office of the Australian Information Commissioner.

18. Changes to this policy

We may update this policy to reflect changes in law, technology, providers or business practices. The current version will be made available through our website or on request. Material changes affecting an existing collection or consent will be handled as required by applicable law.

Contact details

Business

Back 2 Basics Traditions

ABN

56 920 108 744

Email

b2btraditions@gmail.com

Website

b2btraditions.com.au