1. Introduction
Creative Rentals Pty Ltd ("we," "us," "our," or "Company") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the SwagTix platform ("Platform").
We are an Australian incorporated entity with ABN 57 671 315 003 and comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth) and the General Data Protection Regulation (GDPR) where applicable.
2. Information We Collect
2.1 Personal Information
We collect the following personal information:
- Name, email address, and phone number
- Date of birth and age verification
- Billing and shipping addresses
- Payment information (processed securely by Stripe)
- Cryptocurrency wallet addresses
- Profile information and preferences
- Event attendance and purchase history
2.2 Technical Information
We automatically collect:
- IP address and device information
- Browser type and version
- Operating system
- Pages visited and time spent
- Referrer information
- Cookies and similar technologies
2.3 User-Generated Content
We collect content you create:
- Event descriptions and images
- Reviews and feedback
- Communications with us and other users
- QR codes and ticket information
3. How We Collect Information
We collect information through:
- Direct Collection: When you register, create events, purchase tickets, or contact us
- Automated Collection: Through cookies, web beacons, and similar technologies
- Third Parties: From payment processors, social media platforms, and analytics services
- Blockchain: Public blockchain data for NFT transactions
- Public Sources: Information you make publicly available
4. How We Use Your Information
4.1 Primary Purposes
- Provide and maintain the Platform
- Process ticket purchases and payments
- Create and manage user accounts
- Facilitate event creation and management
- Enable ticket validation and entry
- Process marketplace transactions
- Provide customer support
4.2 Secondary Purposes
- Improve our services and user experience
- Send important updates and notifications
- Provide personalized recommendations
- Conduct analytics and research
- Prevent fraud and ensure security
- Comply with legal obligations
5. Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA), we process your information based on:
- Contract: To provide services you've requested
- Legitimate Interest: To improve services and prevent fraud
- Consent: For marketing communications and cookies
- Legal Obligation: To comply with applicable laws
- Vital Interest: To protect your safety or the safety of others
6. Information Sharing and Disclosure
6.1 When We Share Information
We may share your information with:
- Event Organizers: Basic information for event management
- Payment Processors: Stripe for payment processing
- Blockchain Networks: Public transaction data
- Service Providers: Cloud hosting, analytics, and support services
- Legal Authorities: When required by law or to protect rights
- Business Partners: With your consent for specific purposes
6.2 Information We Don't Sell
We do not sell, rent, or trade your personal information to third parties for their marketing purposes.
7. Data Security
We implement appropriate technical and organizational measures to protect your information:
- Encryption of data in transit and at rest
- Secure authentication and access controls
- Regular security assessments and updates
- Employee training on data protection
- Incident response procedures
- Secure cloud infrastructure
However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
8. Data Retention
We retain your information for as long as necessary to:
- Provide our services
- Comply with legal obligations
- Resolve disputes
- Enforce our agreements
Retention Periods:
- Account information: Until account deletion or 7 years after last activity
- Transaction records: 7 years for tax and legal compliance
- Event data: 3 years after event completion
- Marketing data: Until consent withdrawal or 2 years of inactivity
- Blockchain data: Permanently (public blockchain)
9. Your Rights and Choices
9.1 Access and Control
You have the right to:
- Access your personal information
- Correct inaccurate information
- Delete your account and data
- Restrict processing of your information
- Port your data to another service
- Object to certain processing activities
- Withdraw consent where applicable
9.2 Marketing Preferences
You can:
- Opt out of marketing communications
- Manage email preferences in your account
- Unsubscribe from specific email types
- Control push notifications
9.3 Cookie Management
You can:
- Modify browser settings to reject cookies
- Use our cookie consent manager
- Delete existing cookies
- Opt out of analytics tracking
10. International Data Transfers
Your information may be transferred to and processed in countries other than your own:
- We use cloud services with global infrastructure
- Some service providers are located outside Australia
- We ensure adequate protection through:
- Standard contractual clauses (GDPR)
- Adequacy decisions
- Certification schemes
- Other approved transfer mechanisms
11. Cookies and Tracking Technologies
11.1 Types of Cookies
- Essential: Required for Platform functionality
- Analytics: Help us understand usage patterns
- Marketing: Enable personalized advertising
- Preferences: Remember your settings
11.2 Third-Party Services
We use services that may set cookies:
- Google Analytics for website analytics
- Stripe for payment processing
- Google Maps for location services
- Social media platforms for sharing
12. Children's Privacy
Our Platform is not intended for children under 13 years of age:
- We do not knowingly collect personal information from children under 13
- Users under 18 must have parental/guardian consent
- If we discover we have collected information from a child under 13, we will delete it
- Parents can contact us to review or delete their child's information
13. Blockchain and Public Information
Important considerations regarding blockchain data:
- NFT transactions are recorded on public blockchains
- Blockchain data is permanent and publicly accessible
- Wallet addresses may be linked to your identity
- We cannot delete or modify blockchain data
- Consider privacy implications before using blockchain features
14. Data Breaches
In the event of a data breach:
- We will assess the breach and take immediate action
- We will notify affected individuals as required by law
- We will report to relevant authorities if necessary
- We will implement measures to prevent future breaches
- We will provide support to affected users
15. Changes to This Policy
We may update this Privacy Policy from time to time:
- We will notify you of material changes
- Changes will be posted on this page
- We may send email notifications for significant changes
- Continued use constitutes acceptance of changes
- You can review the current policy at any time
16. Contact Information
For privacy-related questions or concerns:
Creative Rentals Pty Ltd
ABN: 57 671 315 003
Email: privacy@swagtix.com
Website: https://swagtix.com
Data Protection Officer:
Email: dpo@swagtix.com
Australian Privacy Commissioner:
Website: https://www.oaic.gov.au
Phone: 1300 363 992
17. Complaints
If you have a privacy complaint:
- Contact us first to resolve the issue
- We will respond within 30 days
- If unsatisfied, you may contact the Privacy Commissioner
- EU residents may contact their local data protection authority
18. Additional Information
This Privacy Policy is part of our Terms of Service and should be read together with:
- Terms of Service
- Cookie Policy
- Refund Policy
- Event Organizer Agreement
For questions about this policy, please contact us using the information provided above.