Privacy Policy

1. Introduction

One Click Events (“we”, “us”, “our”) is committed to protecting the privacy of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at dev.oneclickevents.com.au and our services.

We comply with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using our website and services, you consent to the collection and use of your personal information as described in this policy.

2. Information We Collect

We may collect the following types of personal information:

• Personal details: Name, email address, phone number, and delivery address provided when making a booking or enquiry.
• Event details: Event date, venue address, event type, and special requirements related to your hire booking.
• Payment information: Payment details are collected and processed directly by Stripe. We do not store your full credit card number, CVV, or other sensitive payment data on our servers.
• Account information: Email and password if you create an account to manage your bookings.
• Usage data: Information automatically collected when you visit our website, including IP address, browser type, device information, pages visited, and time spent on pages.
• Communications: Content of emails, contact form submissions, and any other correspondence with us.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

• Processing bookings: To process and manage your equipment hire bookings, coordinate delivery and collection, and communicate with you regarding your booking.
• Customer communication: To respond to your enquiries, send booking confirmations, reminders, and post-event follow-ups.
• Service improvement: To analyse how our website and services are used, identify areas for improvement, and enhance the customer experience.
• Legal obligations: To comply with applicable laws, regulations, and legal processes.

4. Payment Processing

All payment transactions are processed by Stripe, a PCI DSS Level 1 certified payment processor — the highest level of security certification in the payment card industry. Stripe handles all sensitive payment data directly. We only receive a confirmation of whether the payment was successful and a truncated reference to the payment method (e.g., last four digits of the card). We never have access to your full card details.

5. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information with the following trusted service providers who assist in operating our business:

• Stripe: For secure payment processing.
• Supabase: For secure database hosting and authentication services.
• Resend: For sending transactional emails such as booking confirmations and receipts.
• Vercel: For website hosting and delivery.

These service providers are contractually obligated to protect your information and use it only for the purposes of providing their respective services. We may also disclose personal information where required by law or to protect our legal rights.

6. Data Security

We take reasonable technical and organisational measures to protect your personal information from unauthorised access, loss, alteration, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL.
• Secure, access-controlled database infrastructure hosted by Supabase.
• Regular review of data access permissions and security practices.

While we strive to protect your personal information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

7. Your Rights

Under the Australian Privacy Act 1988, you have the right to:

• Access: Request access to the personal information we hold about you.
• Correction: Request correction of any inaccurate or incomplete personal information.
• Deletion: Request deletion of your personal information, subject to any legal obligations we may have to retain certain data.
• Complaint: Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe we have breached the Australian Privacy Principles.

To exercise any of these rights, please contact us using the details provided below. We will respond to your request within a reasonable timeframe, typically within 30 days.

8. Cookies

Our website uses only essential cookies that are necessary for the functioning of the site, including session management and authentication. We do not use advertising cookies, third-party tracking cookies, or analytics cookies that track individual user behaviour across websites. Essential cookies cannot be disabled as they are required for the website to function correctly.

9. Email Communications

When you make a booking, we will send you transactional emails including booking confirmations, delivery notifications, and post-event review requests. These communications are necessary for the fulfilment of our services.

We may occasionally send you promotional communications about new products, seasonal offers, or service updates. You can opt out of promotional emails at any time by clicking the “unsubscribe” link in any promotional email, or by contacting us directly. Unsubscribing from promotional emails will not affect transactional communications related to active bookings.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Updated versions will be published on this page with a revised “Last updated” date. We encourage you to review this page periodically. Material changes will be communicated to customers with active bookings via email.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us:

• Email: hello@oneclickevents.com.au
• Phone: 03 9560 9410

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner.