Privacy Policy

Effective 17 July 2026

1Who We Are

This policy is issued by DTF AU Pty Ltd (ACN 679 131 358) trading as The Boombox AU (“The Boombox”, “we”, “us”). It explains how we handle personal information in connection with our events, bookings, website and marketing, consistent with the Privacy Act 1988 (Cth), the Australian Privacy Principles and the Spam Act 2003 (Cth).

2What We Collect

• Contact details: your name, phone number, email address and suburb/postcode.
• Booking details: the events you book or attend, package and table selections, party size, special requests, and your booking and payment history with us.
• Payments: payments are processed by secure third-party payment providers — we do not store your full card numbers.
• Communications: messages you send us by SMS, email, our website or social media (including DMs), and your responses to our campaigns.
• Event media: photos and video taken at our events, which may include your image (see our Guest Terms & Conditions).
• ID checks at entry are performed by the host venue under its licensing obligations — any ID-scanner data is held by the venue, not by us.

3How We Collect It

Directly from you — when you book a table, buy a ticket, pay a deposit, join a guest list, enter a competition or promotion, sign up for updates, or message us on any channel; and automatically through our website and booking pages (standard analytics and cookies — see section 9).

4Why We Use It

• To process and manage your bookings, deposits and guest lists, and to run our events (including giving the host venue the details it needs to admit your party on the night).
• To contact you about your booking — confirmations, reminders, and changes to an event.
• To market future Boombox events to you by SMS and email — new event announcements, pre-sale access, offers and VIP packages (see section 5).
• To understand our audience (for example, which suburbs our guests come from) and improve our events and campaigns.
• To meet our legal obligations and protect our legal rights.

5SMS & Email Marketing

• Consent: we send marketing about future Boombox events by SMS or email only if you’ve opted in. Our website updates list is exactly that — an SMS and email list — so joining it involves ticking a consent box confirming you want us to text and email you about future events. That box is never pre-ticked, and it applies to joining the list and nothing else.
• Other ways to opt in: you can also opt in when you buy a ticket, book a table or join a guest list. At those points the box is optional, and ticking it makes no difference to your booking or your entry — buying a ticket, booking a table or joining a guest list does not by itself sign you up for marketing.
• Your consent record: however you opt in, we record the consent wording you were shown and the date you agreed, so we can always show you what you consented to. We only market our own events and offers — we never sell your details, and we don’t send marketing for unrelated third parties.
• Opting out is always one step: every marketing SMS includes an unsubscribe link, and every marketing email has an unsubscribe link. Opt-outs are actioned promptly and at no cost to you. You can also opt out by contacting us directly.
• Opting out of marketing doesn’t affect messages we must send about a booking you hold (such as an event change or cancellation).

6Who We Share It With

• Host venues: the minimum needed to run the night — typically the booking name and party size for door lists. Our venue agreements prohibit venues from using our guest details for their own marketing.
• Service providers: our booking, ticketing, payment, SMS and email platforms, and analytics providers, who may only use your information to provide their services to us.
• Advertising platforms: we share a hashed version of your name, email address, mobile number and postcode with Meta Platforms, Inc. (Facebook/Instagram) so we can measure our advertising and reach audiences similar to our guests. Hashing means your details are not sent in readable form, but Meta can match them to an existing Facebook or Instagram account. This information is sent to and stored in the United States. You can manage how Meta uses data about you at facebook.com/adpreferences, and you can ask us at any time to stop including your details (see section 12).
• As required by law — courts, regulators and law enforcement where we are legally obliged.
• We never sell or rent your personal information.

7Storage & Security

We store personal information with reputable providers using access controls and encryption in transit. Some of our platforms (for example email, SMS and analytics services) may store data on servers located overseas, including the United States; where they do, we take reasonable steps to ensure your information is handled consistently with Australian privacy standards. We keep personal information only as long as we need it for the purposes above, then delete or de-identify it.

8Access, Correction & Deletion

You can ask us at any time to access the personal information we hold about you, correct it, or delete it (subject to records we must keep by law). We will respond within a reasonable time and won’t charge you for a reasonable request.

9Cookies & Website

Our website and booking pages use cookies and similar technologies for functionality, standard analytics (such as visitor counts and page performance), and advertising measurement and targeting.

When you join our updates list, our server — not your browser — sends the hashed details described in section 6 to Meta. Because this happens on our side, browser settings, ad blockers and tracking protection do not prevent it. Section 6 explains how to opt out of that sharing, and section 8 always applies — you can ask us to delete what we hold.

You can control cookies through your browser settings; disabling them may affect the booking experience.

10Complaints

If you have a concern about how we’ve handled your information, contact us first and we’ll work to resolve it promptly. If you’re not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

11Changes To This Policy

We may update this policy from time to time. The current version will always be available on our website, with its effective date shown at the top.

12Contact

Privacy questions, opt-outs, and access or deletion requests: email info@theboombox.au or message us on our socials.