VenueGuide.au Privacy Policy

1. Information We Collect

Information you provide

• Email address and name (when you create an account)
• Enquiry details (name, email, event date, message — when you enquire about a venue)
• Venue listing information (if you claim or list a venue)

Information collected automatically

• IP address and approximate location
• Browser type, device, and operating system
• Pages visited and time spent on VenueGuide.au
• Referring website

Cookies and tracking

We use cookies for authentication (keeping you signed in), basic first-party site analytics written to our own database, and to deliver third-party advertising on free-tier pages. We do not load any third-party analytics SDK.

Advertising cookies are managed by our advertising partner Google AdSense(publisher ID ca-pub-8065068206890729). Consent is collected through the IAB TCF v2.2 Choice consent management platform that appears on your first visit, and can be re-opened from the "Privacy preferences" link in the page footer. You can opt out of advertising cookies at any time by:

• Adjusting your preferences on the cookie settings page
• Upgrading to Pro Planner, which removes all third-party advertising scripts

Advertising cookies are never loaded on the sign-in, sign-up, dashboard, admin, checkout, privacy, terms, official, or sponsor pages. They are also disabled for Pro Planner, founding, venue owner and admin users.

2. How We Use Your Information

• To provide the venue search and shortlist features
• To deliver your enquiries directly to venue operators
• To maintain your account and saved preferences
• To send transactional emails (account confirmations, enquiry receipts)
• To improve the service based on aggregate usage patterns
• To comply with Australian legal obligations

We will never send you marketing emails unless you explicitly opt in via a separate checkbox. Enquiry consent and marketing consent are always separate choices on VenueGuide.au.

3. Who We Share Your Data With

• Venue operators — only the details you submit in an enquiry form, only to the specific venue you enquired about
• Supabase — database and authentication hosting (supabase.com/privacy)
• Cloudflare — website delivery and security (cloudflare.com/privacypolicy)
• Stripe — payment processing for paid subscriptions (stripe.com/au/privacy). Only used when you start a paid plan.
• Resend — transactional email delivery (resend.com/legal/privacy-policy). Receives your email address only.
• Google AdSense (publisher ID ca-pub-8065068206890729) — third-party advertising delivery on free-tier pages (policies.google.com/privacy). Google and its partners may use cookies to serve ads based on your visits to this site or other sites. You can opt out of personalised advertising at any time via google.com/settings/ads or the DAA opt-out portal. Google AdSense receives standard browser data (IP address, user-agent, page URL) for ad delivery and frequency capping; it does not receive your account, enquiry, or contact data.
• InMobi Choice CMP (IAB TCF v2.2 certified) — consent management for advertising cookies (inmobi.com/privacy-policy/). Stores your consent choices in a first-party cookie so the "Privacy preferences" banner doesn't reappear on every visit. Does not receive your account or contact data.

We do not sell your personal information. We do not share your account, enquiry, or contact data with advertisers. We do not use it for purposes you have not consented to.

4. International Data Transfer

Our database is hosted by Supabase in the Asia-Pacific region (ap-northeast-1, Tokyo). Our website is delivered via Cloudflare's global edge network. Your data may be processed in countries outside Australia. We ensure appropriate safeguards are in place through our service providers' data protection agreements.

5. Data Security

We protect your information with:

• HTTPS encryption on all pages
• Secure HTTP headers (XSS protection, clickjacking prevention, content-type enforcement)
• Row-level security policies on all database tables
• Authentication tokens stored securely in HTTP-only cookies
• No plaintext passwords stored — all passwords are hashed by Supabase Auth

6. Data Retention

• Account data: retained while your account is active, deleted within 30 days of account deletion
• Enquiry records: retained for 2 years for dispute resolution, then anonymised
• Analytics data: retained for 26 months in aggregate form

7. Your Rights (Australian Privacy Principles)

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Opt out of any marketing communications
• Lodge a complaint with the Office of the Australian Information Commissioner (oaic.gov.au)

To exercise these rights, email [email protected].

8. Venue Data Sources

Venue listings on VenueGuide.au are sourced from publicly available information including venue websites, tourism directories, and industry listings. Venue data may include listing status and claim status so users can assess data quality. Venue operators can claim and update their listings at any time. We do not scrape competitor directories, social media, or login-protected pages.

9. Children

VenueGuide.au is not intended for users under 16. We do not knowingly collect information from children.

10. Changes to This Policy

We may update this privacy policy. Material changes will be communicated via email to registered users. The "last updated" date at the top reflects the most recent revision.

11. Third-party advertising

VenueGuide.au is free to use because free-tier pages carry a small amount of third-party advertising. Our advertising partner is Google AdSense (publisher ID ca-pub-8065068206890729). Ad formats may include display banners, native units, in-feed placements, and in-article placements; we do not allow pop-ups, redirects, or click-to-new-tab formats.

Google and its partners may use cookies to serve ads based on your prior visits to this site or other sites. The data collected includes anonymous identifiers, IP address, user-agent, page URL, and approximate location. This data is used for ad delivery, frequency capping, fraud detection, and (with consent) personalisation. We do not share your account, enquiry, or contact details with Google or any advertiser.

Consent — IAB TCF v2.2.Before any advertising cookies are loaded, you see a consent banner powered by the InMobi Choice TCF v2.2 certified consent management platform. The banner lets you accept all, reject all, or customise by purpose and vendor. Your choice is stored in a first-party cookie. You can re-open this banner at any time from the "Privacy preferences" link in the footer or via our cookie settings page.

Personalised vs. non-personalised ads. If you reject personalisation consent, Google AdSense will serve only non-personalised ads (contextual, based on the current page content only, no behavioural profile). If you accept, you can still opt out of personalisation later at google.com/settings/ads (managed by Google for all sites) or via the DAA opt-out portal.

Some advertising data may be processed outside Australia. Google operates globally; see Google's privacy policy at policies.google.com/privacy and how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites.

Advertising cookies are never loaded on the following routes:/auth/*, /dashboard/*,/admin/*, /checkout/*,/privacy, /terms, /official, and /sponsor. They are also disabled for Pro Planner, Pro trial, founding, venue owner and admin users.

You can opt out of third-party advertising at any time by:

• Adjusting your preferences on the cookie settings page
• Upgrading to Pro Planner, which removes all third-party advertising scripts
• Using your browser's tracking-protection or ad-blocking settings

Sponsored placements within VenueGuide.au (for example, wedding vendors paying for a featured slot) are always clearly labelled "Sponsored", never disguised as organic results, and are described in our Terms of Service clause 5.

12. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• The right to know what personal information we collect, use, and disclose
• The right to delete your personal information
• The right to correct inaccurate personal information
• The right to opt out of the sale or sharing of personal information for cross-context behavioural advertising
• The right to limit the use of sensitive personal information
• The right to non-discrimination for exercising your rights

We do not sell personal information. Sharing of advertising identifiers with Google AdSense for cross-context behavioural advertising is gated by your consent choice in the cookie banner. If you reject personalisation, no behavioural advertising data is shared.

To exercise California rights or submit a verifiable consumer request, email [email protected] with the subject "CCPA Request". We will respond within 45 days as required by law.

13. Contact

Privacy questions or data requests:
[email protected]

General support:
[email protected]

VenueGuide.au is operated by SeaQae Group
ABN 40 300 987 116
Perth, Western Australia

Office of the Australian Information Commissioner:
oaic.gov.au