PRIVACY POLICY

Effective 20 August 2026

Greenhouse Events Pty Ltd trading as Byron Bay International Film Festival (BBFF, we, us or our) respects your privacy and is committed to handling personal information responsibly. This policy explains the information we collect, how and why we use it, who we disclose it to, how disclosure occurs, and the measures we use to safeguard it. We aim to comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply.

1. INFORMATION WE COLLECT

We may collect:

• identity and contact information, including your name, email address, telephone number, postal or billing address and postcode;

• membership information, including your BBFF Friends tier, renewal and payment status, benefit eligibility, ticket discount codes, event invitations and attendance;

• ticketing and transaction information, including purchases made through Humanitix, transaction dates, amounts and refund information;

• preferences and communications, including newsletter choices, interests, survey or form responses, competition entries and correspondence with us;

• technical information, including your IP address, device and browser information, cookies, website activity and analytics; and

• any other information you voluntarily provide when contacting BBFF or participating in an event, membership program or promotion.

Payments are processed by Stripe, Humanitix or another payment provider identified at checkout. BBFF does not receive or store your complete card number or card security code.

2. HOW WE COLLECT INFORMATION

We collect personal information directly from you when you:

• purchase or renew a BBFF Friends membership;

• buy or register for tickets directly from us;

• complete a form, survey, competition entry or newsletter sign-up;

We may also collect information automatically through cookies and website analytics, or receive information from service providers where this is necessary to administer your transaction, membership, ticket or relationship with BBFF.

3. HOW WE USE INFORMATION

We use personal information to:

• process membership, ticket and other payments;

• administer memberships, automatic renewals, cancellations and refunds;

• provide ticket discounts, benefits, merchandise, invitations and member communications;

• manage event registrations, attendance and customer service;

• send essential transactional notices about a purchase, membership or event;

• send BBFF news, program announcements and offers where you have consented or where otherwise permitted by law;

• respond to enquiries and resolve problems;

• understand website and audience activity and improve our events, services and communications;

• maintain financial, administrative and legal records;

• prevent fraud, misuse and security incidents; and

• comply with legal and regulatory obligations.

4. WHO WE DISCLOSE INFORMATION TO

We may disclose personal information to trusted service providers including:

• Stripe, for payment processing and recurring membership subscriptions;

• Humanitix, for ticketing, registrations, discount codes and event administration;

• Squarespace, for website hosting, online forms and website services;

• Flodesk, for email newsletters, audience lists and automated communications;

• Google Workspace, for business email, documents, records and collaboration;

• authorised BBFF employees and contractors who require access to perform their work;

• professional advisers, insurers, auditors and technology support providers; and

• government bodies, regulators, courts or law enforcement where disclosure is required or authorised by law.

We do not sell personal information.

Information is generally disclosed electronically through secure provider accounts, access-controlled system integrations and encrypted connections where supported. It may also be disclosed directly to an authorised adviser or authority when reasonably necessary or legally required.

5. DIRECT MARKETING

We may send you BBFF news and promotional communications where you have opted in or where otherwise permitted by law. You can unsubscribe at any time using the link in an email or by contacting info@bbff.com.au.

Unsubscribing from marketing will not stop essential transactional communications relating to an active membership, ticket purchase, payment, cancellation or event registration.

6. OVERSEAS PROCESSING

Some of our service providers may store or process personal information outside Australia, including in the United States and other countries in which they or their subcontractors operate. Privacy protections in those countries may differ from Australian law. We take reasonable steps when selecting and configuring providers to protect the information entrusted to them.

7. SECURITY

We use reasonable administrative, technical and organisational safeguards appropriate to the information we hold. These may include:

• established hosted technology and payment providers;

• restricted, role-based access for authorised personnel;

• strong passwords and multi-factor authentication where available;

• encrypted connections where supported;

• backups, monitoring and software security controls; and

• staff and contractor awareness of privacy and confidentiality responsibilities.

No online system or transmission is completely secure. If we become aware of a data breach, we will assess and respond to it and make notifications where required by law.

8. RETENTION

We retain personal information only for as long as reasonably necessary for the purposes described in this policy and to meet accounting, reporting, dispute-resolution and legal obligations. When information is no longer required, we take reasonable steps to securely delete or de-identify it where practicable.

9. ACCESS AND CORRECTION

You may request access to personal information we hold about you, or ask us to correct information that is inaccurate, incomplete or out of date. Contact info@bbff.com.au. We may need to verify your identity before completing a request. We do not ordinarily charge a fee for making a request.

10. PRIVACY COMPLAINTS

If you have a privacy concern or complaint, email info@bbff.com.au with the subject line Privacy Enquiry. We will acknowledge and investigate your concern and aim to respond within a reasonable period.

If the Privacy Act applies and you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner at www.oaic.gov.au.

11. THIRD-PARTY WEBSITES

Our website and communications may link to third-party websites or services. Those parties have their own privacy practices, and we recommend reviewing their privacy policies when using their services.

12. CHANGES TO THIS POLICY

We may update this policy when our practices, services or legal obligations change. The current version and effective date will appear on this page.

13. CONTACT

Greenhouse Events Pty Ltd

Trading as Byron Bay International Film Festival

Email: info@bbff.com.au

Website: www.bbff.com.au