Legal

Privacy Policy

Last updated: 18 May 2026

Brizzy Jumping Castles is the trading name of Eetlust Pty Ltd (ABN 53 119 209 755). In this policy we / us / our refers to Brizzy Jumping Castles, and you / your refers to anyone who enquires, books, visits our website, or speaks with us about a hire.

We respect your privacy. This policy explains what personal information we collect, why we collect it, how we use and store it, and the choices you have. It is written to align with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth), as best practice — even where the small-business exemption may apply to us.

What we collect

When you enquire or book with us, we collect the personal information you give us through our website forms, by phone, by email, or in person:

Identifiers: your first and last name; the organisation name if you're booking on behalf of a school, church, business or community group.
Contact details: mobile number and email address.
Event details: event date, start time, hire length, event suburb and postcode, event type, items you're interested in, and anything else you tell us in a message field.
Consent flags: whether you've ticked the box to receive booking-related SMS updates, and whether you've ticked the box to receive occasional marketing emails.
Payment details: when you confirm a booking, our payment processor collects your card details directly. We never see or store your full card number — only a token issued by the processor that lets us charge the agreed balance.
How you found us: the page of our website you submitted the enquiry from, and any referral source you give us.

We deliberately do not collect health information, financial details (beyond the payment token), government identifiers, or any "sensitive information" as defined by the Privacy Act.

What we collect automatically when you visit our website

Our website uses standard analytics tools to understand how it's used and to improve it:

Google Analytics 4 — anonymised page views, click events, device type, approximate location (city / region, not street address), and time on page. IP addresses are anonymised by Google before being processed.
Google Tag Manager — used to deliver our analytics tags. Does not itself collect data.
Server access logs — our hosting provider (Vercel) records standard request logs (IP address, browser, URL, response code) for short periods, used for fraud and abuse protection.

We do not currently use marketing or remarketing cookies. We do not sell, share or onward-disclose website analytics data to advertisers.

Why we collect it

We use your information for these purposes — and only these:

To process your enquiry, prepare a quote, and reply to you within one business hour during opening times;
To create and manage your booking, schedule delivery and pickup, and contact you on the day if anything changes (e.g. weather, traffic, driver running late);
To charge the deposit and balance as set out in our Terms & Conditions;
To send you booking-related SMS updates — only if you ticked the SMS-consent box on the enquiry form;
To send you occasional marketing emails about seasonal hire offers, new gear and tips — only if you ticked the marketing-consent box on the enquiry form;
To meet our legal and tax obligations (issuing tax invoices, keeping records as required by Australian law);
To investigate disputes, prevent fraud, and protect our equipment and staff.

Marketing & SMS — your consent matters

We only send marketing emails or non-essential SMS if you've ticked the relevant consent box. We comply with the Australian Spam Act 2003:

Every marketing email has an unsubscribe link in the footer. Clicking it removes you from marketing immediately.
Every non-essential SMS has STOP-to-opt-out instructions.
Essential service messages (e.g. "your driver is 10 minutes away") may still be sent for an active booking even if you've unsubscribed from marketing — they're not marketing.

Who we share your information with

We don't sell your personal information. We don't share it with advertisers. We share it only with the service providers we need to run our business:

GoHighLevel (GHL) — our customer relationship management (CRM) platform. Stores your contact details and booking history securely. GHL is a US-based service, which means your personal information is stored on servers outside Australia. By submitting an enquiry, you consent to this cross-border disclosure under Australian Privacy Principle 8.
Vercel — our website hosting provider (US-based, with edge servers in Sydney for performance).
Google (Analytics, Workspace email) — for analytics and our business email.
Payment processor — for processing card payments (PCI-DSS compliant).
Insurance broker, accountant, lawyer — only if we need to investigate a claim, dispute, or legal obligation that involves your booking.
Government and regulators — only when required by law (e.g. ATO records, court orders).

All providers above are bound by their own privacy and security obligations and contractual confidentiality.

How long we keep your information

Enquiries that don't become bookings — up to 24 months, then deleted, unless you've consented to marketing (in which case we keep them while you remain subscribed).
Booking and customer records — at least 7 years after your final booking, as required by Australian tax and contract record-keeping laws.
Payment records and tax invoices — 7 years (ATO requirement).
Marketing email subscriber list — until you unsubscribe.
Website analytics — Google Analytics retention is set to 14 months.

How we keep your information secure

All website traffic is encrypted in transit using HTTPS / TLS.
Form submissions are rate-limited and protected against automated abuse.
Customer data in GHL is access-controlled and only available to authorised staff.
Payment card details are tokenised by our payment processor — we never see or store full card numbers.
We don't email lists of personal information internally; staff access the CRM directly.

No system is 100% secure. If we ever become aware of a data breach that's likely to result in serious harm to you, we will notify you promptly and, where required, the Office of the Australian Information Commissioner (OAIC) under the Notifiable Data Breaches scheme.

Your rights

You can, at any time:

Ask what we hold about you — email us and we'll send a copy within a reasonable time (usually within 14 days).
Ask us to correct it — if anything is out of date or wrong.
Ask us to delete it — we'll delete it unless we're required to keep it for legal reasons (e.g. tax records of completed bookings).
Unsubscribe from marketing — use the link in any marketing email, or reply STOP to a marketing SMS, or email us.
Complain — see "Complaints" below.

Cookies & tracking

Our website uses a small number of cookies, all functional or analytical, never advertising:

Functional — to remember whether you've dismissed banners, your cart contents if you've added items, and similar UX state.
Analytics — Google Analytics 4 sets cookies to count visitors and measure usage. These can be disabled via your browser settings or via the Google opt-out at tools.google.com/dlpage/gaoptout.

Children

Our service is for adults arranging events. We don't knowingly collect personal information from children. If a parent or guardian believes their child has provided personal information to us, please contact us and we'll delete it.

Changes to this policy

We may update this policy as our business changes. The "Last updated" date at the top will always reflect the most recent change. Material changes will be flagged on the site for at least 30 days.

Complaints & contact

If you'd like to make a privacy complaint, exercise any of the rights above, or just ask a question about how we handle your information:

Phone: (07) 4803 1082
Email: fun@brisbanejumpingcastles.com
Post: Eetlust Pty Ltd t/a Brizzy Jumping Castles, Brisbane, Queensland, Australia.

We'll acknowledge your complaint within 5 business days and aim to resolve it within 30 days. If you're not happy with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or call 1300 363 992.