Privacy Policy
Last updated 27 September 2026
Pop The Confetti (“we”, “us”) is a picnic styling business run by its owners in Sydney, NSW. This policy explains what personal information we collect, why we collect it, and how we look after it. We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth) as good practice.
What we collect
- Contact details: your name, email address and phone number.
- Event details: occasion, date, time, location, guest numbers, preferred style, add-ons and anything you tell us in your message.
- Dietary and allergy information: only if you choose to give it, so we and our catering partners can plan food safely. This is health information, so we collect it only with your consent and use it only for your booking.
- Payment records: amounts paid and dates. If we take card payments online, card details are handled by our payment provider and never stored by us.
- Website usage: we may use cookie-free analytics that count visits and pages viewed without identifying you. The style you preview on our site and whether you dismissed the offer bar are saved in your own browser only and are not sent to us.
You don't have to give us everything. We need a name and a way to contact you to reply to an enquiry, and event details to quote accurately. Dietary information is optional, but without it we can't plan food around allergies.
How we collect it
Directly from you when you use the enquiry or booking forms on this website, email us, call or message us (including WhatsApp), or contact us through Instagram. If someone books on your behalf, please make sure you're happy for them to share your details with us.
Why we use it
- To reply to your enquiry, prepare a quote and confirm your booking.
- To plan, set up and deliver your picnic, including arranging catering and add-ons.
- To take and record payments, deposits and refunds.
- To meet our legal obligations, such as keeping financial records.
We won't send you marketing messages unless you've agreed to receive them, and every marketing message will include an easy way to unsubscribe, as required by the Spam Act 2003 (Cth).
Who we share it with
We don't sell or rent your personal information. We share only what's needed with:
- our website host, Cloudflare, which delivers this website;
- Google, which receives the enquiry and booking forms sent through this website and provides our email, calendar and spreadsheets;
- Meta, if you contact us through WhatsApp or Instagram;
- catering and add-on partners involved in your booking, for example your event date, location, guest numbers and dietary needs;
- our payment provider, if you pay online; and
- anyone we're required to share it with by law.
Storage outside Australia
Some of our service providers store data on servers outside Australia, mainly in the United States. These include Cloudflare (website hosting and spam protection), Google (our forms, email, calendar and spreadsheets, and the fonts this website loads from Google's servers, which receive your IP address when a page loads), and Meta (WhatsApp and Instagram). We choose reputable providers and take reasonable steps to make sure they protect your information.
How we keep it safe and for how long
Your information is kept in our business accounts (email, spreadsheets, messaging and calendar), which only the people running Pop The Confetti can access. We take reasonable steps to protect those accounts from misuse, loss and unauthorised access. We review the information we hold at least once a year and delete enquiry details we no longer need, generally within two years if you didn't book. If you book, we keep booking and payment records for as long as the law requires (usually five years for financial records). If a data breach is likely to cause you serious harm, we'll tell you as soon as we can and explain what you can do.
Photos
We'd love to share photos of the picnics we style. We'll ask for your permission before we post any photo that shows you, your guests or your children, and we'll take a photo down if you ask us to.
Accessing, correcting or deleting your information
You can ask to see the personal information we hold about you, ask us to correct it, or ask us to delete it by emailing info@popconfetti.com.au. We'll respond within 30 days. We may need to keep some records where the law requires it, and we'll tell you if that applies.
Questions and complaints
If you have a question or a concern about how we've handled your information, please email info@popconfetti.com.au and we'll respond within 30 days. If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.