Privacy Policy for Elfie the Christmas Elf

Effective Date: 25 November 2025

Elfie the Christmas Elf is managed by Amanda Sutherland (“we”, “us”, “our”).


We are committed to protecting your privacy and ensuring that your personal information is handled responsibly and transparently in accordance with the Privacy Act 1988 and the Australian Privacy Principles (APPs).

This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information when you engage with our services.

1. Information We Collect

1.1 Information for In-Person Event Bookings

When booking an event with Elfie, we may collect:

  • Full name

  • Email address

  • Phone number

  • Event date and time

  • Event address and location details

  • Type of event

  • Number and ages of children/attendees

  • Activity preferences and special requests

  • Parking or accessibility details

  • Onsite contact person

  • Any other event-related information you choose to provide

1.2 Information for Personalised Video Messages

To create your personalised video message, we may collect:

  • Child’s name

  • Pronunciation (optional)

  • Age (optional)

  • Achievements or message notes

  • Requested themes or details

  • Parent/guardian name and email address

1.3 Website and Analytics Data

When you visit our website, we may automatically collect:

  • IP address

  • Browser type and version

  • Device information

  • Pages viewed and navigation paths

  • Interaction data

  • Cookies and tracking technologies

This information helps us improve our website and services.

1.4 Payment Information (Stripe Processing)

We do not collect or store credit card details.
All card payments are processed securely by Stripe, a PCI DSS Level 1 compliant third-party payment processor.

When making payment:

  • Your card details are entered directly into Stripe’s secure payment system

  • We never see, store, or handle your full card details

  • We may receive limited non-sensitive information such as:

    • payment confirmation

    • date of payment

    • transaction ID

    • last 4 digits of a card (view-only)

Stripe may process personal data on servers located outside Australia. By completing a transaction, you consent to this processing.

2. How We Use Your Information

We use your personal information to:

2.1 Deliver Services

  • Fulfil in-person bookings

  • Prepare event details

  • Create personalised video messages

  • Deliver digital content via email

2.2 Communicate With You

  • Confirm bookings

  • Provide updates or delivery information

  • Respond to enquiries

  • Send marketing emails if you have opted in

2.3 Improve Our Services

  • Analyse website usage

  • Enhance user experience

  • Develop new features and offerings

2.4 Payment Processing

  • Confirm payment through Stripe

  • Manage transaction-related communications

3. How We Protect Your Information

We take reasonable steps, as required under the Australian Privacy Principles, to protect personal information from misuse, loss, unauthorised access, modification, or disclosure.

3.1 Security Measures

  • Encryption of sensitive data during transmission

  • Restricted access to personal information

  • Secure password-protected systems

  • Regular monitoring for vulnerabilities

3.2 Data Storage

  • Personal information is stored on secure servers

  • Payment data is handled exclusively by Stripe

  • Cloud data may be stored outside Australia (APP 8 compliant)

4. Sharing Your Information

We do not sell or rent your personal information.

We may share your information with:

4.1 Service Providers

  • Stripe (payment processing)

  • Email delivery providers

  • Website hosting and maintenance providers

These providers must comply with privacy and security requirements.

4.2 Legal Obligations

We may disclose information if required to:

  • comply with Australian law

  • respond to lawful requests (court orders, subpoenas)

  • protect the safety or rights of clients, children, or the public

4.3 Business Transfers

If ownership of Elfie the Christmas Elf changes, personal information may be transferred to the new operator, provided they uphold this Privacy Policy.

5. Children’s Privacy

Elfie services are created for children but purchased and managed by adults.

To comply with Australian privacy requirements:

6. Your Rights Under Australian Privacy Law

Under the Australian Privacy Principles, you have the right to:

6.1 Access and Correction

  • Request a copy of the personal information we hold

  • Request corrections to inaccurate or outdated information

6.2 Deletion

You may request that we delete your personal information where lawful and appropriate.

6.3 Marketing Preferences

You may opt out of marketing emails at any time by contacting us or selecting “unsubscribe”.

6.4 Data Portability

We can provide a copy of your personal data in a structured, machine-readable format when requested.

To exercise these rights, contact us using the details below.

7. Data Retention

We retain personal information only as long as necessary:

7.1 Event Bookings

Until the event is completed and any follow-up communication is resolved.

7.2 Personalised Videos

Until the video has been delivered and any enquiries are finalised.

7.3 Marketing Data

Until you opt out of receiving marketing communications.

7.4 Legal Record Requirements

Some information may be retained as required by Australian tax and business laws.

8. Cookies and Tracking

Our website uses cookies to:

  • Remember preferences

  • Improve site performance

  • Analyse website traffic

  • Customise user experience

You can manage cookie preferences via your browser.
Disabling cookies may affect website functionality.

9. Changes to This Privacy Policy

We may update this policy from time to time in response to legal, technical, or service changes.

  • Updates will be posted on our website

  • The effective date will be revised accordingly

  • Continued use of our services indicates acceptance of any changes

10. Contact Us

For privacy enquiries, access requests, or corrections, contact:

Email: [email protected]

Phone: 0422 303 527