The way we manage your personal information is governed by Information Privacy Act 2009 (Qld) (Act) and the Information Privacy Principles (IPPs) established under the Act.
1. What is personal information?
2. Collecting personal information
2.1 What kind of personal information do we collect?
The types of personal information we may collect include:
- your name;
- your contact details (address, telephone number(s) and email address);
- your date of birth;
- your gender;
- transactional information you provide when you make a purchase with us (for example, credit card details);
- any preferences you select;
- the areas you have visited on our website and how you have accessed our website e.g. via a link from one of our emails;
- disability or other information relating to your mobility that may affect your ability to attend our performance or determine the adjustments we may make to facilitate your attendance;
- personal information you provide when you commence a business relationship with us;
- any correspondence between you and us; and
- any other personal information you provide when you make an inquiry, request information, enter a competition, respond to marketing, lodge a complaint, provide feedback, seek employment with QPAC or correspond with us.
2.2 Reasons for collecting your personal information
We collect your personal information to enable us to provide you with the products, services and information you request. In particular, we may collect your personal information to:
- determine your requirements in order to provide you with appropriate products and services;
- process your online purchases and issue you with tickets to performances;
- notify you of changes to performance details or cancelled performances;
- replace and re-issue you with lost tickets;
- contact you in relation to lost property and to return lost property to you;
- provide you with information about upcoming performances or events;
- recommend to you other services we or selected partners offer which may be of interest to you;
- process any communications you send to us (for example, responding to your queries, assessing your application for employment, and dealing with any complaints or feedback you have);
- identify you and protect you from unauthorised access to your personal information;
- detecting and preventing fraud and unauthorised ticket onselling;
- where you have provided us with your consent - help us develop and improve the services to our patrons, for example by conducting marketing and research;
- get in touch with you if we need to;
- do anything which you authorise or consent to us doing; or
- take any action we are required or authorised by law to take.
In certain circumstances, we may also collect personal information about you in the course of combining and analysing different data sets which, in and of themselves, may not contain personal information.
If you do not provide us with your personal information, it is generally not possible for us to provide you with the products or services you have requested (for example, to issue you tickets to performances). Where it is lawful and practical to do so, we may allow you to deal with us anonymously.
2.3 How do we collect personal information
Wherever possible, we always try to collect personal information directly from you - for example, when you:
- become an email subscriber;
- purchase performance tickets from us - either online, over the phone, at the QPAC Box Office or at one of our authorised outlets;
- use our website;
- request information over the internet or telephone;
- enter a competition run by us; or
- correspond with us.
We may also obtain your personal information from third parties we deal with, such as:
- event organisers, promoters, performance companies, venues, sponsors and our business partners to whom you have provided your personal information; and
- from time to time, providers of third party applications which collect and share information.
We may also collect personal information from third parties you refer to us. If we do so, we will assume, and you will ensure, that you have made that third party aware of the referral and the purpose(s) of the collection, use and disclosure of the relevant personal information. When you communicate with QPAC through social media sites or using applications provided by third parties (such as via your smart phone), we may collect your personal information from that communication. We assume that you have informed yourself of the ways in which such sites or applications can collect and disclose your personal information, and that you otherwise consent to the collection, use and disclosure of your personal information by such sites or applications (including disclosure to, and collection by, QPAC).
3. Disclosing your personal information
3.1 Who we may disclose your personal information to
- our related entities and businesses (for example, QTIX, our ticketing agent service);
- any entity to which we are authorised or required by law to disclose your personal information (for example, law enforcement agencies, various Federal, State or Local Government bodies and public health agencies);
- our professional advisers, contractors or other service providers we engage to carry out (or advise on) our functions and activities - for example, our mail service providers, marketing consultants and insurers (who may be located in Australia or overseas);
- organisations who may assist us with detecting fraud or unauthorised ticket onselling;
- social media sites or applications where you have provided consent to us or such sites/applications;
- any specific parties which we have advised you of at the time we collect your personal information; and
- with your consent (express or implied) - other entities.
The above entities may in turn disclose your personal information to any other entities as described in their privacy policies or statements.
3.2 Direct marketing, subscriptions and disclosure to third parties
We may also use your personal information to provide you with information about our products and services.
By applying to become a QPAC email subscriber (including QPAC e-News, QTIX Box Office or other QPAC emails), you are taken to have consented to us sending you the requested newsletters and information, and also other information about upcoming performances and other products and services offered by QPAC.
In addition, when you create an account for ticket purchases, we will also ask you whether you would like to receive news and offers from us. If you answer "Yes" to receiving information from QPAC, you agree that we may send you emails and other marketing communications.
If you answer "Yes" to receiving information from event promoters, you are agreeing that we may pass your information to event promoters who may contact you directly for marketing purposes.
Stopping marketing and promotional material from QPAC
You may change your decision at any time in the future by contacting us (details below) or by changing your preferences in your online account. If you tell us you no longer wish to receive marketing or promotional material from us, we will not send you any such material. If you change your mind in the future and wish to receive marketing or promotional material from us, please contact us.
We will still continue to send you required service related emails, such as booking confirmation emails and tickets.
Stopping marketing and promotional material from third parties
As a general rule, if third parties have received your personal information, their handling of your personal information will be governed by their privacy policies. In some cases, it may also be necessary for you to contact the relevant organisations to notify them of your decision.
4. Storing your personal information
QPAC will take precautions to safeguard your personal information from loss, misuse, unauthorised access, modification or disclosure.
As a general rule, we store your personal information in our electronic databases. From time to time, QPAC may engage service providers to store personal information. Such service providers could have servers located overseas. This means that personal information may sometimes be sent overseas for storage, for example in the United Kingdom and United States of America. We take reasonable steps to ensure that our service providers are carefully chosen and have policies, procedures and systems in place to keep personal information secure.
When your personal information is no longer required and if permitted by law, we will destroy or delete it from our systems in a secure manner. However, we may be required by law to retain certain information - for example, under the Public Records Act 2002 (Qld).
5. Accessing and correcting your personal information
If you wish to have access to any documents held by us which contain your personal information, please contact us (details below).
Please note that we may ask you to make your request in writing and provide us with evidence of your identity (for example, we may ask you to provide us with photo identification, such as a copy of your current driver's licence or passport).
Please also note that under some circumstances under the Act or other legislation, we may not be able to provide you with the access you have requested.
To effectively conduct our business with you, it is important that the personal information we hold about you is complete, accurate and current. At any time while we hold your personal information, we may ask you to tell us of any changes to your personal information. Alternatively, if you are aware that the personal information we hold needs to be corrected or updated, please contact us (details below). Under certain circumstances in the Act, we may not be required to correct your personal information.
Also, we may not be able to require third parties or our business partners to provide you with access to the personal information they hold about you.
If we decide not to provide you with access to or correct your personal information, we will give you reasons for our decision.
6. Dealing with QPAC online
We take reasonable steps to maintain the security of cookie and personal information we collect online. If your browser is correctly configured, it will advise you whether the information you are sending us will be secure (encrypted) or unsecure (unencrypted).
When you purchase tickets online from us, we use an industry approved 256 bit SSL Extended Validation Certificate) to protect the information you transmit to us during the transaction. SSL software encrypts any information you input.
We seek to keep current with available security and encryption technology so as to maintain the effectiveness of our security systems. However, no transmission over the internet can be guaranteed as totally secure and accordingly, we cannot warrant or ensure the security of any information you provide to us over the Internet. Please note that you transmit information at your own risk.
When you visit our website, we and/or our contractors may collect certain information about your visit. Examples of such information may include:
7. Overseas transfer of information
QPAC will only transfer your personal information to an entity outside of Australia if:
- you agree to the transfer;
- the transfer is authorised or required under a law;
- we are satisfied on reasonable grounds that the transfer is necessary to lessen or prevent a serious threat to the life, health, safety or welfare of an individual, or to public health, safety or welfare; or
- to enable us to detect fraud or unauthorised ticket onselling; or
- Two (2) or more of the following apply:
- we reasonably believe that the recipient is subject to a law, binding scheme or contract that effectively upholds principles for the fair handling of information that are substantially similar to the IPPs;
- the transfer is necessary for the performance of our functions in relation to you;
- the transfer is for your benefit but it is not practicable to seek your agreement, and if it were practicable to seek your agreement, you would be likely to give your agreement; and
- we have taken reasonable steps to ensure that the personal information we transfer will not be held, used or disclosed by the recipient in a way that is inconsistent with the IPPs
If you have a complaint about how we handled your personal information, please contact us (details below). Please note that we will ask you to lodge your complaint in writing.
- within 14 business days of receiving your complaint in writing - acknowledge receipt of your complaint; and
- within 45 business days of receiving your complaint - investigate the circumstances of your complaint and provide you with a response.
10. Our contact details
- by email: email@example.com
- in writing: The Privacy Officer, QPAC, PO Box 3567, South Bank QLD 4101