Privacy Policy

Last updated 4 October 2026

This policy explains how The Art Club Sydney collects, uses, stores and shares personal information, and how you can access or correct it or make a complaint. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Who we are

The Art Club Sydney (“we”, “us”, “our”) runs art classes, school holiday camps and birthday parties for preschoolers, kids, teens and adults at our studios in North Bondi and Double Bay, Sydney. You can contact us about privacy at any time at info@theartclubsydney.com.

2. What we collect

We only collect the information we need to run our classes, camps and parties. This includes:

Parent or guardian details: name, email address and phone number, plus emergency contact and pick-up details where you give them.
Child’s details: name, age, and any medical, allergy or other notes you choose to tell us so we can keep them safe.
Adult students: your name, email address and phone number.
Booking and payment details: the classes, camps, parties, packs and gift vouchers you book or buy, attendance, and payment records (amount, date and status). Card payments are processed by Stripe. We never see or store your full card number.
Account login: your email address and password if you create an account. Passwords are stored in encrypted (hashed) form, so we cannot read them.
Messages and website data: what you tell us by email, phone or our forms, and basic technical information such as your IP address, browser type and cookies when you use our website.

We usually collect this information directly from you, for example when you book, create an account or contact us. If you don’t give us the information we ask for, we may not be able to take your booking or care for your child properly.

3. Why we use it

We use personal information to:

take and manage bookings, enrolments, packs, Auto Pay, gift vouchers and party requests;
take payments and issue receipts and refunds;
look after students’ safety and wellbeing, including medical and allergy needs and pick-up arrangements;
contact you about your bookings, such as confirmations, reminders, changes and cancellations;
manage your account and respond to your questions;
send you marketing communications if you have not opted out (see “Marketing communications” below);
run, secure and improve our website and services, and meet our legal obligations.

4. Children’s information

Most of our students are children. We collect children’s information from their parent or guardian, and we treat health, medical and allergy notes as sensitive information. We only use them to keep your child safe and only share them with our teachers and staff who need to know. Please keep these notes up to date in My Account or by emailing us. We do not send marketing to children.

5. Who we share it with

We do not sell, trade or rent your personal information. We only share it with people who help us run the business, and only as much as they need:

Our teachers and staff, so they can run classes and camps and look after students.
Stripe, which processes card payments and stores payment details securely.
Brevo (Sendinblue SAS), our email and SMS service for marketing messages.
Google Workspace, which we use for our business email.
GoDaddy, which hosts our website and its database.

We may also disclose information if the law requires it, or where it is needed to prevent a serious threat to someone’s life, health or safety.

6. Overseas disclosure

Some of our service providers store or process information outside Australia. Brevo stores our mailing list mainly in the European Union. Stripe, Google and GoDaddy may store or process information in countries including the United States and others where they or their data centres operate. Before we use an overseas provider, we take reasonable steps to ensure it handles your information consistently with the Australian Privacy Principles.

7. Marketing communications

We may send you news, offers and updates about our classes, camps and events by email and SMS.

We use Brevo (Sendinblue SAS), a third-party email and SMS service, to manage our mailing list and send these messages. Your name, email address, phone number and studio may be stored on Brevo’s servers, which are located outside Australia (mainly in the European Union). We take reasonable steps to ensure overseas providers handle your information consistently with the Australian Privacy Principles.

You can unsubscribe at any time using the link in any email, by replying STOP to an SMS, by turning off marketing in My Account, or by emailing info@theartclubsydney.com.

8. Security and how long we keep it

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, change or disclosure. These include secure (HTTPS) connections, password-protected accounts and restricted staff access. We keep information for as long as we need it to provide our services and to meet legal, tax and insurance record-keeping requirements. After that we delete it or de-identify it.

9. Cookies

Our website uses cookies to keep you logged in, remember your booking selections and help the site work properly. You can block or delete cookies in your browser settings, but parts of the site, such as logging in and booking, may not work without them.

10. Access and correction

You can ask for a copy of the personal information we hold about you or your child, and ask us to correct it if it is wrong, out of date or incomplete. You can update most details yourself in My Account, or email info@theartclubsydney.com. We will respond within a reasonable time, usually within 30 days. If we can’t give you access or make a correction, we will tell you why in writing.

11. Complaints

If you have a concern about how we have handled your personal information, please contact us first at info@theartclubsydney.com and tell us what happened. We will look into it and reply within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.

12. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.

13. Contact us

The Art Club Sydney
North Bondi and Double Bay, Sydney NSW
Email: info@theartclubsydney.com