Privacy Policy

1. About Us

Caloundra Markets ("we", "us", "our") acts on behalf of Caloundra Markets as a booking platform provider with their regular local markets on the Sunshine Coast, Queensland, Australia. This Privacy Policy explains how we (TEKRAM) collect, use, store, and protect personal information in connection with these markets, stallholder management platform, and website.

We are committed to complying with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This policy applies to all individuals who interact with us, including stallholders, market visitors, website users, and job applicants.

2. Information We Collect

We collect personal information that is reasonably necessary for our operations. This may include:

Stallholder & Vendor Information

• Full name and trading name
• Email address and phone number
• Postal and business address
• ABN / business registration details
• Product descriptions and business category
• Public liability insurance details and document uploads
• Food handling licences or certifications (where applicable)
• Bank account details (for payment of refunds or market fees)
• Booking history and attendance records

Website & Platform Usage

• IP address and browser/device type
• Pages visited, time on site, and referring URLs
• Account login activity
• Form submissions and enquiries

Payment Information

Payments are processed via a secure third-party payment provider (Stripe). We do not store full credit card numbers or CVV details. Transaction records (amount, date, reference) are retained for accounting and compliance purposes.

How We Collect Information

• Directly from you when you complete an application, booking, or contact form
• When you create or use an account on our stallholder platform
• Automatically through cookies and website analytics tools
• From publicly available sources (e.g. ABN lookup for business verification)

3. How We Use Your Information

Market Operations

• Processing stallholder applications and bookings
• Allocating stall sites and managing market logistics
• Verifying licences, insurance, and compliance documents
• Processing payments and issuing invoices and receipts
• Managing check-ins, no-shows, and waitlists

Communications

• Sending booking confirmations, reminders, and updates
• Notifying you of market cancellations or changes
• Responding to your enquiries and support requests
• Sending market newsletters and announcements (where you have opted in)

Legal Obligations

• Complying with applicable Australian laws and regulations
• Responding to lawful requests from government authorities
• Resolving disputes and enforcing our terms and conditions

We will not use your personal information for a secondary purpose unless that purpose is related to the primary purpose of collection and you would reasonably expect such use, or you have given your consent.

4. Disclosure of Information

We may disclose personal information to:

• Technology service providers — including our stallholder management platform, hosting provider, and payment processor (Stripe)
• Email and communication providers — for sending transactional and operational communications
• Accountants and legal advisers — where necessary for financial or legal purposes
• Government agencies or regulators — where required or authorised by law
• Market site owners or council — where required by venue or permit conditions

Overseas Disclosure

Some of our service providers may store or process data outside Australia (including in the United States). We take reasonable steps to ensure they handle information consistently with the Australian Privacy Principles.

What We Do Not Do

• We do not sell your personal information to third parties
• We do not share your information for third-party marketing without your consent
• We do not publish stallholder personal details on our public website without permission

5. Data Security

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access. Security measures include:

• Encrypted connections (HTTPS/TLS) across our website and platform
• Password-protected accounts with access controls
• Secure Australian-hosted infrastructure
• Limited staff access on a need-to-know basis
• Regular security reviews and software updates

Notifiable Data Breaches

We comply with the Notifiable Data Breaches (NDB) scheme under the Privacy Act 1988. If a data breach likely to cause serious harm occurs, we will notify affected individuals and the OAIC as required by law.

6. Cookies & Tracking

Our website uses cookies to improve functionality and user experience. Types we use:

• Essential cookies — required for the website and platform to function (session management, login state)
• Analytics cookies — help us understand how visitors use our site so we can improve it
• Preference cookies — remember your settings and choices

You can control cookies through your browser settings. We do not use cookies to serve advertising or track you across unrelated websites.

7. Data Retention

• Active stallholder accounts — retained while the account is active and for a reasonable period after last activity
• Financial and transaction records — minimum 7 years in accordance with Australian tax law
• Compliance documents (insurance, licences) — retained for the duration of the stall licence plus a reasonable period
• Enquiry and contact form submissions — up to 2 years unless part of an ongoing relationship
• Website analytics data — aggregated or anonymised after 26 months

When personal information is no longer required, we will take reasonable steps to destroy or de-identify it securely.

8. Your Rights

Under the Australian Privacy Principles, you have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — ask us to correct inaccurate, out-of-date, or incomplete information
• Opt out of marketing — unsubscribe from non-essential communications at any time
• Complain — lodge a complaint if you believe we have mishandled your personal information

To exercise any of these rights, please contact us using the details in Section 11. We will respond within 30 days and may need to verify your identity before processing a request.

9. Children's Privacy

Our stallholder platform and services are intended for adults aged 18 and over. We do not knowingly collect personal information from children under 18. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The updated policy will be posted on this page with a revised "Last Updated" date. Where changes are material, we will take reasonable steps to notify active stallholders directly. Continued use of our platform after any changes constitutes acceptance of the updated policy.

11. Contact & Complaints

For privacy enquiries, access requests, corrections, or complaints, please contact us:

Complaint Process

• We will acknowledge your complaint within 5 business days
• We will investigate and respond within 30 days
• If unresolved, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or 1300 363 992