Privacy Policy for Vizabox

Last updated: 20/05/2025

1. Introduction
Kouragen Pty Ltd trading as Vizabox (“we”, “us” or “our”) operates the website https://vizabox.com.au (the “Site”) and related services (together, the “Services”). We are committed to protecting your personal information and respecting your privacy.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our Site, register for art classes, subscribe to newsletters, or otherwise interact with us. It also describes your rights under Australian and international privacy laws, including the Australian Privacy Act 1988 (Cth) (the “Privacy Act”) and, where applicable, the EU General Data Protection Regulation (“GDPR”).

2. What Information We Collect
We may collect and process the following categories of personal information:

• Contact & Identifiers: Name, email address, phone number, postal address.

• Account & Registration Data: Username, password, payment details (e.g. credit card tokens via our payment gateway), user preferences.

• Usage Data: IP address, browser type and version, pages visited, time and date stamps, referral URLs, device identifiers.

• Communications & Marketing Preferences: Your consent choices, email subscription status, survey responses.

• Photographs, video and/or audio recordings that directly or indirectly identify you (“Media Material”)

3. How We Collect Your Information

• Directly from you: When you fill out forms, register for classes or newsletters, make payments, or contact us.

• Automatically: Through cookies, tracking pixels, log files, and similar technologies when you use our Site.

• From third parties: Service providers (e.g. Mailchimp, Stripe), social media platforms, analytics partners.

• We may collect Media Material: when you attend a Vizabox workshop, event or other activity, or when you submit content directly to us (for example, by tagging us on social media).

4. Purposes & Legal Basis for Processing
We use your personal information for:

• Service delivery: Processing registrations, class bookings, payments, and sending confirmations.

• Communications: Sending newsletters, promotions, updates, and customer support responses.

• Marketing & analytics: Personalizing content, measuring campaign performance, improving our Services.

• Legal compliance & safety: Detecting fraud, enforcing our Terms & Conditions, complying with legal obligations.

Under the Privacy Act and GDPR, our legal basis for processing includes:

• Consent: When you opt in to email marketing or other communications.

• Performance of contract: To fulfill your class bookings and related services.

• Legitimate interests: For site security, fraud prevention, and service improvement.

• Legal obligations: To comply with reporting or record-keeping laws.

5. Images & Recordings

When you tick the “Media Consent & Release” box (or sign a hard-copy equivalent) you:

• grant Kouragen Pty Ltd trading as Vizabox (ABN 82 667 778 449) a non-exclusive, worldwide, perpetual and royalty-free licence to use, adapt, publish and share the resulting Media Material for marketing and promotional purposes;
• Acknowledge that the Media Material may be stored on secure servers outside Australia (see §7 Overseas disclosures); and
• Understand that you will receive no remuneration for this use.

Withdrawal of consent – You can withdraw at any time by emailing privacy@vizabox.com.au. We will stop any new use within a reasonable period, but previously published content may remain in third-party archives, caches, print runs or user re-posts beyond our control.

6. Disclosure of Your Information
We may share your personal information with:

• Service providers & processors: Email platform (e.g. Mailchimp), payment gateway (e.g. Stripe), analytics tools (e.g. Google Analytics).

• Business partners: Artists, class venues, suppliers engaged in delivering art programs.

• Legal authorities: When required by law, court order, or to protect our rights, safety, or property.

• Affiliates & successors: In connection with a merger, acquisition, or sale of assets.

We require all third parties to respect the security of your personal information and to use it only for the purposes we have authorized.

7. Cookies & Tracking Technologies
We use cookies and similar technologies to:

• Remember your preferences and login status.

• Measure and analyze how you use the Site.

• Provide tailored advertising (where you have consented).

You can manage or disable cookies through your browser settings, but some features of the Site may not function properly without them.

8. Data Security
We implement reasonable technical and organizational safeguards to protect personal information against unauthorized access, alteration, disclosure, or destruction. All Site traffic is encrypted via HTTPS. While we strive to protect your data, no system is completely secure—if a breach occurs, we will comply with applicable notification laws.

9. Data Retention
We retain your personal information only as long as necessary for the purposes outlined in this policy, or to comply with legal, tax, or accounting obligations. After that, we will securely delete or de‑identify it. Raw photo and video files are retained for a maximum of five (5) years, after which they are archived or securely deleted unless needed for ongoing campaigns or legal purposes.

10. International Transfers
Your information may be transferred to—and maintained on—servers located outside your country of residence. Where required, we will ensure a similar degree of protection by using standard contractual clauses or other approved transfer mechanisms. Images may be hosted on servers outside of Australia. By giving consent you acknowledge and agree to this overseas disclosure (APP 8).

11. Your Rights
Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal information we hold about you.

• Correction: Ask us to correct or update inaccurate or incomplete data.

• Deletion: Request deletion of your personal data (the “right to be forgotten”).

• Objection & Restriction: Object to or request restriction of our processing of your data.

• Data Portability: Receive your data in a structured, commonly used format.

• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at the details below. We will respond within the timeframes required by applicable laws.

12. Children’s Privacy

12.1  Applicability  

We occasionally run children’s parties, workshops and other events where participants may be under 16 years old (“Child Participants”).

12.2  Parental / Guardian Consent  

We do not knowingly collect personal information—including photographs, video or audio (“Media Material”)—from a Child Participant unless we have first obtained verifiable consent from a parent or legal guardian. Consent is captured through our “Media Consent & Release” form or a written equivalent at the event sign-in desk.

12.3  What We Collect  

With consent, we may collect:  

• the child’s name, age and any dietary or accessibility information needed to run the activity;  

• Media Material that directly or indirectly identifies the child (see 5 Images & Recordings).

12.4  How We Use It  

Personal information of Child Participants is used solely to:  

• administer and safeguard the activity; and  

• create and publish marketing content in accordance with  Clause 5, where consent has been provided.

12.5  Withdrawal and Deletion  

A parent or guardian may withdraw consent or request deletion of the child’s personal information at any time by emailing privacy@vizabox.com.au. We will act on the request within a reasonable period, subject to the same limitations outlined in Clause 5 (e.g. previously published material may remain in public archives, caches or user re-posts beyond our control).

12.6  No Direct Marketing to Children  

We do not send marketing communications directly to Child Participants.

13. Changes to This Privacy Policy

We may update this policy from time to time. We will post the revised version on this page with a new “Last updated” date. Your continued use of the Services after changes indicates your acceptance.

14. Contact Us
If you have questions, complaints, or wish to exercise your rights, please contact our Privacy Officer:

Kouragen Pty Ltd Trading as Vizabox
Email: Admin@vizabox.com.au

You may also lodge a complaint with the Office of the Australian Information Commissioner (OAIC) or, for EU residents, your local Data Protection Authority.

Thank you for trusting Vizabox with your personal information. We’re committed to keeping it safe and transparent.