Privacy Policy

1. Who We Are

For Sure is an Australian music and live-events platform based in Canberra, Australian Capital Territory. We operate the Platform at app.forsureentertainment.com and associated mobile applications.

Privacy enquiries and complaints:
Email: hello@forsureentertainment.com
Postal: For Sure, Canberra ACT 2601, Australia

2. Age Restriction — Under 16s

The Platform is intended for users aged 16 years and over. In accordance with the Online Safety Amendment (Social Media Minimum Age) Act 2024 (Cth) and related Commonwealth legislation, we do not knowingly permit children under the age of 16 to create an account or use the Platform.

When you register, we collect your date of birth and verify that you are 16 or older before allowing account creation. If we become aware that a user is under 16, we will suspend that account and delete associated personal information as soon as reasonably practicable.

If you believe a child under 16 has created an account, please contact us immediately at hello@forsureentertainment.com.

3. What Personal Information We Collect

We collect personal information that is reasonably necessary for our functions and activities. This may include:

• Identity information: full name, username, date of birth, profile photo.
• Contact information: email address.
• Authentication data: password (stored as a hashed credential), or OAuth tokens if you sign in via Google.
• Location data: approximate or precise GPS coordinates when you use the check-in feature. We only collect location when you actively initiate a check-in and request your permission beforehand.
• Device and usage data: IP address, browser type, operating system, device identifiers, pages visited, actions taken on the Platform, and crash reports.
• Transaction data: payment method details (processed by Stripe — we do not store card numbers), subscription tier, purchase history.
• User-generated content: posts, comments, reviews, event information, images, and any other content you upload to the Platform.
• Communications: messages sent to us or other users through the Platform.
• Loyalty and engagement data: check-in records, stamp card history, attendance at events, points and rewards balances.

We collect sensitive information (such as precise location) only with your express consent and only for the purpose for which it is collected.

4. How We Collect Personal Information

We collect personal information:

• directly from you when you register, update your profile, use features, or contact us;
• automatically through cookies, analytics tools, and server logs when you interact with the Platform;
• from third-party authentication providers (Google) when you use social login; and
• from payment processors (Stripe) in relation to subscription and transaction activity.

Where it is lawful and practicable, you may interact with us anonymously or by pseudonym. However, most Platform features require an account.

5. Why We Collect and Use Your Personal Information

We collect and use personal information for the following primary purposes:

• to create and manage your account and verify your identity and age;
• to provide the Platform's features, including event discovery, check-ins, loyalty rewards, and social features;
• to process payments and manage subscriptions;
• to personalise your experience and improve the Platform;
• to send you transactional notifications (e.g. check-in confirmations, reward alerts);
• to send you marketing communications where you have consented or where permitted by the Spam Act 2003 (Cth);
• to comply with legal obligations and enforce our Terms of Service; and
• to conduct analytics and research to improve our services.

We will not use your personal information for a secondary purpose without your consent, unless an exception under the Privacy Act applies (for example, where required by law).

6. Disclosure of Personal Information

We may disclose your personal information to:

• Venue and artist partners: check-in and attendance data (but not payment information) may be shared with the venue or artist associated with the event you attend, for analytics and loyalty purposes.
• Service providers: third-party suppliers who assist us in operating the Platform, including Google (Firebase hosting, authentication, and cloud functions), Stripe (payment processing), and Resend (email delivery). These parties are bound by confidentiality obligations and may only use your data as directed by us.
• Law enforcement and regulators: where required or authorised by law, court order, or government authority.
• Business transfers: in connection with a merger, acquisition, or sale of all or part of our business, subject to the acquirer assuming obligations under this Privacy Policy.

We do not sell your personal information to third parties.

Some of our service providers (including Google and Stripe) are located outside Australia. By using the Platform, you consent to your personal information being transferred to, stored in, and processed in countries that may not have the same data protection laws as Australia. We take reasonable steps to ensure overseas recipients handle your information in a manner consistent with the APPs.

7. Cookies and Tracking Technologies

We use cookies, local storage, and similar technologies to:

• keep you logged in between sessions;
• remember your preferences;
• analyse usage patterns and improve the Platform; and
• deliver push notifications where you have consented.

You may disable cookies in your browser settings, but this may affect your ability to use the Platform. We do not use third-party advertising cookies.

8. Security of Personal Information

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. These measures include:

• encryption of data in transit (TLS/HTTPS) and at rest (Google Firebase);
• role-based access controls limiting who can access personal data;
• Firebase Security Rules restricting direct database access;
• hashed password storage; and
• regular review of our security practices.

No method of transmission over the internet is 100% secure. In the event of a data breach that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act.

9. Retention of Personal Information

We retain personal information for as long as necessary to provide the Platform and fulfil the purposes described in this Privacy Policy, or as required by law. When your account is deleted, we will take reasonable steps to destroy or de-identify your personal information within 90 days, except where we are required by law to retain it (for example, financial records under the Corporations Act 2001 (Cth)).

10. Your Rights and Choices

Under the Privacy Act 1988 (Cth), you have the right to:

• Access: request access to the personal information we hold about you;
• Correction: request correction of inaccurate, out-of-date, or incomplete information;
• Deletion: request deletion of your account and associated personal information (subject to legal retention obligations);
• Opt-out of marketing: unsubscribe from marketing communications at any time via the unsubscribe link in emails or through your account settings; and
• Location permissions: revoke location access at any time through your device settings (this will prevent check-in functionality).

To exercise these rights, contact us at hello@forsureentertainment.com. We will respond within 30 days. We may need to verify your identity before processing your request.

You can also request deletion of your data directly through the app: go to Settings → Danger Zone → Delete Account. Alternatively, email us at hello@forsureentertainment.com with the subject line "Data Deletion Request" and include your account email address.

11. Complaints

If you believe we have breached the APPs or this Privacy Policy, please contact us at hello@forsureentertainment.com. We will acknowledge your complaint within 5 business days and endeavour to resolve it within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

OAIC
Website: www.oaic.gov.au
Phone: 1300 363 992

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the revised version on the Platform and update the effective date. Where changes are material, we will notify you by email or via an in-app notice. Your continued use of the Platform after notification constitutes acceptance of the updated Policy.