Privacy Policy

1. About This Privacy Policy

Sammy Sessions respects the privacy of clients, prospective clients, event attendees, website visitors and other individuals who interact with Sammy Sessions.

This Privacy Policy explains how Sammy Sessions collects, holds, uses, discloses, protects and otherwise manages personal information.

This Privacy Policy is intended to operate consistently with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) to the extent that those laws apply to Sammy Sessions.

Where Sammy Sessions is exempt from a particular requirement under applicable privacy law, Sammy Sessions may nevertheless choose to follow the practices described in this Privacy Policy.

Nothing in this Privacy Policy limits any privacy right that cannot legally be excluded or restricted.

2. Definitions

For this Privacy Policy:

“Sammy Sessions”, “we”, “us” or “our” means the person or legal entity operating the Sammy Sessions business.

“Client” means an individual, business, organisation or other entity that makes, considers making or participates in a Booking with Sammy Sessions.

“Booking” means a booking for DJ services, a public appearance or another service specifically agreed to by Sammy Sessions.

“Personal Information” means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information is true or not and whether it is recorded in material form or not.

“Sensitive Information” has the meaning given under applicable Australian privacy law and may include information about matters such as health, racial or ethnic origin, religious beliefs, sexual orientation or other categories given special protection under law.

“Website” means any official website operated by Sammy Sessions.

“Social Media” includes official Sammy Sessions accounts or pages on platforms such as Facebook, Instagram, LinkedIn or other online platforms.

“Service Provider” means a third party engaged to assist Sammy Sessions with business operations, including payment processing, accounting, website hosting, cloud storage, email, IT, professional advice or similar services.

3. What Personal Information We May Collect

Depending on how a person interacts with Sammy Sessions, we may collect information including:

Identification and Contact Information

• name;
• business or organisation name;
• email address;
• telephone number;
• postal or business address where relevant;
• social media account or username where communication occurs through Social Media; and
• the name and contact details of an authorised representative.

Booking and Event Information

We may collect:

• Event date;
• Event location;
• venue details;
• booking type;
• requested Services;
• performance or appearance times;
• event contact persons;
• event requirements;
• agreed music or set requirements;
• accessibility information relevant to providing the Services;
• correspondence concerning the Booking;
• changes or cancellations;
• complaints;
• incident information; and
• other information reasonably necessary to organise or provide the Services.

Payment and Transaction Information

We may collect or hold:

• invoices;
• payment status;
• transaction references;
• amounts paid;
• amounts owing;
• refund information; and
• other accounting or transaction records.

Where payments are processed through a third-party payment provider, Sammy Sessions may not receive or retain complete payment card information.

Payment providers may collect and process payment information under their own privacy policies and terms.

Communications

We may retain communications including:

• emails;
• SMS messages;
• enquiry forms;
• booking enquiries;
• Social Media messages;
• complaints;
• feedback; and
• other correspondence.

Website Information

When a person uses our Website, information may automatically be collected through standard internet technologies.

Depending on the systems used, this may include:

• IP address;
• browser type;
• device type;
• pages visited;
• date and time of access;
• referring website;
• approximate geographical information;
• Website usage information; and
• cookie or similar technology information.

Photographs and Video

Where relevant to Sammy Sessions' activities, photographs, audio or video may be created or collected at Events.

This may include photographs or recordings showing Sammy Sessions, Event attendees, performers or the Venue.

The use of photographs and recordings is addressed further below.

4. Sensitive Information

Sammy Sessions does not seek to collect Sensitive Information unless it is reasonably necessary for a legitimate business purpose or otherwise permitted by law.

For example, a Client may voluntarily provide information about an accessibility requirement, medical consideration or other circumstance where that information is necessary to safely or appropriately organise an Event.

Where consent is legally required to collect Sensitive Information, Sammy Sessions will seek that consent.

Clients should avoid providing Sensitive Information that Sammy Sessions does not reasonably need.

5. How We Collect Personal Information

Personal Information may be collected directly from an individual when they:

• make a Booking;
• request a quote;
• contact Sammy Sessions;
• complete an online form;
• telephone, email or message Sammy Sessions;
• communicate through Social Media;
• make a payment;
• attend an Event;
• submit a complaint;
• provide feedback;
• subscribe to communications; or
• otherwise interact with Sammy Sessions.

Information may also be received from another person where reasonably necessary.

Examples may include information supplied by:

• an Event organiser;
• an employer;
• a company representative;
• a venue;
• an authorised representative;
• a booking agent;
• an Event coordinator; or
• another person authorised to arrange the Booking.

Where reasonably practicable, Sammy Sessions will collect Personal Information directly from the individual concerned.

6. Unsolicited Personal Information

Sammy Sessions may occasionally receive Personal Information that was not requested.

Where this happens, Sammy Sessions will determine whether the information could lawfully have been collected.

Where the information is not reasonably required and Sammy Sessions is legally required or otherwise considers it appropriate to do so, the information may be securely deleted, destroyed or de-identified.

7. Why We Collect and Use Personal Information

Sammy Sessions may collect, hold and use Personal Information for purposes including:

• responding to enquiries;
• preparing quotes;
• accepting and administering Bookings;
• communicating with Clients;
• providing DJ services;
• providing Public Appearance services;
• organising Events;
• coordinating with venues;
• confirming Event details;
• managing music or set requirements;
• processing payments;
• issuing invoices and receipts;
• maintaining financial records;
• managing cancellations;
• providing customer service;
• investigating complaints;
• managing safety incidents;
• investigating damage to Equipment;
• recovering amounts lawfully owing;
• maintaining insurance records;
• obtaining professional advice;
• complying with legal obligations;
• resolving disputes;
• maintaining Website functionality;
• improving Services;
• preventing fraud or misuse;
• protecting Sammy Sessions, Clients, attendees and property;
• maintaining business records; and
• conducting legitimate business administration.

We will not intentionally use Personal Information for an unrelated purpose where doing so would be contrary to applicable privacy law.

8. Information Required to Make a Booking

A person may enquire about Sammy Sessions without necessarily providing every category of Personal Information listed in this Privacy Policy.

However, certain information is necessary to enter into and administer a Booking.

For example, Sammy Sessions generally needs sufficient information to identify:

• who is making the Booking;
• how to contact the Client;
• where the Event will occur;
• when the Event will occur;
• what Services are required; and
• how payment will be arranged.

If required information is not provided, Sammy Sessions may be unable to:

• provide an accurate quote;
• accept a Booking;
• communicate regarding an Event; or
• provide the requested Services.

9. Anonymity and Pseudonyms

Where lawful and reasonably practicable, individuals may interact with Sammy Sessions anonymously or using a pseudonym.

However, anonymity or use of a pseudonym may not be practicable where Sammy Sessions reasonably needs to establish a person's identity to:

• enter into a Booking;
• issue an invoice;
• process a payment;
• attend a Venue;
• resolve a dispute;
• respond to an incident;
• comply with legal requirements; or
• recover money lawfully owing.

10. Disclosure of Personal Information

Sammy Sessions does not sell Personal Information.

Personal Information may be disclosed where reasonably necessary to operate the business or provide the Services.

Recipients may include:

• venues;
• Event organisers;
• contractors working with Sammy Sessions;
• payment processors;
• accountants and bookkeepers;
• insurers;
• insurance brokers;
• website providers;
• hosting providers;
• email and communication providers;
• cloud storage providers;
• IT providers;
• professional advisers;
• lawyers;
• technicians;
• debt recovery providers where lawful;
• government agencies;
• regulators;
• courts or tribunals; and
• law enforcement authorities where legally required or reasonably necessary.

Only information reasonably relevant to the particular purpose should be disclosed.

11. Disclosure Required by Law or for Safety

Sammy Sessions may disclose Personal Information where disclosure is required or authorised by law.

Information may also be disclosed where reasonably necessary in connection with:

• suspected unlawful activity;
• threats of violence;
• harassment;
• assault;
• theft;
• fraud;
• Equipment damage;
• insurance claims;
• emergencies;
• protecting the safety of a person;
• legal proceedings; or
• obtaining legal advice.

Nothing in this Privacy Policy prevents Sammy Sessions from contacting police, emergency services, insurers, lawyers or other appropriate authorities where reasonably necessary.

12. Overseas Processing and Storage

Some third-party technology and Service Providers used by Sammy Sessions may operate or store information using servers located outside Australia.

This may include providers of:

• cloud storage;
• website hosting;
• email;
• accounting software;
• payment processing;
• Social Media;
• analytics; or
• other online business services.

The countries in which information is processed may vary depending on the provider and its infrastructure.

Where Australian privacy law requires Sammy Sessions to take particular steps in relation to an overseas disclosure, Sammy Sessions will take the steps required by applicable law.

Clients may contact Sammy Sessions if they would like further information about known overseas handling arrangements relevant to their Personal Information.

13. Website Cookies and Analytics

The Website may use cookies or similar technologies.

A cookie is a small piece of information stored on a user's device by a website or related service.

Cookies or similar technologies may be used to:

• operate Website functionality;
• remember preferences;
• improve Website performance;
• understand Website traffic;
• analyse Website use;
• detect technical problems; or
• assist with security.

Some cookies may be placed by third-party providers.

Users may be able to restrict or disable cookies through their browser settings.

Disabling cookies may affect the functionality of parts of the Website.

14. Social Media

Sammy Sessions may communicate with individuals through third-party Social Media platforms.

Information submitted through a Social Media platform may also be collected and processed by that platform according to its own privacy policy.

Sammy Sessions does not control the privacy practices of third-party Social Media platforms.

Individuals should review the privacy settings and policies of the relevant platform.

15. Photographs, Video and Event Content

Photographs or video may occasionally be captured at Events for legitimate business, promotional or Social Media purposes.

Where Sammy Sessions intends to use an identifiable person's image in circumstances where consent is required, appropriate consent will be sought.

A person may advise Sammy Sessions that they do not wish to be intentionally featured in Sammy Sessions promotional content.

Where an Event organiser imposes photography or filming restrictions, those restrictions should be disclosed before the Event.

Children and Young People

Sammy Sessions will take additional care when publishing identifiable images of children or young people.

Where consent is required, Sammy Sessions will seek appropriate consent from a parent, guardian or authorised Event organiser before intentionally using an identifiable child's image for Sammy Sessions promotional purposes.

16. Direct Marketing

Sammy Sessions may occasionally send information about:

• upcoming Events;
• Services;
• availability;
• announcements;
• promotions; or
• other Sammy Sessions activities.

Direct marketing will be conducted in accordance with applicable Australian law.

Where required, consent will be obtained before sending marketing communications.

Marketing communications will provide a reasonable method of opting out or unsubscribing.

A person may request at any time that Sammy Sessions stop sending them direct marketing communications.

Sammy Sessions will take reasonable steps to action a valid opt-out request.

Operational communications relating to an existing Booking, invoice, payment, safety matter or other existing business relationship are not necessarily marketing communications.

17. Security of Personal Information

Sammy Sessions takes reasonable steps appropriate to the nature of the information and business to protect Personal Information from:

• misuse;
• interference;
• loss;
• unauthorised access;
• unauthorised modification; and
• unauthorised disclosure.

Security measures may include, where appropriate:

• password protection;
• device security;
• access restrictions;
• secure online services;
• software updates;
• secure storage;
• limiting access to information;
• appropriate disposal practices; and
• reputable third-party service providers.

No method of electronic transmission or storage is completely risk-free.

Accordingly, Sammy Sessions does not represent or guarantee that unauthorised access, cyberattack, loss or other security incidents can never occur.

18. Data Breaches

If Sammy Sessions becomes aware of a suspected data breach, reasonable steps will be taken to investigate and respond to the incident.

Where the Notifiable Data Breaches Scheme or another legal notification requirement applies, Sammy Sessions will comply with applicable notification obligations.

This may include notifying affected individuals and the Office of the Australian Information Commissioner where legally required.

19. How Long We Keep Personal Information

Personal Information is retained for as long as reasonably necessary for the purpose for which it was collected or as otherwise required or permitted by law.

Retention may be necessary for purposes including:

• accounting;
• taxation;
• insurance;
• contract administration;
• dispute resolution;
• legal obligations;
• safety records; and
• legitimate business records.

When Personal Information is no longer reasonably required, and retention is not required by law, Sammy Sessions may take reasonable steps to securely destroy or de-identify it.

20. Access to Personal Information

A person may request access to Personal Information Sammy Sessions holds about them.

Requests should be made using the contact details in section 27.

Sammy Sessions may require sufficient information to verify the identity of the person making the request before providing access.

Where Australian privacy law applies, access will be provided within the requirements and exceptions permitted by that law.

There may be circumstances where access cannot lawfully or reasonably be provided.

Where required by law, Sammy Sessions will explain the basis for refusing access.

21. Correcting Personal Information

Sammy Sessions takes reasonable steps to ensure Personal Information used for business purposes is accurate, complete and up to date where appropriate.

A person who believes information held about them is:

• inaccurate;
• out of date;
• incomplete;
• irrelevant; or
• misleading

may request that it be corrected.

Where required by applicable law, Sammy Sessions will take reasonable steps to correct information or otherwise deal with the request in accordance with privacy law.

22. Information About Other People

A Client should not provide Sammy Sessions with another person's Personal Information unless:

• the information is reasonably necessary for the Booking;
• the Client is authorised to provide it; or
• providing it is otherwise permitted by law.

For example, an Event organiser may provide the contact details of the Venue manager or Event coordinator where that information is reasonably required to organise the Event.

Clients should avoid supplying unnecessary Sensitive Information about Event attendees.

23. Third-Party Websites and Services

The Sammy Sessions Website or Social Media pages may contain links to third-party websites or services.

Those third parties operate independently from Sammy Sessions.

Sammy Sessions is not responsible for the privacy practices of an independent third-party website merely because a link to that website appears on a Sammy Sessions Website or Social Media page.

Users should review the privacy policy of the relevant third party before providing Personal Information.

24. Automated Decision-Making

Sammy Sessions does not currently use automated computer systems to make decisions that could reasonably be expected to significantly affect an individual's legal rights or interests.

If this practice changes, this Privacy Policy will be reviewed and updated where required by applicable Australian privacy law.

25. Privacy Complaints

A person who believes Sammy Sessions has mishandled their Personal Information should contact Sammy Sessions in writing.

The complaint should include sufficient information to identify:

• the person making the complaint;
• the privacy issue;
• the Personal Information concerned, where relevant;
• what occurred; and
• the outcome being requested.

Sammy Sessions will take reasonable steps to consider and respond to a genuine privacy complaint.

Where applicable privacy legislation provides a person with the right to make a complaint to the Office of the Australian Information Commissioner (OAIC), nothing in this Privacy Policy prevents them from exercising that right.

26. Changes to This Privacy Policy

Sammy Sessions may update this Privacy Policy where:

• information-handling practices change;
• new technology or Service Providers are introduced;
• Services change;
• legal requirements change; or
• an update is otherwise reasonably required.

The current version should be made available through the Sammy Sessions Website or another appropriate location.

The Last Updated date at the beginning of this Privacy Policy identifies the date of the most recent revision.

Updates apply from the date the revised Privacy Policy is published unless otherwise stated.

27. Contacting Sammy Sessions About Privacy

Questions, access requests, correction requests or privacy complaints should be directed to:

Sammy Sessions

Privacy Contact: Sammy Sessions

Email: sammy@sammysessions.com.au

Phone: +61 466 181 223

Website: sammysessions.com

Legal/Business Name: Samuel Jee Man Hobbs (sole trader)

ABN: 33 424 487 509

28. Australian Privacy Rights

Nothing in this Privacy Policy excludes, restricts or modifies a right, remedy or protection available under the Privacy Act 1988 (Cth), the Australian Privacy Principles or another applicable Australian law where that right, remedy or protection cannot lawfully be excluded, restricted or modified.

Where this Privacy Policy conflicts with a mandatory requirement of applicable law, the mandatory legal requirement prevails.