PermaBooth Privacy Policy

Last Updated: 1 June 2026

1. Introduction

It Was All A Dream Pty Ltd (ABN 37 627 932 209), trading as PermaBooth ("PermaBooth", "we", "us", "our"), is committed to protecting your privacy and handling your Personal Information in a transparent and responsible manner.

This Privacy Policy explains how we collect, use, disclose, store and protect Personal Information when you:

  • use a PermaBooth photo booth;

  • visit our website;

  • contact us;

  • participate in a promotion, activation or event involving a PermaBooth installation; or

  • otherwise interact with our services.

We have adopted the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth).

A copy of the Australian Privacy Principles may be obtained from the Office of the Australian Information Commissioner (OAIC) at https://www.oaic.gov.au

By using our services, you acknowledge that your Personal Information will be handled in accordance with this Privacy Policy.

2. What is Personal Information?

Personal Information means information or an opinion about an identified individual, or an individual who is reasonably identifiable.

Depending on how you interact with our services, Personal Information may include:

  • First name and last name

  • Email address

  • Mobile phone number 

  • Photographs and images

  • Event, venue and session information

  • Marketing consent preferences

  • Information submitted through forms or enquiries

  • Any other information voluntarily provided to us

Photographs captured through our photo booths may constitute Personal Information where an individual can reasonably be identified.

3. Sensitive Information

Certain photographs captured through our services may incidentally contain Sensitive Information as defined under the Privacy Act 1988 (Cth), including information that may reveal racial or ethnic origin, religious beliefs, disability, health information or other sensitive attributes.

Where Sensitive Information is collected incidentally through the normal use of our services, it will only be used, stored or disclosed in accordance with this Privacy Policy, with consent, or where otherwise permitted or required by law.

4. What Information We Collect

We collect only the information reasonably necessary to provide our services.

Depending on the installation and configuration of a particular photo booth, we may collect:

  • Photographs and digital images

  • First name

  • Last name

  • Email address

  • Marketing opt-in status

  • Session identifier

  • Date and time of collection

We do not collect or store sensitive financial information such as payment card numbers. Payment information is processed directly by third-party payment providers as described in Section 8 of this Privacy Policy.

5. How We Collect Information

We generally collect Personal Information directly from individuals when they:

  • Use a PermaBooth photo booth

  • Enter their details to receive photos digitally

  • Opt in to marketing communications

  • Submit an enquiry through our website

  • Contact us by email, phone or social media

  • Participate in a promotion, activation or event

Where reasonable and practicable to do so, we collect Personal Information directly from you.

6. Why We Collect Personal Information

We collect and use Personal Information to:

  • Deliver photo booth services

  • Provide digital photo delivery

  • Host and manage online galleries

  • Provide customer support

  • Maintain business records

  • Improve our services

  • Facilitate marketing programs where consent has been provided

  • Comply with legal obligations

If you choose not to provide certain information, some services may not be available to you.

7. Venue and Client Data Sharing

Standard Venue Integrations

Where a guest chooses to receive photos digitally and provides marketing consent, PermaBooth may share the following information with the venue hosting the photo booth:

  • Email address

  • Session identifier

  • Date and time of collection

Custom Venue Integrations

Certain venues may request custom integrations with their customer relationship management (CRM), marketing or customer engagement systems.

Where a guest has provided consent, additional information may be shared, including:

  • First name

  • Last name

  • Email address

  • Marketing consent status

  • Session date and time

  • Venue identifier

Photographs are not shared with venue marketing systems unless specifically disclosed at the point of collection.

Private Bookings

For private events, corporate activations and venue hires, photographs and galleries may be provided to the client or event organiser who engaged PermaBooth to provide the service.

8. Payment Information

PermaBooth does not collect, store, process or transmit payment card information.

All card transactions conducted through PermaBooth installations are processed directly by Nayax and its payment processing infrastructure.

PermaBooth does not have access to guests' full payment card details and does not store payment card information on booth computers, cloud systems or internal databases.

9. Disclosure of Personal Information

We may disclose Personal Information to:

  • Employees and contractors who require access to perform their duties

  • Venues and clients as described in this Privacy Policy

  • Technology and cloud service providers

  • Payment service providers

  • Professional advisers

  • Government authorities, regulators or law enforcement agencies where required by law

This Privacy Policy only applies to our services. Your Personal Information will not be shared, sold, rented or disclosed to third parties except as described in this Privacy Policy.

10. International Data Transfers

Some of our service providers may process or store information outside Australia.

PermaBooth currently uses third-party providers including:

  • Breeze Cloud

  • Google Workspace and Gmail

  • Nayax

  • Other technology providers required to operate our services

Further information regarding the privacy practices of these providers can be obtained from their respective websites.

Breeze Cloud (We Fly Kites, Inc.) services are primarily hosted within the European Union using infrastructure provided by:

  • Vultr Holdings LLC (Germany)

  • Backblaze B2 Europe Central (Amsterdam)

  • CloudConvert GmbH (Germany)

  • Bunny.net d.o.o. (Slovenia)

Where information is transferred internationally, we take reasonable steps to ensure service providers maintain appropriate security and privacy protections.

Some service providers may also operate infrastructure in other jurisdictions from time to time. The locations in which personal information is processed or stored may change as service providers update their infrastructure and services.

11. Data Security

We take reasonable steps to protect Personal Information from misuse, interference, loss, unauthorised access, modification and disclosure.

Security measures may include:

  • Password-protected systems

  • Restricted access controls

  • Encryption during transmission

  • Secure cloud hosting providers

  • Multi-factor authentication

  • Ongoing monitoring and maintenance

While we take reasonable precautions, no system can guarantee absolute security.

12. Data Retention

Photos, email logs and other session records stored locally on booth computers are generally retained for up to thirty (30) days before being deleted as part of PermaBooth's data retention procedures, unless a longer retention period is required for troubleshooting, legal obligations, client reporting requirements or ongoing investigations.

Photos and digital content uploaded to Breeze Cloud may remain available until manually deleted by PermaBooth, the venue operator or the client who commissioned the service.

When Personal Information is no longer required, we will take reasonable steps to securely delete or de-identify it.

13. Marketing Communications

Where you have provided consent, the venue hosting the photo booth may send marketing communications.

You may opt out of receiving marketing communications at any time by:

  • Clicking the unsubscribe link included in communications; or

  • Contacting the sender directly.

14. Children's Privacy

Due to the nature of our services, PermaBooth installations may be used by children at public, family-friendly or mixed-age venues. We do not independently verify the age of users or actively collect age-related information.

To the extent permitted by law, any use of a PermaBooth installation by a child is taken to occur with the consent of a parent or legal guardian, or under the supervision of a venue operator, event organiser or other responsible adult.

Any Personal Information relating to children is collected only as part of the normal operation of our services and for the purposes described in this Privacy Policy.

If you are a parent or guardian and have concerns about a child's Personal Information, please contact us at hello@permabooth.com.au and we will take reasonable steps to investigate and respond to your request.

15. Website Analytics and Cookies

Our website may use cookies, analytics tools and similar technologies to:

  • Understand website usage

  • Improve website performance

  • Enhance user experience

You can control cookies through your browser settings.

16. Access and Correction

We take reasonable steps to ensure that the Personal Information we hold is accurate, complete and up to date. If you believe any information we hold is inaccurate, please contact us so that we can correct our records.

You may request access to Personal Information we hold about you and request corrections if the information is inaccurate, incomplete or out of date.

We may require proof of identity before processing such requests.

17. Complaints

If you believe we have breached your privacy obligations or have concerns about how your Personal Information has been handled, please contact us at hello@permabooth.com.au.

We will investigate and respond within a reasonable timeframe.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).

18. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our business practices, technology, legal obligations or services.

The most current version of this Privacy Policy will always be available on our website.

19. Contact Us

You can contact PermaBooth about your Personal Information, this Privacy Policy, or any concerns or complaints.

Email: hello@permabooth.com.au