Privacy Policy

Sunshine Sports - Privacy Policy Last updated: 5 September 2026 Sunshine Sports ("we", "us", "our") runs junior sports programs in Western Sydney. We take your family's privacy seriously and handle personal information in line with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains what we collect, why, and your rights. 1. Who we are Sunshine Sports, trading in Western Sydney, New South Wales. Contact: info@sunshinesports.au. 2. What we collect - Parent/guardian details: name, email, phone, suburb/address. - Child details: name, date of birth, school year, and any medical conditions, allergies or emergency-contact information you choose to provide so we can keep your child safe. - Enrolment and attendance history. - Payment records. Card numbers are entered directly with our payment processor (Stripe) and are never stored on our systems. - Communications you send us (messages, enquiries, feedback). - Basic technical data needed to run the portal (see our Cookie Notice). 3. Why we collect it - To enrol children and run our programs safely (including responding to medical/emergency situations). - To take payment and keep financial records. - To contact you about sessions, cancellations, reminders and account matters. - With your consent, to send you news and marketing. You can opt out at any time. - To meet our legal obligations (e.g. child-safety and tax record-keeping). 4. Consent for children's information Because our participants are children, a parent or guardian provides their information and consents on their behalf. Photography/marketing consent is always optional and can be withdrawn at any time by contacting us. 5. Who we share it with We do not sell your personal information. We share it only with service providers who help us run the business, under contract and only as needed: - Stripe (payments), our email and SMS providers (notifications), our hosting provider, and accounting software (invoicing). - Coaches, limited to the roster and safety information for the sessions they run. - Authorities where we are required to by law or to protect a child's safety. 6. Storage, security & overseas transfer Information is stored in secured, access-controlled systems. Access is role-based (staff cannot see financial or full-account data). Our payment processor, Stripe, processes payment information in the United States. Other providers may also process data outside Australia; where they do, we take reasonable steps to ensure comparable protection, as the Australian Privacy Principles require. 7. How long we keep it We keep personal information only as long as needed for the purposes above and to meet legal obligations - for example, the ATO requires business and financial records to be kept for at least 5 years. When no longer needed, information is deleted or de-identified. 8. Your rights (APPs) You can ask to access or correct your information, opt out of marketing, or ask us to delete it. Email info@sunshinesports.au and we will respond within a reasonable time (usually 30 days). When we delete a family's information we remove everything that identifies you or describes your child - names, contact details, dates of birth, allergies, medical notes, emergency contacts, messages and enrolment history. Payment records are the exception: the ATO requires businesses to keep financial records for at least 5 years, so those stay, with your details removed from them. 9. Complaints If you're concerned about how we've handled your information, contact us first at info@sunshinesports.au. If unresolved, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au. 10. Overseas / EU visitors (GDPR) If you are located in the EU/UK, the GDPR may also apply. In that case our lawful bases are: performance of a contract (enrolment), your consent (marketing), and our legitimate interests (running the business safely). You have additional rights to portability and erasure - contact info@sunshinesports.au. 11. Changes We may update this policy; the "last updated" date shows the current version. Material changes will be notified through the portal or by email. (Edit this policy in Admin → Policies → Privacy policy.)