1. What Crazy Alpaca collects
Depending on what you do on the website, Crazy Alpaca may collect your name, email address, party contact phone number, workshop or party booking details, selected dates and times, guest or ticket numbers, booking reference, messages you send, optional workshop-news consent, ticket check-in records and refund or cancellation information.
For card payments, Square handles the card entry. Crazy Alpaca may receive and store payment transaction references, payment status, receipt information and the last four digits of the card where Square returns them. Crazy Alpaca does not receive or store your full card number or CVV.
2. Why the information is collected
Information is used to create and manage bookings, take payments, issue and recover QR tickets, send booking emails, check customers into workshops, arrange refunds or cancellations, answer questions, investigate payment problems, maintain booking records and meet reasonable accounting, legal and security requirements.
If you separately tick the workshop-updates box, your email may also be used for occasional news about future workshops. Booking does not require marketing consent.
3. Tickets and party bookings saved on your device
When you open or receive a workshop ticket or private-party booking, the website can save an opaque access credential in your browser so it can appear again on that device. The credential is not your name, email or card details. You can remove saved workshop tickets or private-party bookings from that device at any time without cancelling the underlying booking.
4. Payments and Square
Online card payments are processed using Square. Full payment-card details are entered into Square’s payment interface rather than Crazy Alpaca’s systems. Crazy Alpaca keeps only the payment information needed to reconcile the booking, provide support, process refunds and help validate a lost-ticket request.
5. Email and website service providers
Crazy Alpaca uses service providers to operate the website and bookings, including Google/Firebase for website and application services, Square for payments and Resend for transactional email. Information is shared with these providers only to the extent reasonably needed for those services. Redbubble runs its own checkout when you choose to leave Crazy Alpaca and shop there.
6. Where information is processed and stored
Crazy Alpaca’s website backend functions are configured to run in Google Cloud’s Australian region. Other cloud, payment and email services may process or store information in Australia or other countries as part of providing their services. Crazy Alpaca therefore does not promise that every copy of personal information remains exclusively in Australia.
Where personal information is handled by an external provider, Crazy Alpaca aims to use reputable providers and limit the information shared to what is reasonably necessary for the service.
7. Crazy Alpaca does not sell your information
Crazy Alpaca does not sell, rent or trade personal information. Information is not handed to unrelated businesses for their own advertising. It may be disclosed where reasonably necessary to provide the service you requested, to professional advisers, to prevent or investigate fraud or security issues, or where required or authorised by law.
8. How long information is kept
Booking, ticket and payment-related records are kept only for as long as reasonably needed to manage the booking, support refunds and disputes, maintain appropriate business records and meet legal or accounting obligations. Privacy-safe analytics records are scheduled for expiry after 180 days. Marketing consent records are kept while they are needed to respect your subscription choice.
When information is no longer reasonably required, Crazy Alpaca will take reasonable steps to delete or de-identify it where practical and lawful.
9. Access, correction and deletion requests
You can ask what personal information Crazy Alpaca holds about you, request a correction, or ask for information to be deleted where it is no longer needed and there is no legal or operational reason to keep it. Email contact@crazyalpacastudio.com.au with enough information for Elly to identify the relevant booking or enquiry.
10. Security
Crazy Alpaca uses access controls, Firebase App Check, server-side payment verification, opaque ticket tokens and other technical safeguards intended to reduce unauthorised access or misuse. No internet service can guarantee absolute security, so if you think something has gone wrong, contact Elly promptly.
11. Changes to this policy
This policy may be updated when the website, service providers or booking processes change. The effective date at the top of the page shows when this version took effect.
12. Questions or privacy complaints
Privacy questions, access/correction requests or concerns about how information has been handled can be sent to contact@crazyalpacastudio.com.au. Elly will review the issue, check the relevant records and service providers where needed, and respond as reasonably practical.