Privacy Policy
Last Updated [30/06/2026]
TG Christmas ("we", "us", "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.tgchristmas.com.au ("Website"), interact with us through our social media platforms ("Platforms"), purchase our products ("Products"), use our services ("Services"), or otherwise engage with our business. We comply with the Australian Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), the New Zealand Privacy Act 2020 and, where applicable, the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
By accessing or using our Website, creating an account, booking a Service, purchasing our Products, or otherwise providing us with your personal information, you acknowledge that you have read and understood this Privacy Policy and understand how we collect, use and disclose your information in accordance with this Privacy Policy. We encourage you to read through and contact us if you have any questions.
What Information Do We Collect?
Personal Information
Where necessary, we collect information from you that enables you to be identified as an individual, such as your name, email address, phone number, residential, postal, billing and/or shipping address or any other information you voluntarily provide to us. This kind of information is defined in the APPs, the New Zealand Privacy Act and the CCPA as personal information and in the GDPR as personal data. The terms “personal data” and “personal information” are used interchangeably throughout this privacy policy.
We only collect personal information that is reasonably necessary to provide our Products and Services, operate our Website, process bookings and orders, communicate with you, provide customer support, comply with our legal obligations and improve our business. To minimise the impact on your privacy, we will never knowingly collect more personal data than is strictly necessary to perform the activities described in this privacy policy.
Photo Sessions
As part of our photo sessions, we collect additional personal information necessary to manage bookings and provide our Services. Depending on the type of session booked, this may include:
-
Names of children, adults and pets participating in photo sessions
-
Ages of participating children and, where provided, adults or pets
-
Gender of participants (where provided)
-
Contact information of parents/guardians (e.g., phone number, email address)
-
Booking information, including the session date, time, session type and number of participants
-
Special requirements or accessibility information voluntarily provided by you
-
Photographs, digital images and video recordings taken during the sessions (where applicable)
-
Advertising and promotional preferences relating to the use of photographs and video recordings (where provided)
Payment Information
If you make a purchase from us, we may collect and process your payment information. Please note that we do not store or retain complete credit card information. Payments are securely processed through Square and other trusted third-party payment providers, including PayPal, Afterpay, Klarna, Apple Pay and Google Pay, where available at checkout. For more information about how Square collects, uses and protects your payment information, please refer to Square's Privacy Policy:
https://squareup.com/au/en/legal/general/privacy.
Order Information
We collect information related to your orders, including:
-
Purchaser's name
-
Billing address
-
Shipping recipient's name (where applicable)
-
Shipping address
-
Email address
-
Phone number (where provided)
-
Products and/or Services purchased
-
Quantities
-
Pricing details
-
Gift messages, delivery instructions or other special requests (where provided)
-
Any other preferences or information you choose to provide
This information is used to process and fulfil your orders and bookings, communicate with you regarding your purchases, provide customer support, arrange delivery where applicable, maintain transaction records, and comply with our legal and accounting obligations. Some of this information may also be retained for warranty, taxation, accounting, fraud prevention and record-keeping purposes where required or permitted by law.
Account Creation and Login
When you visit our Website, you have the option to create an account by providing certain personal information, such as your name, email address, and password. Creating an account allows you to access additional features and functionality, including your order history, saved addresses, and faster checkout experience.
Information Collected for Account Creation
When you create an account, we collect the following personal information:
-
Name
-
Email address
-
Password
-
Shipping address (optional)
-
Contact number (optional)
-
Profile photograph or avatar uploaded by the account holder (optional)
Login Process
To access your account, you will need to log in using your registered email address and password. Your login credentials are securely stored using industry-standard encryption and security measures to help protect your account information.
Use of Personal Information
The personal information collected during account creation and login is used to:
-
Provide access to your account and its features
-
Process your orders, bookings and transactions
-
Communicate with you about your account, orders, bookings and promotions
-
Save your preferences to improve your experience when using our Website
-
Verify your identity and help maintain the security of your account
-
Improve our Website, Products and Services based on your preferences and feedback
Protection of Personal Information
We take reasonable steps to protect your personal information from unauthorised access, misuse, interference, loss, modification and disclosure. We use industry-standard security measures, together with physical, electronic and administrative safeguards, to help protect the personal information we hold.
Your account password is securely encrypted and cannot be viewed by TG Christmas or our staff. While we take reasonable precautions to protect your information, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.
Accessing and Updating Your Information
You have the right to access, update or request the deletion of the personal information stored in your account at any time. Where available, you can do this by logging into your account and accessing the "Account Settings" or "Profile" section. If you require assistance accessing or updating your information, please contact us using the details provided at the end of this Privacy Policy.
Device Information
When you visit our Website, we automatically collect certain information about your device. This may include your IP address, browser type, operating system, approximate location, time zone, device type and model, and information collected through cookies or similar technologies.
We also collect information about how you interact with our Website, including the pages you visit, products or services you view, websites or search terms that referred you to our Website, and other information relating to your use of our Website.
Photo Sessions
The personal information collected as part of your photo session is used to manage bookings, identify participants, provide our photo session Services, produce and deliver photographs or other photo products, communicate with you regarding your booking, and provide customer support.
With your consent, photographs and video recordings may also be used for advertising, promotional material, our Website and social media platforms. Advertising consent may be provided during the booking process or at a later time, including verbally or in writing. If you later change your advertising preference, please contact us and we will update our records and take reasonable steps to honour your request. Where children participate in our Services, personal information is collected with the knowledge and consent of a parent or legal guardian.
Social Media Platforms and Testimonials
We may collect and use testimonials, reviews and feedback voluntarily submitted through Google, Facebook, Instagram or other social media or review platforms. Testimonials or reviews may include personal information such as your first name, initials, suburb or general geographic location. Where practical, we will use only the personal information reasonably necessary to identify the testimonial. We may edit testimonials for spelling, grammar or length without changing their intended meaning. If you would like your testimonial removed from our promotional material, please contact us and we will take reasonable steps to comply with your request.
Behavioural Advertising
We utilise Google Ads to present targeted advertisements based on our users' search history, browsing behaviour and interactions with our Website. Google Ads allows us to understand our users’ preferences and interests, enabling us to share things that may be of interest to you.
You can opt out of Google Ads through the following methods:
You can manage your ad personalisation preferences directly through Google's Ad Settings page. Most web browsers provide options to manage cookies and control ad tracking. You can adjust your browser settings to limit the data collected for behavioural advertising purposes.
Website Improvements
We use Google Analytics to analyse website traffic, track user engagement, and understand user preferences. This information helps us improve our Website, Products, Services and overall user experience. The data collected through Google Analytics is aggregated and anonymised, and we do not use it to identify individual website visitors.
By using our Website, you acknowledge that certain information may be collected through Google Analytics as described in this Privacy Policy. You can opt out of Google Analytics tracking by disabling cookies in your web browser or using the Google Analytics Opt out Browser Add-on https://tools.google.com/dlpage/gaoptout.
Please note that this privacy policy does not cover the data practices of Google. For more information about Google's data handling practices, please review Google's Privacy Policy (https://policies.google.com/privacy).
Third-Party Services
Our Website may use third-party services and integrations to help provide our Products and Services, process payments, manage bookings, analyse Website performance, deliver orders and improve your experience. These providers may collect, store or process certain information on our behalf in accordance with their own privacy policies. We encourage you to review the privacy policies of any third-party services you interact with through our Website.
Examples of third-party providers we may use include Wix (website hosting), Square (payment processing), Google Analytics, Google Ads and Meta platforms.
Email Marketing
With your consent, we may send you marketing communications, including emails, about our Products, Services, promotions, special offers and other updates that may be of interest to you. You can opt out at any time by clicking the "unsubscribe" link in our emails or by contacting us at admin@tgchristmas.com.au.
Cookies
Our Website uses cookies and similar technologies to improve your browsing experience. Cookies are small text files stored on your device that help recognise your browser, remember your preferences, analyse Website traffic and improve the functionality of our Website.
Most web browsers automatically accept cookies; however, you can change your browser settings to refuse or remove cookies if you prefer. Please note that disabling cookies may affect the functionality of some features of our Website.
Do Not Track
Please note that we do not alter our data collection and usage practices when we detect a Do Not Track signal.
How Do We Collect Your Information?
Most of the personal information we collect is provided directly by you. We also collect certain information automatically through cookies, analytics technologies and your use of our Website. We may collect personal information when you:
-
Enquire about our Products or Services
-
Purchase a Product or Service
-
Sign up to our mailing list
-
Create an account
-
Update your account or booking information
-
Book a photo session
-
Interact with our Platforms
-
Place an order
-
Submit a review, testimonial or feedback
-
Contact us by email, phone or social media
-
Use or browse our Website
How Do We Use Your Information?
Order Information
We use the order and booking information we collect to process and fulfil purchases and bookings made through our Website, including processing payments, arranging delivery where applicable, issuing invoices, receipts, order confirmations, and communicating with you about your purchases or bookings.
We also use this information to communicate with you, detect and prevent fraudulent or unauthorised activity, comply with our legal obligations, and, where consistent with your marketing preferences, provide information about our Products and Services.
Photo Session Information
We use the information collected during photo sessions to:
-
Manage bookings and deliver our photo session Services
-
Identify participants and manage session logistics
-
Capture, produce and deliver photographs, digital images, USB drives and other photo products
-
Retain photographs for customer service, future reorders, replacement USB's, backup purposes and business records.
-
With your consent, create, store and use video recordings for advertising, promotional material, our Website and social media platforms.
-
With your consent, use photographs for advertising, promotional material, our Website and social media platforms
Device Information
We use device information to help detect and prevent fraud, improve and optimise our Website, understand how visitors interact with our Website and marketing communications, and improve the overall customer experience by generating analytics about how customers browse and use our Website and emails. This helps us better understand customer interests, improve site functionality and determine what content may be most useful to our visitors.
We will only use your personal information for the purposes for which it was collected or for another purpose that is reasonably related to the original purpose where permitted by law. If we intend to use your personal information for an unrelated purpose, we will seek your consent where required.
Data Security
We take appropriate technical, physical and organisational measures to protect your personal information from unauthorised access, disclosure, alteration, misuse or destruction. We regularly review our security practices to help ensure your information remains protected.
While we take reasonable precautions to safeguard your personal information, no method of electronic transmission or storage is completely secure. Accordingly, we cannot guarantee the absolute security of information transmitted to or stored by us.
Disclosure of Your Information
We may disclose your personal information to third-party service providers who assist us in operating our business and providing our Services, such as payment providers, website hosting providers, IT support providers, cloud storage providers, professional advisers, delivery providers and other authorised service providers. These service providers are authorised to use your personal information only as necessary to provide their respective services to us.
We may also disclose your information if required to do so by law.
Our Platforms
If you have voluntarily provided a testimonial or review on Google or our social media platforms, you understand and agree that your testimonial or review may be used for promotional or marketing purposes on our Website, social media platforms, advertisements or other promotional materials.
You retain the right to withdraw your consent for the use of your testimonial or review at any time. To do so, please contact us at admin@tgchristmas.com.au. We will promptly remove or anonymise your testimonial or review from our promotional materials, as applicable.
How Do We Store Your Information?
We are committed to ensuring that your information is secure. To prevent unauthorised access or disclosure, we have put in place suitable physical, electronic, and managerial procedures to safeguard and secure the information we collect online.
Our Website is hosted by Wix and protected using Secure Socket Layer (SSL) encryption to help safeguard information transmitted through our Website.
We also store personal information (except credit card information which is encrypted) on our local secure networks, all of which are password protected.
Photograph and Video Retention
We retain photographs taken during our photo sessions for as long as reasonably necessary to provide customer service, allow customers to request replacement USBs, additional products or reorders, maintain business records and create secure backups.
Where you have provided your consent, we may also retain photographs and video recordings used for advertising, promotional material, our Website and social media platforms.
Photographs are retained for customer service and operational purposes regardless of whether advertising consent has been provided.
You may withdraw your consent for future promotional use of your photographs or video recordings at any time by contacting us. Withdrawal of consent will not affect material that has already been published prior to your request; however, we will take reasonable steps to prevent future use where practicable.
Data Retention
We retain your personal information for as long as reasonably necessary to provide our Products and Services, comply with legal obligations, maintain business records and support our business operations. If you wish to have your personal information deleted, you may submit a request to us. We will consider your request in accordance with applicable privacy laws and any legal obligations requiring us to retain certain information.
Maintaining Data Quality and Accuracy
It is important to us to maintain the quality of the personal information that we hold. We take reasonable steps to make sure that your personal information is accurate, complete and up-to-date.
If you find that your personal information held by us is not up to date or is inaccurate, please advise us and we will amend it, where appropriate.
Payment Information
When you make a purchase through our Website, payment information is securely collected and processed by Square on our behalf. Your payment details are transmitted directly to Square using secure encryption. TG Christmas does not store or retain complete credit card information, such as credit card numbers, expiry dates or CVV codes.
We may retain limited transaction information provided by Square, such as transaction amounts, dates and confirmation details, for accounting, record-keeping and customer service purposes. This information does not include your complete credit card details.
Third Party Links
Our Website may contain links to other websites of interest. Once you have used these links to leave our Website, you should note that we do not have any control over that other website. We are not responsible for the privacy practices of other such websites. We encourage our users to be aware, when they leave our Website, to read the privacy statements of each website that collects personally identifiable information.
Data Breach
In the unlikely event of a data breach involving your personal information, we will take prompt and appropriate steps to investigate, contain and mitigate the breach in accordance with applicable privacy laws.
In the unfortunate event of a data breach, we will:
Promptly assess the extent of the breach: We will conduct a thorough investigation to determine the scope and nature of the breach, identifying the affected systems, data types, and the potential risk to individuals.
Notify affected individuals: If we determine that the data breach poses a significant risk of harm to your rights and freedoms, we will notify you promptly, providing clear and transparent information about the breach, the potential consequences, and the actions you can take to mitigate any potential risks.
Engage relevant authorities: If required by applicable laws and regulations, we will report the data breach to the appropriate supervisory authorities and cooperate fully in their investigations.
Take necessary steps to secure and remedy the breach: We will take immediate action to contain the breach, prevent further unauthorised access, and restore the security and integrity of our systems. This may include implementing additional security measures, conducting forensic analysis and cooperating with law enforcement agencies where appropriate.
Provide support and assistance: In the event of a data breach, we are committed to providing support and assistance to affected individuals. This may include guidance on steps to protect your personal information, information about available resources for identity theft protection, and any other relevant support measures to help mitigate the impact of the breach.
If you suspect or become aware of any unauthorised access, loss, or disclosure of your personal information, please contact us immediately using the provided contact details.
Please note that while we implement reasonable security measures, no method of data transmission or storage is completely secure. We cannot guarantee the absolute security of your personal information.
By using our Website and providing your personal information, you acknowledge and understand the inherent risks associated with data transmission over the internet and agree that we are not liable for any unauthorised access, loss, or disclosure of your personal information beyond our reasonable control.
Your Rights
Depending on your location and the applicable privacy laws, you may have a number of rights in relation to your personal information, including those outlined below.
We note that we are processing your information to provide our Services to you, or otherwise to pursue our legitimate business interests listed above.
We would like to make sure you are fully aware of all your data protection rights.
You have:
Right to be Forgotten: You have the right to request the deletion or removal of your personal information when certain conditions are met, such as when the information is no longer necessary, consent is withdrawn, or processing is not based on legitimate interests.
Right to Rectification: If you believe that the personal information, we hold about you is inaccurate or incomplete, you have the right to request its correction. You can do so by contacting us using the information provided at the end of this policy.
The right to Data Portability: You have the right to request us to transfer the information that we have collected to another organisation, or directly to you, under certain conditions.
Right to Information and Access: You have the right to be informed about the collection, use, and processing of your personal information. You also have the right to request access to the personal information we hold about you. In some circumstances permitted by law, we may charge a reasonable administrative fee for providing access to your personal information.
Right to Restriction of Processing: Under certain circumstances, you have the right to request the restriction of the processing of your personal information. If you would like to exercise this right, please contact us using the information provided at the end of this policy.
Right Not to be Subject to Automated Decision-making: You have the right not to be subject to decisions based solely on automated processing, including profiling, if these decisions significantly affect you. Some exceptions apply, such as when the decision is necessary for a contract or authorised by law.
Right to Object: You have the right to object to the processing of your personal information based on legitimate interests or for direct marketing purposes. If you wish to object to the processing of your information, please contact us using the information provided at the end of this policy.
Right to Be Informed: You have the right to be informed about how your personal information is being used, including the purposes for processing, the categories of information being processed, and any recipients of the information.
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights under this policy. This means that we will not deny you goods or services, charge you different prices, or provide you with a lower quality of service based on your exercise of your privacy rights.
Right to Lodge a Complaint: If you believe that your privacy rights have been violated, you have the right to lodge a complaint with the relevant supervisory authority, such as the data protection authority in your country.
We will respond to your request within the timeframes required by applicable privacy laws.
Changes to our Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business practices, legal obligations or the way we handle personal information. Any changes will be published on our Website and will take effect from the date they are published. We encourage you to review this Privacy Policy periodically to stay informed of any updates.
How to Contact Us
If you have any questions about this Privacy Policy, our handling of your personal information or our use of cookies, or if you would like to exercise any of your rights under applicable privacy laws, please email admin@tgchristmas.com.au.