Privacy Policy
Last updated:
This Privacy Policy explains how the operator of the Local Drag Victoria platform (the Platform) collects, uses, discloses, and protects your personal information. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
In this Policy, we, us, and our refer to the operator of the Platform, and you and your refer to any person whose personal information we hold, including members of the public, registered performers, and people who manage business listings.
1. The information we collect
1.1
Depending on how you use the Platform, we may collect:
- Account information — your name, email address, login credentials or third-party sign-in identifiers, and roles.
- Performer profile information — stage name, performer type, biography, pronouns, location and service areas, images, social links, service tags, and a verified contact email address.
- Business listing information — business name, description, location and service areas, contact details, links, images and logos, and, where you purchase a subscription, billing-related details.
- Contact and enquiry information — the content of enquiries sent through contact forms, and the email address used to forward them.
- Payment information — where you purchase a paid subscription, payment is processed by our payment provider (Stripe). We do not store full card numbers; we receive limited billing and subscription details (such as customer and subscription identifiers and payment status) from Stripe.
- Technical and usage information — IP address, device and browser information, pages viewed, interactions, and similar analytics and event data. This includes information collected to protect the Platform from automated abuse (for example through Cloudflare Turnstile), and information collected through any advertising or measurement technologies we use, which are described in clause 6.2.
1.2
Most personal information we collect comes directly from you. Where an administrator creates a performer profile on a performer's behalf, we may hold information until that profile is claimed. We may also receive information from service providers such as our payment, security, and advertising providers.
1.3
Providing personal information is voluntary, but if you choose not to provide certain information (for example your name, email, or contact details), we may be unable to provide services that depend on it, such as creating an account, forwarding enquiries, or processing a subscription. You may deal with us anonymously or under a pseudonym where it is lawful and practicable to do so — in particular, a performer's public identity on the Platform is a stage name rather than a legal name.
1.4
Some information you choose to publish on a profile — for example your pronouns, or a biography that describes your identity — may be sensitive information under the Privacy Act 1988 (Cth), including information about sexual orientation or practices. We collect that information only with your consent, which you give by choosing to enter and publish it. You are never required to provide it, and you may remove it from your profile at any time. We do not use sensitive information to target advertising, and we do not send the content of your profile to the advertising and measurement platforms described in clause 4.1 — but as clause 4.1 explains, we cannot control what such a platform infers from the address of a page you visit.
2. Why we collect and use your information
2.1
We collect, hold, and use personal information to:
- create and administer accounts, performer profiles, and business listings;
- operate, secure, moderate, and improve the Platform;
- display public profiles and listings, and forward contact enquiries;
- process and manage paid subscriptions and billing;
- verify genuine use of the Platform and prevent fraud, abuse, and security incidents;
- promote the Platform and measure how well that promotion works, including advertising and remarketing on third-party platforms as described in clauses 4.1 and 6.2;
- respond to your enquiries, complaints, and requests; and
- comply with our legal obligations and enforce our terms.
2.2
We will only use or disclose your personal information for the purposes for which it was collected, for a directly related secondary purpose you would reasonably expect, or as otherwise permitted or required by law.
3. Information made public
3.1
Some information is published on the Platform and is publicly accessible by its nature. For performers this includes the stage name, biography, images, location, pronouns, and social links. For business listings this includes the business name, description, location, images, and contact options.
3.2
A performer's verified contact email address is not displayed publicly; it is used only to forward contact enquiries. You acknowledge that once information is published, it may be cached or indexed by third parties (such as search engines), and we cannot guarantee its removal from all external caches.
3.3
We do not publish a performer's legal name; the public identity is the stage name. Performers and businesses control the location shown on a profile or listing and may limit it to a general area or service areas rather than a precise address. We will not publish location information that is more precise than you provide.
4. Who we share information with
4.1
We disclose personal information to:
- Other users, where the Platform's purpose requires it — for example forwarding a contact enquiry to the relevant performer, or displaying public profile and listing information.
- Service providers who help us run the Platform, including cloud hosting and storage (Amazon Web Services), content delivery and security (Cloudflare), payment processing (Stripe), and email delivery. These providers may only use the information to provide their services to us.
- Advertising and measurement platforms, where we use them to promote the Platform. A platform of this kind is different from a service provider: as well as acting for us, it acts for itself, and may use the information it receives to deliver and measure advertising and to operate and improve its own advertising systems, under its own terms and privacy policy. What it receives is limited to the technical and usage information described in clause 1.1 — it does not receive your account details, your contact email address, or the content of an enquiry. Because the Platform is a drag performer directory, the address of a page you view may itself suggest something about your interests or identity, and may therefore involve sensitive information. We do not send profile content, and we configure these technologies to send the minimum information available to us, but we cannot control what a platform infers from a page address. For that reason we only enable these technologies where you have consented.
- Others where permitted or required by law, including to investigate complaints, enforce our terms, protect rights, property, or safety, or respond to a lawful request.
4.2
We do not sell your personal information, we do not trade in personal information, and we do not provide your details to other businesses so that they can market their own products and services to you. Where we use an advertising or measurement platform to promote the Platform, that platform receives technical and usage information and may also use it for its own advertising purposes, as described in clause 4.1.
4.3
When we receive a request from law enforcement or another authority for personal information, we disclose only what we are lawfully required or permitted to disclose, limit any disclosure to the minimum reasonably necessary, and require valid legal process where it applies. Where we are lawfully able to do so, we will tell the affected person about a request for their information.
5. Sending information overseas
5.1
Our cloud hosting and storage are located in Australia. Some of our other service providers — in particular our security, content-delivery, payment, and advertising and measurement providers — operate internationally and may store or process personal information outside Australia, including in the United States and the European Union.
5.2
Before we disclose personal information to an overseas recipient, we take reasonable steps to ensure the recipient does not breach the APPs in relation to that information, as required by APP 8. Those steps include contractual commitments from our providers about how they may handle the information.
5.3
Advertising and measurement platforms are different. They act for themselves as well as for us, so we cannot ensure they handle information in the way the APPs require. Where you consent to the technologies described in clause 6.2, you consent to that disclosure on the basis that APP 8.1 does not apply to it, and we will not be accountable under the Act for how that platform handles the information afterwards. If you do not consent, we do not enable them.
6. Cookies and tracking
6.1
The Platform uses cookies and similar technologies for essential functions (such as keeping you signed in and protecting against automated abuse) and for analytics that help us understand and improve how the Platform is used.
6.2
We may also use advertising and measurement technologies — for example an advertising pixel provided by a social media platform. These set or read identifiers in your browser and report information to the platform that provides them, including your IP address, device and browser details, the pages you viewed on the Platform, and actions you took such as opening a contact form or creating a profile. We use them to show people who have already visited the Platform further information about it elsewhere online, a practice commonly called remarketing, and to understand which of our campaigns bring people here. The platform providing the technology may also use what it receives for its own advertising purposes, as described in clause 4.1. These technologies apply only to visits that occur after we enable them. We do not use information collected before that date for advertising purposes.
6.3
We do not sell advertising space on the Platform. We use these technologies only to promote the Platform itself, never to advertise another business's products or services to you. The platform providing the technology may separately use what it receives for its own advertising, which we do not control.
6.4
You can control cookies through your browser settings, and disabling some cookies may affect how the Platform works. You can also limit ad personalisation in the settings of the advertising platform itself and through your device's tracking controls.
7. How long we keep information
7.1
We keep personal information only for as long as it is needed for the purposes described in this Policy, or as required by law. When you close your account or remove a profile or listing, it will be unpublished, and we may retain a copy for a reasonable period for backup, legal compliance, dispute resolution, and enforcement purposes before secure deletion or de-identification, as required by APP 11.2.
8. Keeping information secure
8.1
We take reasonable steps to protect personal information from misuse, interference, and loss, and from unauthorised access, modification, or disclosure. These steps include encrypting information at rest and restricting access to authorised personnel. No system can be guaranteed completely secure, and you are responsible for keeping your account credentials safe.
8.2
If we become aware of an eligible data breach that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act 1988 (Cth).
9. Accessing and correcting your information
9.1
Under APP 12 and APP 13 you have the right to ask for access to the personal information we hold about you, and to ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant, or misleading. You can manage much of your information directly through your account. To make a request, contact us at hi@localdrag.au. We may need to verify your identity before acting on a request. We will respond within a reasonable period, and in limited circumstances we may refuse a request as permitted by law, in which case we will give you written reasons and tell you how to complain.
10. Children
10.1
Registration is restricted to people aged at least 18: registered performers and people managing business listings must be 18 or over. Public pages are intended for a general audience and are not directed at children, and some listings or content may be unsuitable for children. We do not knowingly collect personal information from children in a manner that requires a parent or guardian's consent without it.
11. Complaints
11.1
If you have a concern about how we have handled your personal information, please contact us at hi@localdrag.au so we can try to resolve it. We will acknowledge your complaint and respond within a reasonable period. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
12. Changes to this Policy
12.1
We may update this Policy from time to time. Any change takes effect from the time it is published on the Platform. Where a change materially affects how we handle your personal information, we will use reasonable efforts to bring it to your attention.
13. Contact us
13.1
If you have any questions about this Policy or about how we handle personal information, please contact us at hi@localdrag.au.