Effective date: 27 September 2026
About this policy
Kiddoz Cafe and Play Centre is operated by Bajwa Nominees Pty Ltd (ABN 49 136 270 767) and trades as Kiddoz Cafe and Play Centre. In this policy, “Kiddoz”, “we”, “us” and “our” refer to that business. We operate a family cafe and indoor play centre at Shop 23, 29 Ellen Stirling Boulevard, Innaloo WA 6018.
This policy explains how we collect, use, disclose, store and protect personal information. It applies to information handled through our premises, website, online bookings, customer accounts, waivers, payments, customer Wi-Fi, loyalty programs, competitions and communications.
We handle personal information responsibly and, where applicable, in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles and other applicable laws.
Information we collect
The information we collect depends on how a person interacts with Kiddoz and the services they use.
We may collect an adult customer’s, parent’s or guardian’s name and contact details, account and login information, booking and attendance details, party or event information, waivers, payment and refund records, purchase history, loyalty activity, competition entries, communication and marketing preferences, and enquiries, feedback or complaints. We may also collect information connected with an incident, injury, emergency, insurance matter or legal claim, as well as information needed to confirm a person’s identity, authority or relationship to a child.
Full payment-card details are ordinarily processed by a payment provider and are not retained by Kiddoz. We may receive limited transaction information, such as the amount paid, payment status, transaction reference, card type or masked card number.
For children, we may collect names, ages or dates of birth where necessary, attendance and participation details, parent or guardian information, emergency contacts, waivers and relevant allergy, dietary, disability, accessibility, health or medical information.
When someone visits our website, uses an online service or connects to customer Wi-Fi, we or the providers supporting those services may collect information such as an IP address, browser and device details, operating system, website usage, referring source, connection times, Wi-Fi connection data, approximate location derived from technical information, and security or diagnostic records.
Children’s information and images
Information about a child is generally supplied by, or with the involvement of, a parent, guardian or properly authorised adult. Online accounts, bookings, waivers and consents should be completed by an adult with authority to provide the relevant information.
Health and medical information are sensitive information. We collect it only where reasonably necessary to provide services safely, respond to emergencies or accommodate relevant allergy, dietary, disability, accessibility or medical needs. Access is restricted to staff or other authorised persons who reasonably need the information for safety or service delivery. We do not use children’s health or medical information for marketing.
Parents and guardians should provide only current and relevant information and tell us promptly if a child’s health, allergy, dietary, accessibility or emergency-contact details change.
Kiddoz does not ordinarily take or collect photographs or videos of children for advertising or promotional purposes. Entry to our premises does not amount to consent for promotional photography.
A parent or guardian may voluntarily provide an image or recording for a specific incident, enquiry or complaint. We will use it only for that purpose and any reasonably related investigation, insurance or legal process. Customers should not send us, tag Kiddoz in, or post on a Kiddoz-controlled page an identifiable image of another person’s child without permission from that child’s parent or guardian.
How we collect and use information
We generally collect information directly from customers, parents, guardians or authorised organisers when they make a booking, visit our premises, create an account, complete a waiver, arrange a party, make a payment, join a loyalty program, enter a competition, use customer Wi-Fi, communicate with us or submit an incident report.
Information may also be collected automatically through our website, cookies, analytics tools, advertising pixels, booking and account systems, Wi-Fi services, security systems and CCTV. In appropriate circumstances, we may receive information from another parent or guardian, a party or group-booking organiser, an authorised representative, a service provider, an insurer, an adviser, emergency services or another lawful source.
We use personal information to provide and improve our cafe, play centre, party and customer services. This includes administering admissions, bookings, accounts, waivers, payments, refunds, loyalty programs, competitions, promotions and customer Wi-Fi.
We may also use information to communicate with customers, manage marketing preferences, accommodate health and accessibility needs, support safety and emergency responses, investigate incidents or complaints, manage insurance matters and legal claims, conduct analytics, secure our premises and systems, prevent fraud or misuse, and comply with legal, accounting, insurance and record-keeping obligations.
A person may choose not to provide requested information. However, this may prevent us from safely providing the relevant service, processing a booking or payment, administering a waiver or account, accommodating a particular need, providing Wi-Fi or loyalty benefits, or properly responding to an emergency, complaint or enquiry.
Cookies and marketing
Our website and online services may use cookies, analytics tools, advertising pixels and similar technologies. These help us operate website and account functions, remember preferences, understand how visitors use our services, measure advertising, improve performance, maintain security and identify technical problems or misuse.
Browser or device settings may allow users to refuse, delete or restrict cookies. Some website features may not work properly if these technologies are disabled.
We may send information about Kiddoz services, events, offers, loyalty benefits and promotions by email or SMS where the recipient has consented, or another lawful basis permits us to do so. Marketing messages will include an unsubscribe or opt-out method, and customers may also contact us to change their preferences.
Opting out of marketing does not prevent us from sending necessary operational messages about bookings, accounts, payments, refunds, waivers, safety matters, changes to booked services, or responses to enquiries and complaints.
CCTV
CCTV operates at the Kiddoz premises to support the safety of children, customers and staff, protect the premises and property, prevent loss or suspected unlawful conduct, investigate incidents and manage complaints, insurance matters and legal claims. Signs identify areas subject to CCTV monitoring.
Access to CCTV footage is restricted to authorised persons with a reasonable need to view it. Where necessary or required by law, footage may be disclosed to police, emergency services, insurers, claims handlers, professional advisers, courts, tribunals, regulators or government authorities.
CCTV footage is not used for advertising or promotional purposes. It is retained only for as long as reasonably required, although footage connected with an incident, complaint, investigation, insurance claim or legal matter may be kept for longer.
Sharing and overseas handling
Kiddoz does not sell or rent personal information.
Where appropriate, we may disclose information to our staff and authorised personnel, a child’s parent or guardian, or an authorised party, event host or group-booking organiser. We may also provide limited information to providers supporting payments, bookings, customer accounts, website hosting, cloud storage, IT, analytics, advertising, email and SMS communications, marketing, loyalty programs, customer Wi-Fi, CCTV and security.
Information may also be disclosed to professional advisers, insurers, brokers and claims handlers, emergency services, police, regulators, government authorities, courts or tribunals, or where otherwise required or permitted by law.
Service providers receive only the information they reasonably need to perform their functions. Depending on the providers and systems used by Kiddoz, personal information may be processed, accessed or stored outside Australia. Where applicable, we will take the reasonable steps required by Australian privacy law in connection with overseas disclosures.
Security, retention and data breaches
We use reasonable physical, administrative and technical safeguards to protect personal information against loss, misuse, interference and unauthorised access, modification or disclosure. Access to children’s information and sensitive health or medical information is limited to authorised persons who reasonably need it.
No physical or electronic system is completely secure. A person who believes information provided to Kiddoz may have been compromised should contact us promptly.
We retain personal information only for as long as reasonably necessary for our business activities, customer relationships, safety and incident management, legal and record-keeping obligations, insurance requirements, disputes or claims. When information is no longer reasonably required, we take reasonable steps to destroy it securely or de-identify it, unless the law requires or permits us to retain it.
We will investigate suspected data breaches and take reasonable steps to contain and remedy them. Where legally required, we will notify affected individuals, regulators or other relevant parties.
Access, correction and complaints
An individual may ask to access personal information Kiddoz holds about them or request correction of information that is inaccurate, incomplete, out of date, irrelevant or misleading. An authorised parent or guardian may also make a request concerning their child’s information.
We may ask for reasonable evidence of identity and, where a request concerns a child or another person, evidence of the requester’s authority. We will respond within a reasonable period. Access or correction may be refused or limited where permitted by law, in which case we will generally explain the reason and available complaint options.
Privacy questions and complaints may be submitted by email to info@kiddozcafe.com or by post to the address below. Please provide enough information for us to understand and investigate the concern. We will respond within a reasonable period and may ask for further information where necessary.
If a complaint remains unresolved and the Privacy Act 1988 (Cth) applies to the matter, the complainant may take the complaint to the Office of the Australian Information Commissioner.
Changes and contact details
We may update this policy when our services, technology, information-handling practices or legal obligations change. The current version will show its effective date. If a change is material, we will provide an appropriate notice and obtain any additional consent required by law rather than treating continued use of our services as blanket consent.
For privacy questions, access or correction requests, complaints or concerns, contact:
- Legal entity: Bajwa Nominees Pty Ltd
- ABN: 49 136 270 767
- Trading name: Kiddoz Cafe and Play Centre
- Address: Shop 23, 29 Ellen Stirling Boulevard, Innaloo WA 6018
- Privacy email: info@kiddozcafe.com
- Phone: 08 6102 2786
- Website: www.kiddozcafe.com