1. Overview

Frolic Kids Pty Ltd (ABN 31 701 384 143) is committed to protecting your privacy and handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy explains what information we collect, why we collect it, how we use it, and the choices you have.

2. What information we collect

Account information

• Your name, email address, and mobile number.
• Your role (parent or provider).
• Your account preferences and settings.

Child information (parents)

• Child's name, age, date of birth, and interests.
• Allergies, medical conditions, and special needs.
• Emergency contact name and phone number.
• Photo permission setting.

Booking information

• Activity, session date and time, provider, and credits used.
• Cancellation and attendance history.

Payment information

• We do not store your card details. Payments are processed by Stripe, which holds card data in accordance with PCI-DSS standards. We receive your name, billing email, and transaction status.

Provider information

• Business name, ABN, address, contact details.
• Blue Card / WWCC number and credential documents.
• Bank account details (held by Stripe for payouts).
• Activity listings and session schedules.

Device and usage information

• We may collect device type, browser, approximate location (from IP), and usage logs (pages visited, actions taken) to operate and improve the platform.

3. Why and how we collect information

We collect information:

• To provide the service — creating accounts, processing bookings, managing credits, and facilitating sessions.
• For child safety — verifying provider Blue Card / WWCC status and ensuring providers have the medical and emergency information they need for each session.
• For payments — processing membership fees, top-ups, and provider payouts.
• To communicate — sending booking confirmations, policy updates, and support responses.
• To improve the platform — analysing usage patterns and fixing issues.

4. Storage and security

Your information is stored on secure servers operated by our platform provider. Access is restricted to authorised personnel and is protected by authentication controls.

Child medical and emergency contact information is visible to:

• You (the parent).
• The provider of a session you have booked (for that session only).
• Frolic Kids administrators.

Provider Blue Card numbers and credential documents are visible to the provider themselves and Frolic Kids administrators only — never to parents or the public.

5. Sharing your information

We share information with:

• Providers — when you book a session, the provider sees your child's name, allergies, medical conditions, and emergency contact for that session.
• Stripe — for payment processing. Stripe handles card data under its own privacy policy and PCI-DSS compliance.
• Service providers — we use third-party tools (email delivery, analytics) that process limited data on our behalf under contractual obligations.
• Authorities — if required by law, court order, or to protect the safety of a child.

We do not sell your personal information.

6. Child data

Children's personal information is provided by their parent or guardian. Parents control this information and can update or delete it at any time. We do not use children's data for marketing or profiling.

7. Cookies and tracking

We use essential cookies to maintain your session and preferences. We may use analytics tools to understand how the platform is used. You can disable non-essential cookies in your browser settings.

8. Data retention

We retain your information for as long as your account is active. After account deletion, we retain limited records as required by law (e.g., financial transaction records for seven years under Australian tax law) and then securely delete or de-identify them.

9. Your rights

You have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or out-of-date information.
• Delete your account and associated data (subject to legal retention requirements).
• Complain to the Office of the Australian Information Commissioner (OAIC) if you believe we have breached the Privacy Act.

To exercise any of these rights, contact us at support@frolickids.com.au.

10. Data breaches

If we become aware of a data breach that is likely to result in serious harm, we will notify affected individuals and the OAIC as required by the Notifiable Data Breaches scheme.

11. International transfers

Your information is primarily stored in Australia. Where we use third-party services that process data overseas, we take reasonable steps to ensure it is handled in accordance with Australian privacy law.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified to you, and a new version number will be applied.

13. Contact

Frolic Kids Pty Ltd
ABN 31 701 384 143
Email: support@frolickids.com.au

For privacy concerns or data access requests (DSAR), email us and include "Privacy Request" in the subject line.