Privacy Policy

Noosa What's On (ABN 43 395 329 234) operates WHATZON at whatzon.today as an independent guide to events and local highlights in Noosa and the surrounding area. Questions about this policy or personal information can be sent to events@sunshine-coast.today.

Depending on how you use the site, we may collect:

• event information you submit, including the event title, date, time, description, price, location, booking link, and related promotional material;
• your name, email address, and optional phone number when you submit an event or contact us;
• your account email, optional first name, email-verification status, sign-in sessions and events you choose to save;
• the content of messages or correction and removal requests you send us;
• limited technical information used to operate and secure the site. This may include standard server logs and a one-way hashed form of an IP address used temporarily for submission rate limiting; and
• cookieless website-usage data used to produce aggregate reports, including the site and page path, referring site and supported campaign tags, approximate country, region, and city, device type, browser, operating system, active time on a page, scroll depth, and selected interactions with event cards, event actions, sharing, community links, and successful event submissions; and
• a local browser preference recording whether you dismissed a homepage prompt. This stays in your browser and is not used for advertising.

We may also collect event details and organiser information that has already been made public by event organisers, venues, councils, ticketing services, and other public event sources.

We use information where reasonably necessary to:

• review, verify, edit, publish, update, or remove event listings;
• contact a submitter about an event or respond to an enquiry;
• operate your account, send requested sign-in emails and keep your saved events available across visits;
• operate, maintain, troubleshoot, and protect the website;
• understand aggregate readership and improve useful content without building advertising profiles;
• prevent spam, misuse, fraud, or excessive automated submissions; and
• meet legal obligations and resolve complaints or disputes.

Your personal account name, email and saved-event list are private. Saving an event does not book a ticket, share an attendance status or subscribe you to a newsletter. You can remove saved events yourself and contact us to request account deletion.

Information supplied as part of an event listing is intended for publication and may appear on our website, social channels, or daily community updates. Do not submit private information in an event title, description, image, location, or booking link.

The name, email address, and phone number entered in the organiser contact section are used by our team for review and administration. They are not included in the public event listing unless you separately ask us to publish them.

We may provide limited information to trusted providers that help us run the website, database, hosting, security, backups, and transactional email. They may only use it to provide those services. We may also disclose information where required by law, to protect safety or legal rights, or with your permission.

Analytics requests are sent to our self-hosted Plausible Community Edition service at analytics.whatzon.today on our Sydney, Australia infrastructure. They are not sent to Plausible's managed service or an advertising network. Plausible briefly processes a visitor's IP address and full browser user-agent to calculate a daily rotating visitor identifier, but does not store the raw IP address or raw user-agent. The identifier is not designed to identify a visitor across different days or websites and is not stored on the visitor's device.

Interaction reports use only bounded context such as the public event path, card placement, listing day, public category, action type, share method, community channel, and whether a submitted event is free or paid. We do not send event-submission form contents, contact details, an event title as a separate analytics property, price amounts, booking URLs, or full external URLs to Plausible. The source URL attached to a custom interaction event contains only our site origin and page path, without its query string or fragment.

We do not sell or rent personal information.

Our live website, event database, and analytics service are hosted in Australia. When an event is submitted, its event and organiser contact details are also included in an administrative notification handled through our current email provider in Germany. Other technology-provider locations can change, so you may contact us for current information relevant to your data. Where Australian privacy law applies, we take reasonable steps required by that law when using overseas service providers.

Links to WhatsApp, Telegram, Instagram, Google Maps, ticketing sites, organiser websites, and other third parties take you to services we do not control. Those services handle information under their own privacy policies.

Public readership analytics are cookieless: Plausible does not set analytics cookies or store analytics identifiers in your browser. We do not use advertising or behavioural-tracking cookies. We use limited local storage only for functional preferences, such as remembering that a dismissible prompt was closed, and session storage for temporary navigation behaviour such as one-navigation scroll restoration. Personal accounts, organizer accounts and restricted administration services use essential authentication and security cookies while you are signed in. A temporary session-storage entry can remember the event you wanted to save before signing in.

We do not currently display an analytics consent banner. The public analytics service does not write or read tracking cookies or persistent analytics identifiers on a visitor's device, and this policy explains the limited analytics processing. We will reassess the notice and consent approach before introducing advertising or third-party tracking pixels, persistent identifiers, automatic link or form capture, sensitive-content analytics, or new browser-storage technologies.

We retain information only for as long as reasonably needed for the purposes described above, including keeping an event submission while it is reviewed or published and retaining records where necessary for security, legal, or operational reasons. Retention periods can vary depending on the record.

Live analytics data is stored on our Australian server. No fixed automatic analytics deletion period is currently configured; we retain it only while it remains reasonably useful for aggregate audience and trend analysis, and delete or aggregate it when it is no longer needed. Analytics is not used to create a profile that follows a visitor across unrelated websites.

We use reasonable technical and organisational safeguards, including restricted administration access. No internet service can guarantee absolute security. Please contact us promptly if you believe information has been accessed or disclosed improperly.

You can ask to access or correct personal information we hold about you, or request that we remove an event or contact record where appropriate, by emailing events@sunshine-coast.today. We may need to confirm your identity before acting on a request.

If you have a privacy complaint, tell us what happened and include enough detail for us to investigate. We will acknowledge the complaint, investigate it, and respond with the outcome. We aim to respond within 30 calendar days and will explain if we need more time. If you remain concerned, you may contact the Office of the Australian Information Commissioner.

We may update this policy when our services or legal obligations change. The current version and its update date will always be available on this page.

You can also read our Terms of Use.