PRIVACY POLICY
Last updated: 30 June 2026

1. ABOUT THIS PRIVACY POLICY
Cedilia Holding Company trading as Celestial Events and associated Celestial brands (“Celestial”, “we”, “us” or “our”) respects your privacy and is committed to responsibly managing personal information.
This Privacy Policy explains how we collect, hold, use, disclose and protect personal information in connection with our websites, events, ticketing, memberships, tours, retreats, competitions, merchandise, publishing activities, social media, communications and other products and services.
We manage personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (“APPs”) where they apply to us.
This Privacy Policy should be read together with our Terms of Use and any specific privacy notice or collection notice provided when we collect information from you.

2. WHAT IS PERSONAL INFORMATION?
“Personal information” has the meaning given to it under the Privacy Act.
Generally, it is information or an opinion about an identified individual, or an individual who is reasonably identifiable.
Depending on how you interact with Celestial, this may include:

• your name;

• email address;

• telephone number;

• postal or billing address;

• date of birth or age;

• account or membership information;

• ticket and Event information;

• purchase history

• payment and transaction information;

• competition entries;

• survey responses;

• correspondence with us;

• social media details;

• photographs;

• video or audio recordings;

• information about your interaction with our websites and communications;

• accessibility information you choose to provide;

• emergency contact information;

• travel information where required for a Celestial tour or experience; and

• other information you voluntarily provide to us.

Not every piece of information we collect will constitute personal information.

3. SENSITIVE INFORMATION
Some information is treated as “sensitive information” under Australian privacy law and receives additional protection.
In operating Events, tours and retreats, we may occasionally need to collect sensitive information such as relevant health, disability, dietary or accessibility information.
For example, you may voluntarily tell us that you:
require wheelchair access;
have a medical condition relevant to Event safety;
require particular accessibility arrangements;
have an allergy or dietary requirement; or
require another reasonable adjustment.
We will only collect sensitive information where permitted by law, including where you have consented and the information is reasonably necessary for our activities, or where another lawful basis applies.
We do not require attendees to provide unnecessary medical information simply to attend an Event.
Where possible, please only provide information reasonably necessary for us to assist you.

4. HOW WE COLLECT PERSONAL INFORMATION
We generally collect personal information directly from you.
This may occur when you:
purchase a ticket;
purchase merchandise;
make a booking;
create an account;
become a Celestial member;
register for an Event, tour or retreat;
join a mailing list;
enter a competition or giveaway;
complete a survey, application or expression of interest;
communicate with us;
contact customer service;
submit an accessibility request;
attend one of our Events;
submit content to us;
interact with us on social media; or
otherwise use our websites or services.
We may also receive personal information from third parties where reasonably necessary, including:
ticketing platforms;
payment processors;
travel or accommodation providers;
Event venues;
authorised Event partners;
competition partners;
membership or e-commerce platforms;
contractors acting on our behalf;
another person making a booking on your behalf; or
publicly available sources where collection is lawful and appropriate.
Where another person books on your behalf, we may receive information necessary to administer your booking.

5. INFORMATION COLLECTED AT EVENTS
When you attend a Celestial Event, we may collect information relating to your:
ticket or registration;
Event check-in;
membership status;
accessibility requirements;
purchases;
participation in activities;
competitions or promotions;
enquiries or customer-service interactions;
safety or incident reports; and
photographs, video and audio recordings.
We may also maintain operational records reasonably necessary for Event safety, security and administration.

6. PHOTOGRAPHY, VIDEO AND AUDIO AT CELESTIAL EVENTS
Celestial Events may be professionally photographed, filmed, livestreamed or otherwise recorded.
As explained in our Terms of Use and Event Attendance Terms, attendees should expect photography and filming to occur at Events.
Photographs, video and audio recordings may constitute personal information where an individual is identifiable.
Subject to applicable law and the Terms applicable to the Event, Celestial may collect and use Event imagery and recordings for legitimate purposes connected with Celestial's activities, including:
Event photography;
Event recap content;
Celestial websites;
social media;
advertising;
promotional videos;
print and digital marketing;
email marketing;
magazines and publications;
media and public relations;
promotion of future Celestial Events;
sponsor and venue reporting;
presentations;
historical and archival purposes; and
other Celestial communications.
Event photographs and recordings may be stored and used after the particular Event has concluded.
Where we propose to use an identifiable attendee as the principal subject of a separate testimonial, endorsement or individual advertising campaign rather than as part of ordinary Event coverage, we may obtain additional permission where appropriate or required by law.
If you have a particular concern regarding photography or filming at an Event, please contact us before the Event where practicable.

7. CHILDREN AND YOUNG PEOPLE
Some Celestial Events may permit people under the age of 18 to attend.
Where a child attends an Event, their parent or guardian should be aware that Event photography and filming may occur.
Where additional parental or guardian consent is required by law for particular photography, filming, collection or use of information concerning a child, we will seek that consent.
We encourage parents and guardians to supervise children's interactions with our websites, social media and online services.
We do not knowingly seek to collect unnecessary personal information from children.

8. WHY WE COLLECT, HOLD AND USE PERSONAL INFORMATION
We may collect, hold and use personal information where reasonably necessary for our functions and activities, including to:
provide tickets, products and services;
process bookings and payments;
administer Events, tours and retreats;
administer memberships;
fulfil merchandise orders;
communicate with customers;
provide Event and booking updates;
manage accessibility requirements;
administer competitions and promotions;
operate loyalty and membership programs;
provide customer service;
respond to enquiries and complaints;
administer refunds, transfers or other transaction matters;
manage Event safety and security;
investigate incidents;
prevent fraud and misuse;
operate and improve our websites;
understand how our Events and services are used;
undertake analytics and business planning;
improve our Events, products and services;
undertake marketing where permitted;
maintain appropriate business and financial records;
protect our legal rights and intellectual property;
comply with contractual and legal obligations; and
conduct, administer and grow the Celestial business.
We may also use information for another purpose where you have consented or where otherwise permitted or required by law.

9. EMAIL AND DIRECT MARKETING
Where you have consented, or where otherwise permitted by applicable law, we may use your contact information to communicate with you about:
upcoming Events;
ticket releases;
presales;
memberships;
tours;
retreats;
merchandise;
competitions;
publishing projects;
Celestial news;
promotions;
offers; and
other Celestial products, services and activities.
Marketing communications may be sent by email, SMS or another communication method for which we have appropriate permission.
You may unsubscribe from electronic marketing at any time by using the unsubscribe facility included in the communication or by contacting us.
We will action unsubscribe requests in accordance with applicable law.
Unsubscribing from marketing does not prevent us from sending communications reasonably necessary to administer something you have already purchased or registered for, such as:
ticket confirmations;
Event information;
itinerary changes;
safety information;
payment information;
membership administration; or
other transactional or service communications.
Where possible, we keep transactional communications separate from marketing communications.
We maintain appropriate records of marketing consent and unsubscribe requests.

10. COOKIES, ANALYTICS AND WEBSITE INFORMATION
When you use our websites, certain information may be collected automatically.
This may include:
IP address;
browser type;
device type;
operating system;
referring website;
pages viewed;
approximate location derived from technical information;
date and time of access;
interactions with the website; and
cookie or similar identifiers.
We may use cookies and similar technologies to:
operate our websites;
remember preferences;
maintain website security;
understand website usage;
measure marketing effectiveness;
improve our websites;
undertake analytics; and
provide relevant advertising where permitted.
Some cookies and similar technologies may be provided by third-party analytics, advertising, e-commerce or social-media services.
You may be able to manage cookies through your browser or device settings. Disabling some cookies may affect website functionality.

11. SOCIAL MEDIA
Celestial operates social media pages, groups and communities.
When you interact with us through a social-media platform, both Celestial and the platform may collect information about that interaction.
The social-media platform's handling of your information is governed by its own privacy terms.
Information you voluntarily post in a public Celestial group, page, comment section or other publicly accessible area may be visible to other people.
You should avoid publishing information that you do not wish to make public.

12. ARTIFICIAL INTELLIGENCE AND AUTOMATED TECHNOLOGIES
Celestial may use artificial intelligence, machine-learning and automated technologies as business tools.
These technologies may assist with activities such as:
drafting and editing;
administrative tasks;
summarising non-sensitive business information;
customer-service support;
workflow automation;
design ideation;
analytics;
accessibility;
fraud or security detection; and
content production.
Where personal information is processed using an AI or automated service, we will take reasonable steps appropriate to the circumstances to protect that information and comply with applicable privacy obligations.
We do not intentionally provide sensitive personal information to publicly available generative AI services for model training.
We take reasonable steps to avoid entering personal information into AI systems where it is unnecessary for the task.
Where an AI or automated service provider processes information on our behalf, it may be treated as a service provider under this Policy.
Automated decision-making
Celestial does not currently intend to use automated systems to make decisions that could reasonably be expected to significantly affect an individual's rights or interests without appropriate safeguards.
If our practices change, we will update this Privacy Policy as required by applicable law, including any requirements applying to automated decision-making.

13. WHO WE MAY DISCLOSE PERSONAL INFORMATION TO
We may disclose personal information where reasonably necessary to operate our business or provide a service to you.
Recipients may include:
ticketing providers;
payment processors;
e-commerce providers;
website and cloud-hosting providers;
email and communications providers;
membership platforms;
Event venues;
Event contractors;
security and medical contractors where appropriate;
travel providers;
accommodation providers;
tour operators;
shipping and fulfilment providers;
professional photographers and videographers;
technology providers;
analytics providers;
IT and cybersecurity providers;
professional advisers including accountants and lawyers;
insurers;
related entities;
business purchasers or prospective purchasers where appropriate safeguards apply; and
government authorities, regulators, courts or law-enforcement bodies where required or authorised by law.
We aim to provide third parties only with information reasonably necessary for them to perform the relevant service.

14. WE DO NOT SELL YOUR PERSONAL INFORMATION
Celestial does not sell customer databases or personal information to unrelated third parties.
We do not provide your personal information to unrelated businesses simply so they can add you to their own marketing databases.
Where Celestial conducts a promotion or activity with another organisation and information is proposed to be shared with that organisation for its own marketing purposes, we will seek appropriate consent or otherwise ensure the disclosure is permitted by law.

15. EVENT PARTNERS AND SPONSORS
The presence of a sponsor, partner, vendor, author, retailer or other organisation at a Celestial Event does not automatically give that organisation access to Celestial's customer database.
If an Event activity requires your personal information to be provided directly to a partner — for example, entering a partner-operated competition — this should be made clear when you participate.
Information you provide directly to that organisation may be governed by its own privacy policy.

16. PAYMENT INFORMATION
Payments may be processed through third-party payment providers.
Celestial generally does not need to retain complete credit or debit card details where transactions are processed securely by a payment provider.
Payment providers process information in accordance with their own terms and privacy policies.
We may retain transaction records reasonably necessary for accounting, taxation, fraud prevention, refunds and business administration.

17. OVERSEAS DISCLOSURE AND CLOUD SERVICES
Some organisations that provide services to Celestial may store or process information outside Australia.
This may include providers of:
cloud storage;
website services;
ticketing;
email marketing;
analytics;
social media;
payment processing;
customer management;
artificial intelligence and software services; and
travel-related services.
Depending on the services we use from time to time, overseas recipients may be located in countries including the United States, New Zealand, the United Kingdom, France and other countries in which our technology, travel or service providers operate.
Where required by Australian privacy law, we take reasonable steps in relation to overseas disclosures.
Because technology providers may use distributed infrastructure, it may not always be practicable to identify every country in which information is technically processed or stored. Where practicable, we will provide additional information on request.

18. BUSINESS SALE, MERGER OR RESTRUCTURE
If Celestial or part of the Celestial business is sold, merged, reorganised or transferred, personal information may form part of the business records considered or transferred as part of that transaction.
Any handling of personal information in connection with a proposed or completed business transaction will remain subject to applicable privacy law.
Where appropriate, prospective purchasers or advisers may be required to maintain confidentiality.
A successor business receiving personal information will be required to handle that information in accordance with applicable law.

19. SECURITY OF PERSONAL INFORMATION
We take reasonable steps to protect personal information from:
misuse;
interference;
loss;
unauthorised access;
unauthorised modification; and
unauthorised disclosure.
Measures may include appropriate:
access controls;
passwords and authentication;
technology security;
staff and contractor access restrictions;
reputable third-party service providers;
secure payment processing;
data-management practices; and
physical security measures.
No internet transmission or information-storage system can be guaranteed to be completely secure.
If we become aware of a data breach, we will assess and respond to it in accordance with applicable law, including the Notifiable Data Breaches scheme where applicable.

20. RETENTION AND DELETION
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, for legitimate business requirements or where retention is required or authorised by law.
Different information may need to be retained for different periods.
For example, transaction and financial records may need to be retained for statutory accounting and taxation purposes.
Where personal information is no longer required and we are not legally required to retain it, we will take reasonable steps to destroy it or de-identify it.
Backup systems may retain information for a limited period after deletion from active systems.

21. ANONYMITY AND PSEUDONYMS
Where practicable and lawful, you may interact with Celestial anonymously or using a pseudonym.
There are circumstances where this will not be practicable.
For example, we generally need accurate identifying information to:
process a payment;
issue or administer certain tickets;
deliver merchandise;
administer travel bookings;
manage a membership;
respond to certain legal requests; or
provide services where identity is reasonably necessary.

22. ACCESSING YOUR PERSONAL INFORMATION
You may request access to personal information we hold about you.
To make a request, contact:
hello @ celestialevents.com.au
We may need to verify your identity before providing access.
In some circumstances permitted by law, we may refuse access to some or all of the information requested. If this occurs, we will generally explain the reason where required by law.

23. CORRECTING YOUR PERSONAL INFORMATION
We take reasonable steps to ensure personal information we hold is accurate, up-to-date, complete and relevant.
If you believe information we hold about you is incorrect, please contact:
hello@celestialevents.com.au
We may take reasonable steps to verify and correct the information.

24. WITHDRAWING CONSENT
Where we rely upon your consent to undertake a particular activity, you may generally withdraw that consent prospectively by contacting us.
Withdrawal of consent does not retrospectively invalidate lawful processing that occurred before the consent was withdrawn.
There may also be circumstances where we can or must continue to hold or use particular information despite withdrawal of consent, including where required or authorised by law.

25. PRIVACY COMPLAINTS
If you believe Celestial has mishandled your personal information or breached an applicable privacy obligation, please contact us first so that we have an opportunity to investigate.
Please provide sufficient information for us to understand the issue.
Email: hello @ celestialevents.com.au
We will acknowledge and investigate privacy complaints and aim to respond within a reasonable period, generally within 30 days.
If you are dissatisfied with our response, you may be entitled to make a complaint to the Office of the Australian Information Commissioner (OAIC).
Information about privacy complaints is available from the OAIC.

26. THIRD-PARTY WEBSITES AND SERVICES
Our websites, emails and social-media pages may contain links to third-party websites or services.
Celestial is not responsible for the privacy practices of independent third parties.
You should review the privacy policies of third-party services before providing personal information to them.

27. CHANGES TO THIS PRIVACY POLICY
Our business, technology, Events and legal obligations may change over time.
We may therefore update this Privacy Policy periodically.
The current version will be published on our website together with the date it was last updated.
Where a change materially affects the way we handle personal information already collected, we will take any additional steps required by applicable law.

28. CONTACT US
For questions about this Privacy Policy, requests to access or correct your personal information, privacy complaints or other privacy enquiries, please contact:
Cedilia Holding Company t/a Celestial Events
Email: hello @ celestialevents.com.au
A copy of this Privacy Policy can also be provided in another reasonably accessible format on request.