Skip to content

Privacy Policy

Version 1 · Published 4 October 2026

This document is awaiting final legal review.

Effective date: 4 October 2026.

Who we are

Bokeh Club Australia is operated by James Angele as a sole trader, ABN 80 975 806 472, based in Victoria, Australia. In this policy, “we”, “us” and “our” refer to that business.

For privacy questions, requests or complaints, contact bokehclubau@outlook.com. Our website is bokehclub.com.au.

This policy describes how we handle information when you browse our website, create or use an account, obtain photography resources, contact us or participate in a promotion that we open. The site is currently a preview: purchases and giveaway entries are not open. References to orders and promotions explain how information will be handled when those services become available.

Information we collect

The information we collect depends on how you use our services. It can include:

  • Your email address and account identifier, sign-in records and account details you provide.
  • Your name, mobile number and state or territory when required by checkout or an eligible promotion.
  • Orders, products purchased, payment status, refunds, download entitlements and records of the terms accepted with an order.
  • Messages, attachments and other information you send when asking for support.
  • Marketing preferences, consent records and requests to unsubscribe.
  • For an active promotion, entry records and information reasonably needed to check eligibility, contact a winner or deliver a prize. A shipping address or identity evidence may be requested where needed.
  • Technical and usage information, such as session identifiers, pages visited, referral and campaign information, and connection or security information processed by our hosting providers.

We collect information directly from you and through our website. Where payments are enabled, the payment provider also supplies transaction status and information needed to reconcile an order or refund. We do not ask you to email passwords, sign-in links or payment-card details. Please avoid sending sensitive personal information unless we have explained why it is needed and how to provide it safely.

Why we use information

We use information to provide sign-in and customer accounts, deliver purchased resources, maintain download access, process and reconcile orders, help with enquiries and refunds, prevent fraud and unauthorised access, and keep appropriate business records.

We use first-party usage and referral information to understand how visitors find and use the website and to improve it. If a promotion is opened, we use the information required to record entries, check eligibility, conduct and document the draw, notify the winner, deliver the prize and make any publication required by the promotion terms or law.

You can browse public pages without opening an account. If you choose not to provide information needed for an account, purchase or promotion, we may be unable to provide that particular service. Where practicable, you may make a general enquiry without identifying yourself.

Email and marketing

Sign-in messages, receipts, download notices and essential service messages are used to operate your account or fulfil an order. Marketing preferences are separate. We send promotional email where you have given the required consent, identify the sender and provide a way to unsubscribe.

You can update available marketing preferences in your account or email us to withdraw consent. We will action unsubscribe requests as required by applicable law. Unsubscribing from marketing does not stop necessary messages about an account or existing order. We do not sell your personal information.

Cookies and website measurement

We use cookies to support account sessions and security. The website also uses first-party session and referral cookies to record campaign information and measure visits. The first-touch referral cookie can remain for up to 90 days; session referral cookies normally last for the browser session. Account cookies support authentication and session refresh.

At this policy's publication, no Meta advertising pixel is configured on the live website. If we introduce advertising or additional tracking services, we will update our disclosures and implement any consent choices required for that use.

You can control cookies in your browser. Blocking or clearing cookies may affect sign-in and some account features. Browser controls do not necessarily remove information already recorded in our business systems.

Who receives information

We share information reasonably needed to operate our services with the providers that support them:

  • Cloudflare hosts and protects the website and processes related connection, security and technical information.
  • Supabase provides authentication, the database and private download storage. Our production database project is configured in Sydney, Australia.
  • Microsoft Outlook currently handles correspondence sent to our support inbox.
  • When checkout is enabled, the payment provider identified at checkout processes payments and supplies transaction and refund information. Stripe is the intended payment provider and is not yet connected for live customer payments.
  • When automated customer email is enabled, our configured email provider processes recipient details and message content. The existing website integration is designed for Resend, which is not yet enabled for production sending.

We may also disclose relevant information to professional advisers, regulators or law-enforcement bodies where required or permitted by law, or when reasonably necessary to address fraud, security incidents or a legal claim. For a promotion, any winner information made public will be described in its terms; we do not publish private identity documents or full residential addresses as winner announcements.

Overseas processing

Our providers operate internationally. Although the production database is configured in Australia, website delivery, support, email and provider administration may involve processing in other countries, including the United States. The countries involved can vary with the service and its infrastructure or subprocessors.

We consider privacy and security when selecting providers and take steps appropriate to the information and applicable law, including using access controls and the providers' contractual protections. Hosting a database in Australia does not mean every related service or support operation takes place only in Australia. Contact us if you would like more information about a particular provider or disclosure.

Security and retention

We use HTTPS, account authentication, access controls and private file storage. Download access is checked against the signed-in customer's entitlements, and authorised download links expire. No online service can guarantee that information will never be lost, misused or accessed without authorisation.

We retain information for as long as reasonably needed to provide your account and purchased resources, maintain records of transactions and consent, handle enquiries and disputes, and meet legal obligations. A request to close an account does not necessarily remove records that must be retained for accounting, fraud prevention, a dispute or another lawful purpose. We do not promise automatic deletion after a fixed period. Where information is no longer required and no retention obligation applies, we will take reasonable steps to delete or de-identify it. Backup copies may remain until the applicable backup cycle expires and are restricted from routine use.

If a security incident affects personal information, we will assess it and provide any notifications required by applicable law.

Access, correction and account closure

You can review and update available account details through account settings. For other access, correction or account-closure requests, email us. We may ask for information reasonably needed to verify your identity; we will not ask you to disclose your password or sign-in link.

We will consider requests within a reasonable period. If we cannot grant a request in full, we will explain the reason where permitted and discuss any available alternatives. Closing an account may affect future access to its library, so keep copies of legitimately purchased files and ask us about any outstanding order before closing it.

Privacy complaints

Email us with the subject “Privacy complaint” and describe your concern and the outcome you are seeking. We will consider the complaint and respond within a reasonable period, keeping you informed if an investigation needs additional time.

If you are dissatisfied with our response, you may contact the Office of the Australian Information Commissioner where it has jurisdiction. This policy does not remove any rights or complaint avenues available under applicable law.

Changes to this policy

We will publish the current policy and effective date here. If we materially change how we use information already collected, we will give any notice or seek any consent required by law. Our Terms of Service, Product Terms and Refund Policy provide further information about using our services.