Privacy Policy

1. Who we are — The Italian Festa website is operated by CO.AS.IT. (Comitato Assistenza Italiani), Melbourne, as the festival organiser. In this policy, "we", "us" and "our" refer to Italian Festa / CO.AS.IT. You can contact us at mif@coasit.com.au.

2. What this policy covers — This policy explains how we handle personal information collected through this website, including the online store, contact and newsletter signup forms, and festival registrations. It is provided in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

3. Information we collect — (a) Information you give us — such as your name, email address and message when you use a contact or newsletter signup form, enter the raffle, or register as a vendor. (b) Information collected automatically — such as your device type, browser, approximate location, pages viewed and interactions, collected through the cookies and analytics tools described below.

4. Cookies and analytics — We use cookies and similar technologies to understand how the site is used and to improve it. Analytics load only after you accept them via our cookie banner, and you can decline or withdraw your consent at any time. We currently use: Google Analytics 4 (site usage measurement); Google Tag Manager (manages measurement tags); and Zoho PageSense (on-site A/B testing and heatmaps). These tools may set cookies and collect information such as your IP address, device and usage data. [TODO: editor fill] list specific cookie names and retention periods if your legal team requires it.

5. Third-party providers and overseas disclosure — Some of these providers are located overseas and may store data outside Australia. Their handling of data is governed by their own privacy policies, including Google (policies.google.com/privacy) and Zoho (zoho.com/privacy). [TODO: editor fill] confirm the full provider list before publication.

6. Online store — Purchases are processed through our online store, which is powered by Shopify. When you buy from the store, your order and payment details are handled by Shopify in accordance with its privacy policy (shopify.com/legal/privacy). We do not store your full payment card details.

7. How we use your information — We use your information to operate and improve the website, respond to your enquiries, send updates you have asked to receive, process store orders, run the festival and its activities, and meet our legal obligations.

8. Disclosure of your information — We do not sell your personal information. We may share it with service providers who help us operate the site and festival (for example analytics, email, and store providers), and where required or authorised by law.

9. Data security and retention — [We take reasonable steps to protect personal information from misuse, loss, and unauthorised access. We keep personal information only for as long as it is needed for the purposes described in this policy, or as required by law.

10. Your rights — You may ask to access or correct the personal information we hold about you, and you may withdraw your consent to analytics cookies at any time using the cookie banner. To make a request, contact us at mif@coasit.com.au.

11. Complaints — If you have a concern about how we have handled your personal information, please contact us first. You may also lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

12. Changes to this policy — We may update this policy from time to time. The current version published on this page replaces all previous versions.

13. Contact — For any questions about this policy or your personal information, contact us at mif@coasit.com.au or via the Contact page.