← Back to signup

Privacy Policy

DnB Allstars Australia & New Zealand Tour 2026

Version 1.0 · Last updated 20 May 2026

This is the joint collection notice covering the signup form for the AUS / NZ Tour 2026. Complies with the Australian Privacy Act 1988 (as amended December 2024), the Spam Act 2003, the New Zealand Privacy Act 2020, and the Unsolicited Electronic Messages Act 2007.

1. Who we are

Personal information collected via this signup form is held jointly on behalf of three independent controllers, each of whom may use it for the purposes set out in this policy:

This page is the joint collection notice for the signup form. For each controller's broader privacy practices (their other events, ticketing, etc.) refer to their master policies linked above. Each controller is independently responsible for compliance with the privacy law applicable to it. A data sharing agreement using Office of the Privacy Commissioner (OPC) model clauses is in place between the three controllers covering the transfer of New Zealand personal information to Australia and the United Kingdom.

2. What we collect

When you sign up via the form we collect:

  • First name and last name
  • Email address
  • Mobile phone number, with country code
  • Your selected city or cities of interest (Brisbane, Perth, Christchurch, Auckland, Sydney)
  • Your per-channel marketing consent (WhatsApp, SMS, email)
  • Your confirmation that you are aged 18 or older
  • Your acknowledgement that you have read this policy

We also automatically collect, for fraud prevention and analytics:

  • Your IP address, used to infer approximate country and city
  • Date and time of signup (ISO 8601, UTC)
  • Browser, device, language, timezone, and screen resolution
  • Referrer URL, landing page, UTM parameters, and ad click identifiers (Facebook fbclid, Google gclid, TikTok ttclid, Snapchat ScCid)
  • The exact text of each consent statement you saw, and the form version (audit-trail evidence)

3. How we collect it

Directly from you when you submit the signup form. Also via tracking pixels (Meta, TikTok) that load on page view to attribute the marketing performance of this campaign. You can disable these pixels in your browser via standard ad-blocker / privacy extensions, or by opting out at the platform level (Meta Ad Preferences, TikTok privacy settings).

4. Why we collect it

The primary purpose is to send you the tour communications you opted into. Secondary purposes are to measure the performance of our advertising and to size our audience for future similar events. We do not sell your personal information.

5. Who we share it with

Each of the three controllers in section 1 receives a copy of your signup data. We share with the following processors to provide the service:

  • Klaviyo (USA) — email, SMS, and WhatsApp platform for DnB Allstars
  • Audience Republic (Australia) — email and SMS platform for Higher Ground and Audiology
  • Meta (USA), TikTok (USA / Singapore) — to attribute ad performance using hashed identifiers
  • Vercel (USA) — hosting provider for this site, which incidentally processes IP address and request metadata

Each processor is bound by a written data processing agreement.

6. Where the data goes (cross-border)

Your personal information will be transferred to and processed in the United Kingdom (DnB Allstars), Australia (Higher Ground), New Zealand (Audiology), and the United States (Klaviyo, Meta, Google, Snapchat). The TikTok pixel data may also pass through Singapore.

For data collected from Australian residents, transfers to overseas recipients are made under APP 8 of the Privacy Act 1988. The three controllers have signed a contract requiring each overseas recipient to handle personal information in a way consistent with the Australian Privacy Principles.

For data collected from New Zealand residents, transfers to overseas recipients are made under IPP 12 of the Privacy Act 2020. We rely on the New Zealand → United Kingdom transfer being supported by United Kingdom GDPR (comparable safeguards) and on a written agreement using OPC model clauses for the New Zealand → Australia transfer.

7. How long we keep it

We retain your personal information for 24 months from your last interaction with our marketing, after which we delete it from our active systems. Aggregated and anonymised analytics may be retained indefinitely. You can ask for earlier deletion at any time using the contact in section 10.

8. Marketing communications and opt-out

You choose at the point of signup which channels we contact you on. You can withdraw consent on any channel at any time:

  • WhatsApp: reply STOP to any DnB Allstars message, or message us at our WhatsApp business number with the word UNSUBSCRIBE.
  • SMS: reply STOP to any message.
  • Email: click the unsubscribe link in any email.

We process opt-outs within five working days, as required by the Australian Spam Act 2003 and the New Zealand Unsolicited Electronic Messages Act 2007.

9. Tracking pixels and cookies

This site loads tracking pixels from Meta (Facebook) and TikTok to attribute ad performance. These collect device and behavioural data that, combined with identifiers we send (hashed email + phone), can identify you. Under the OAIC's 2025 tracking-pixel guidance and the NZ Privacy Act 2020, this counts as personal information collection.

To disable these pixels: use any ad-blocker or privacy extension, opt out at the platform level (Meta Ad Preferences, TikTok privacy settings), or enable "Do Not Track" / "Global Privacy Control" in your browser. We honour platform-level opt-outs.

10. Your rights and how to exercise them

You have the right to:

  • Access the personal information we hold about you
  • Correct any inaccurate information
  • Request deletion (subject to any legal retention requirement)
  • Withdraw consent on any channel at any time
  • Complain to a regulator if you believe we have breached your privacy

Email privacy@dnballstars.au to exercise any of these. We will respond within 30 days.

You can also complain directly to:

11. Security

All transmissions to and from this site use TLS 1.3. Personal information at rest in Klaviyo, and Audience Republic is encrypted by the processor. Access is restricted to named team members at each controller on a need-to-know basis. We test our security posture against the Australian Privacy Principle 11 standard.

12. Breach notification

In the event of an eligible data breach we will notify the Office of the Australian Information Commissioner, the Office of the NZ Privacy Commissioner, and affected individuals, in line with the notifiable data breach schemes under both Acts. Our internal target is to notify within 72 hours of becoming aware of the breach.

13. Children

This service is not intended for anyone under 18. We ask you to confirm your age at signup. If we discover we have collected personal information from someone under 18 we will delete it. Parents or guardians can contact us at privacy@dnballstars.au.

14. Changes to this policy

We may update this policy. Material changes will be communicated to current subscribers by email. The version number and date at the top of this page identify the current version. Previous versions are archived and available on request.

Joint controllers: DnB Allstars Ltd (UK) · Higher Ground (AUS) · Audiology (NZ).

Version 1.0 · Effective 20 May 2026.