Effective date: 1 August 2056
Last updated: 1 August 2026
Yeppoon Cinemas is operated by The Trustee for The Camel Family Trust ABN 48 187 633 295 (Yeppoon Cinemas, we, us or our).
This Privacy Policy explains how we collect, hold, use and disclose personal information. It applies to our website, official app, online and in-person ticket sales, CQ Starz Club, customer enquiries, refund requests, competitions, promotions, venue activities, CCTV and recruitment.
Yeppoon Cinemas works with Gladstone Cinemas and may share systems, customer-service resources, gift-card services and CQ Starz Club administration with it. Gladstone Cinemas is operated by The Trustee for The Cam Family Trust ABN 42 217 817 664. Each cinema is responsible for the personal information it holds and uses.
We are committed to handling personal information transparently and, where applicable, in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
Depending on how a person interacts with us, we may collect:
name, address, postcode, email address and telephone number;
account login and membership details;
date of birth or age range where reasonably required for eligibility, employment, classification or licensed-venue purposes;
booking number, ticket and seat selections, session attendance and transaction history;
CQ Starz Club number, points, rewards, membership activity and movie preferences inferred from membership use;
gift-card or voucher details;
concession, membership or eligibility information where needed to verify a ticket type;
payment status and transaction references;
correspondence, feedback, complaints, incident reports and refund-request information;
information supplied for competitions, promotions, venue hire, donations or group bookings;
job-application information, qualifications, availability and résumés;
CCTV images and incident-related information collected at the venue;
technical information such as IP address, device type, browser, pages viewed, referral source and cookie identifiers; and
any other information a person chooses to provide to us.
We do not ordinarily receive or store full payment-card details. Online payment information is handled by our authorised ticketing and payment providers. We may receive limited payment information such as payment status, card type, transaction reference or masked card digits.
We only collect sensitive information where it is reasonably necessary and the person consents, or where collection is otherwise permitted or required by law.
Refund, incident or accessibility requests may reveal health, disability or other sensitive information. Customers should provide only what is reasonably necessary and may redact unrelated details from supporting documents. We do not require complete medical records for ordinary refund requests.
We may collect personal information:
directly from the person through our website, app, forms, membership system, ticket counter, telephone, email or other communications;
when a ticket, gift card, membership or other product is purchased or used;
through CCTV and venue-security processes;
automatically through website, app and booking-system technology;
from a parent, guardian, organiser, purchaser or other person acting on an individual’s behalf;
from Gladstone Cinemas where shared administration or a cross-venue product is involved; and
from service providers where needed to complete a transaction or investigate a technical issue.
Where practicable, a form collecting personal information will display or link to a collection notice explaining the purpose of collection and relevant disclosures.
We may collect, hold and use personal information to:
sell and administer tickets, gift cards, food and beverage orders, memberships and cinema services;
issue confirmations, receipts, refunds, rewards and customer-service responses;
verify ticket, concession, age, membership or promotional eligibility;
operate and improve CQ Starz Club;
manage screenings, session changes, cancellations, events and venue hire;
respond to enquiries, feedback, complaints, incidents, lost property and refund requests;
protect patrons, employees, property and systems and investigate suspected fraud, misuse or unlawful activity;
administer competitions, promotions, fundraising and community activities;
recruit and assess job applicants;
maintain, secure, analyse and improve our websites, systems, services and customer experience;
keep records required for accounting, taxation, insurance, employment, safety and legal purposes; and
comply with lawful requests and our legal obligations.
We may send movie information, weekly session times and promotional offers where the recipient has consented or where otherwise permitted by law.
Marketing consent is optional and is not required to purchase a ticket. We do not add a person to a marketing list merely because they submitted a one-off enquiry or purchase unless they selected the relevant marketing option or another lawful basis applies.
Marketing emails and SMS messages will identify the sender and provide a functional unsubscribe method. We will action unsubscribe requests within five working days. Service messages about an existing booking, cancellation, safety issue or account are not marketing messages.
We may disclose personal information where reasonably necessary to:
our authorised staff, managers and professional advisers;
Gladstone Cinemas for shared CQ Starz Club, gift-card, cross-venue and customer-service administration;
website, hosting, ticketing, payment, membership, email, SMS, form-storage, IT support, analytics and security providers;
Jacro and Tapos Software Limited in connection with online ticketing and related support;
banks, payment processors, insurers, auditors, accountants and legal advisers;
event organisers, distributors or venue partners where necessary for a specific booking or event and disclosed to the customer;
law-enforcement, regulators, courts, tribunals or other parties where required or authorised by law; and
another operator as part of a lawful sale or restructure of the cinema business, subject to appropriate confidentiality and privacy protections.
We do not sell personal information.
Service providers may only use information for the services they provide to us or as otherwise disclosed in their own applicable privacy notices and contracts.
Some providers may store or process personal information outside Australia.
At the date of this policy, our online booking provider Tapos Software Limited is located in the United Kingdom. Personal information used to administer an online booking may therefore be disclosed to or processed in the United Kingdom.
Other providers may use overseas infrastructure. Where practicable, we will identify additional likely countries in this policy after confirming our providers’ current hosting and support arrangements.
Where the Australian Privacy Principles apply, we take reasonable steps required by law before disclosing personal information to an overseas recipient.
Our website and booking services use cookies and similar technology to operate essential features, maintain sessions, remember preferences, prevent fraud, understand website performance and support customer accounts.
Analytics or advertising providers may also use cookies if those services are enabled. Browser settings may allow users to block or delete cookies, although doing so may prevent booking, login or other website functions from operating correctly.
Where a separate cookie preference tool is provided, users can manage non-essential cookie choices through that tool.
We take reasonable administrative, technical and physical steps to protect personal information against misuse, interference, loss and unauthorised access, modification or disclosure.
These measures may include access controls, staff permissions, secure connections, payment-provider security, backups, monitoring, confidentiality obligations and controlled document disposal.
No internet transmission or storage system is completely secure. Customers should protect their passwords and booking details and contact us promptly if they suspect unauthorised account activity.
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, to administer an ongoing relationship, to resolve disputes and chargebacks, or to meet taxation, accounting, insurance, employment and other legal obligations.
Retention periods vary by record type. When information is no longer required, we take reasonable steps to securely destroy it or de-identify it, unless it must be retained by law.
Third-party providers may apply their own lawful retention periods. At the date of this policy, Tapos states that it retains booking information for two years from its last contact, subject to its legal and regulatory requirements.
A person may ask for access to personal information we hold about them by contacting our Privacy Officer.
We will respond within a reasonable period, ordinarily within 30 calendar days. We will not charge for making an access request. If a reasonable, non-excessive cost is likely to apply for providing access, we will explain it before proceeding.
We may need to verify identity. In limited circumstances, access may be refused or provided in another form where permitted by law. If we refuse access, we will provide written reasons where required and explain how the decision may be challenged or complained about.
A person may ask us to correct personal information that is inaccurate, out of date, incomplete, irrelevant or misleading. We will respond within a reasonable period, ordinarily within 30 calendar days, and do not charge for correction requests.
If we refuse a correction request, we will provide written reasons where required, explain available complaint mechanisms and allow the person to request that a statement be associated with the information.
Privacy questions, access or correction requests and complaints may be sent to:
Privacy Officer – Yeppoon Cinemas
Email: website@gladstonecinemas.com.au
Post: PO Box 5026, Gladstone QLD 4680
Phone: (07) 4972 0015
Please describe the issue and provide contact details and enough information for us to investigate. Do not send passwords, full payment-card numbers or unnecessary identity documents.
We will ordinarily acknowledge a privacy complaint within seven days and aim to provide a substantive response within 30 calendar days. If more time is reasonably required, we will explain why and provide an updated timeframe.
If the complainant is not satisfied with our response and the Privacy Act applies, they may contact the Office of the Australian Information Commissioner at https://www.oaic.gov.au/privacy/privacy-complaints.
We maintain processes to contain, assess and respond to suspected data breaches. Where the Notifiable Data Breaches scheme applies and a breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by law.
Our services are used by families and young people. Where practicable, personal information from a child should be provided by or with the involvement of a parent or guardian.
We limit collection from children to information reasonably required to provide the service, administer a permitted membership or application, maintain safety or comply with law. We do not knowingly use children’s personal information for direct marketing without appropriate consent.
We do not currently arrange for a computer program to use personal information to make, or substantially and directly assist in making, decisions that could reasonably be expected to significantly affect an individual’s rights or interests.
If this changes, we will update this policy with the information required by applicable privacy law.
Our website may link to third-party websites, social-media services and booking or payment pages. Those third parties may collect information under their own privacy policies. We are not responsible for unrelated third-party privacy practices, but we remain responsible for our own handling of personal information and for obligations that cannot lawfully be transferred.
We may update this policy to reflect changes to our systems, providers, operations or legal obligations. The current version will be published on our website with its effective and last-updated dates. Material changes will be communicated where reasonably appropriate.
