01Who we are
Tiny Tux Nannies (ABN 68 747 656 218) provides on-site childcare at weddings and events across Sydney and regional New South Wales. In this policy, "we" and "us" mean Tiny Tux Nannies, and "you" means anyone who enquires with us, books us, or attends an event we staff.
We are bound by the Australian Privacy Principles in the Privacy Act 1988 (Cth). Small businesses are not always covered by that Act, but because we handle health information about children we have chosen to hold ourselves to it regardless.
02What we collect
We collect different things at different stages, and deliberately keep the early stages light.
When you enquire
- Your name, email address and phone number
- Your event date, venue or suburb, and the hours you need covered
- How many children, and their ages
- Anything else you choose to write in the message box
When you book
- A billing address and the details needed to raise an invoice
- The names of the children attending, and who is authorised to collect them
- Emergency contacts for the night
- Venue contacts, such as your coordinator or planner
On the night
- A sign-in and sign-out register, with times and the name of the adult collecting
- Notes on anything that happened — a bumped head, a missed dose, an early pick-up
03Information about children
Some of what you tell us about your children is health information, which is the most sensitive category the Privacy Act recognises. That includes allergies, intolerances, asthma and anaphylaxis plans, medical conditions, medication and dosages, and dietary requirements.
The enquiry form on our site asks only for ages and numbers. Once you book, we send a separate child details form directly to you. Please do not put allergy or medical details into the public enquiry form or a WhatsApp message.
We collect this information with your consent, we use it only to keep your child safe during the hours we are caring for them, and we do not use it for anything else — no marketing, no profiling, no sharing with third parties beyond what section 6 describes.
04Why we collect it
- To answer your enquiry and tell you whether we are available
- To quote accurately and staff your event to the correct ratios
- To keep children safe, which is the reason for every medical question we ask
- To reach you or your emergency contact during the event
- To issue invoices and meet our tax and record-keeping obligations
- To respond if something goes wrong, including for insurance purposes
We do not sell your information. We do not add you to a mailing list unless you ask to be added.
05Photos and WhatsApp
Many parents like updates during the night, and a WhatsApp group is usually the easiest way to send them. If we set one up for your event, your phone number becomes visible to the other parents in that group. That is how WhatsApp works, and it is worth knowing before you join.
- We ask permission before photographing any child
- Photos taken during the event are shared with that event's parents and no one else
- We do not post photographs of children on social media or on this website
- The group is deleted, and the photos removed from our phone, within seven days of the event
- If you would prefer your child not be photographed at all, tell us and we will not
Messages you send us on WhatsApp pass through and are stored on Meta's servers. See section 10.
06Who we share it with
A short list, and it stays short.
- Nannies working your event. They see the details for the children in their care, and nothing from other bookings.
- Emergency services. If a child needs an ambulance, we hand over whatever medical information helps them treat that child.
- Your venue. Only logistical details — timings, room requirements, headcount. Never medical information.
- Our accountant. Invoices and payment records, for tax purposes.
- Our insurer. Only if an incident leads to a claim.
- Where the law requires it. Including mandatory reporting obligations relating to child safety, which override this policy and your consent.
Everyone who works with us is required to keep what they see confidential, and to hold a current Working with Children Check.
07How long we keep it
We delete things on a schedule rather than keeping them indefinitely.
| What | How long | Why |
|---|---|---|
| Enquiries that do not become bookings | 12 months | In case you come back to us about the same event |
| Children's names, ages and medical details | 30 days after the event | Long enough to answer questions afterwards, short enough not to hold it needlessly |
| Sign-in and sign-out register | 7 years | Insurance and duty-of-care records |
| Incident reports | Until the child turns 25 | The period in which a claim could still be brought |
| Invoices and payment records | 7 years | Required by Australian tax law |
| WhatsApp groups and event photos | 7 days after the event | They have served their purpose by then |
When a period ends, digital records are deleted and paper records destroyed.
08How we protect it
The measures below describe an appropriate standard for a business handling children's health information. Before publishing, confirm each one is true of your practice — a policy that promises controls you do not have is worse than no policy at all. Delete this box once you have checked.
- Devices holding booking information are passcode-protected and encrypted
- Accounts we use for email and file storage have two-factor authentication enabled
- Paper forms are kept with us during the event and destroyed once transcribed
- Card details are handled by our payment provider and never stored by us
- Nannies are given only the information they need for the children they are supervising
No system is perfect. If a breach occurs that is likely to cause you serious harm, we will tell you and notify the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.
09This website
The site does not use advertising cookies, and we do not sell or share visitor data with advertisers. Three external services load when you open a page:
- Google Analytics counts visits so we know which pages people actually read. It sets cookies and sends Google your IP address, approximate location, device and browser type, and the pages you view. It does not tell us who you are, and we never combine it with your booking details.
- Google Fonts serves the typefaces. Your browser requests them from Google, which receives your IP address as part of that request.
- FormSubmit delivers the enquiry form to our inbox. What you type passes through their servers on the way to us.
If you would rather not be counted, most browsers let you block cookies or third-party scripts, and browser extensions that block analytics work on this site. Nothing on the site stops working if you do.
Our web host also keeps standard server logs, including IP addresses and pages requested, for security and troubleshooting. Where this site links out to another website, that site's privacy policy applies once you leave ours.
10Overseas storage
Some of the services above store data outside Australia — Google Analytics and Google Fonts and FormSubmit in the United States, and WhatsApp on Meta's international infrastructure. By using this website or messaging us on WhatsApp, you accept that this information will be handled overseas, where Australian privacy law may not apply in the same way.
Email us at hello@tinytuxnannies.au instead of using the website form, and we will take your details directly. Detailed information about your children is never collected through the website form in any case.
11Your rights
You can ask us at any time to:
- Tell you what personal information we hold about you or your children
- Give you a copy of it
- Correct anything that is wrong or out of date
- Delete anything we are not required by law to keep
- Stop contacting you
Email hello@tinytuxnannies.au and we will respond within thirty days. There is no charge. We may ask you to confirm your identity first, so that we are not handing your children's details to someone else.
12Complaints
If you think we have mishandled your information, tell us first. Email the address above and we will acknowledge it within five business days and give you an answer within thirty.
If you are not satisfied with how we have handled it, you can take the complaint to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
13Changes to this policy
We update this page when what we do changes. The version and date at the top always reflect the current one. If a change materially affects how we handle information about children, we will tell parents with an active booking directly rather than relying on you to notice.
14Contact us
Questions about this policy, or about anything we hold:
Tiny Tux Nannies · ABN 68 747 656 218 · Sydney, New South Wales, Australia