The types of personal information we may collect about you include:

• your name and contact details (such as email address, postal address, and phone number);
• your date of birth or age range;
• your billing, payment, and transaction details;
• details of services or products you have purchased or enquired about;
• records of communications or interactions with our customer service team;
• your preferences, feedback, and opinions collected through surveys or user interactions;
• information about your use of our website, apps, and platforms, including IP address, browser type, and analytics data;
• information provided through social media accounts or linked third-party platforms; and
• any other personal information provided by you or authorised third parties in connection with your use of our services.

We collect, hold, and use personal information to support the operation and improvement of our services, including to:

• enable you to register for and use our website, apps, and booking systems;
• communicate with you regarding support, inquiries, and account management;
• administer and maintain business records and accounts;
• conduct analytics, market research, and product development to enhance our platform and offerings;
• send promotional and marketing communications you have consented to receive;
• run competitions, promotions, or loyalty programs; and
• comply with our legal and regulatory obligations, including fraud prevention and dispute resolution.

We may share personal information with trusted third parties to help us deliver and improve our services, including:

• IT, cloud hosting, analytics, and payment processing providers;
• marketing, communications, and support partners assisting us in engagement activities;
• our employees, contractors, or affiliates where reasonably necessary for business operations;
• professional advisors such as accountants, auditors, or lawyers;
• third parties assisting in business transfers, mergers, or restructuring activities; and
• courts, regulators, or enforcement agencies where disclosure is required or authorised by law.

This may include recipients located outside Australia, including in countries such as Singapore and the United States, where our hosting and analytics services operate. Tonso takes reasonable steps to ensure that overseas recipients handle your data in accordance with the Australian Privacy Principles through contractual and technical safeguards.

We may also share anonymised or aggregated data (that does not identify individuals) for analytics, business insight, or performance reporting.

• Sensitive information refers to details such as health data, ethnicity, religion, sexual orientation, political beliefs, or criminal records that are subject to additional protections under the Privacy Act 1988 (Cth).
• Tonso Pty Ltd does not ordinarily collect sensitive information. If such data is ever collected (for example, during staff or partnership processes), it will only be used for the purpose for which it was provided or where authorised by law, with your explicit consent.

• Choice and consent: By providing personal information, you consent to its collection and handling as outlined in this policy. You may withdraw consent or request limited use of your information by contacting us.
• Access: You may request access to the personal information we hold about you. We will respond within a reasonable period, typically within 30 days, and may charge only a reasonable fee to cover costs of retrieval.
• Correction: If you believe any personal information is inaccurate or incomplete, please contact us. We will promptly correct or update it as required.
• Complaints: If you believe we have breached the Australian Privacy Principles, please contact us with full details. We will investigate and provide a written response outlining the outcome and next steps.
• Marketing preferences: You can opt out of direct marketing or promotional emails at any time by using the unsubscribe link or contacting us directly.

• Tonso stores personal information securely on servers protected by encryption, firewalls, and access controls. Only authorised personnel can access this data when required to perform their duties.
• We retain personal information only for as long as necessary to fulfil the purpose for which it was collected or as required by law. Once no longer needed, the data is deleted or de-identified.
• While we take reasonable measures to protect your information, we cannot guarantee security for data transmitted over the Internet, and you do so at your own risk.

• Our website uses cookies to improve your browsing experience and analyse traffic. Cookies store non-identifiable data such as session preferences and usage metrics.
• We also use third-party cookies and web beacons from providers such as Google Analytics and Meta to track user interactions, measure engagement, and display relevant content. You can control or disable cookies through your browser settings, though this may affect certain site functions.

• Our website may contain links to external websites operated by third parties. We are not responsible for the privacy practices, content, or security of those sites. We encourage users to review the privacy policies of any third-party websites before sharing personal information.

• Tonso may update this Privacy Policy from time to time to reflect operational or legal changes. Any material changes will be communicated via email or a notice on our website. The latest version will always be available at www.tonso.com.au/privacy-policy.

• Tonso Pty Ltd ABN 74 668 547 028
• Address: 196 Liverpool Road, Enfield, NSW 2136, Australia
• 📞 1300 368 313
• 📧
• Last update: 29 October 2025