Last updated 4 August 2026

At City Recital Hall Limited ACN [606 955 293] (“City Recital Hall”, “we”, “us” and “our”) our people and patrons are important to us, and we appreciate the importance of your personal information.

It is common to provide personal information when engaging with City Recital Hall, and this policy sets out how we ensure those details are handled securely, sensitively, and in accordance with the Privacy Act 1988 (Cth) (Privacy Act) and the Australian Privacy Principles under the Privacy Act.

What is personal information

How we collect personal information

How we use personal information

When we disclose personal information

When we share personal information outside Australia

Cookies, pixels and third-party tracking technologies

Marketing communications

Security of payment information

Links to other websites

Dealing with us without providing your personal information

How you can access or seek correction of your personal information and make a complaint

Contacting Us

When this Privacy Policy applies

This Privacy Policy applies to the handling of personal information by City Recital Hall.

We may make changes to this Privacy Policy, with or without notice to you. However, where we make a material change to the Privacy Policy, we will provide notice to you (including by updating our websites, and, where appropriate, notifying you directly). We recommend you visit this Privacy Policy regularly to keep you up to date with any changes we make.

Other privacy related notices and terms and conditions may apply to you, such as privacy collection notices provided at the time of your Engagement with us.

What is personal information

The Privacy Act defines 'personal information' as information or an opinion about an identified individual, or an individual who is reasonably identifiable. Personal information can also include information that does not identify an individual on its own, but when taken together with other information, may be capable of identifying an individual.

Personal information does not include:

aggregated or de-identified data (including aggregated information about people entering, exiting or moving within our venue (for example, foot traffic, demographic insights or occupancy data)), which does not identify, and cannot reasonably be used to identify, any individual; or
if you are a contractor, hirer, promoter or supplier, your business information that does not identify a person or reasonably identify you (i.e. in certain circumstances, your business payment details).

The kinds of personal information collected by City Recital Hall varies depending on the Engagement (see the ‘How we collect personal information’ section below), but may include:

first and last names;
transaction and payment information;
images and videos of you at our venue or events;
contact information including phone numbers, email addresses and mailing addresses;
information about your accessibility requirements – this may include sensitive information;
information you provide when contacting us, including enquiries, requests, feedback or complaints;
online and digital services information including network and device information, browsing information or information collected from cookies and/or online tracking technologies when you access our newsletter or use our Website;
CCTV information;
information about your interests and ticketing history (for example, film, talks, comedy or opera)
if you experience or are involved in a medical incident that occurs at our venue, limited medical information – this may include sensitive information and health information; or
employee and workplace information (including information about your employment history, education and qualifications, your tax file number, identity document information (including Working with Children Check details)), your bank account details, emergency contact information and other information provided a part of our recruitment process and onboarding process (if you are successful in applying for a position).

As City Recital Hall is an all ages venue, we may collect the above personal information about minors who purchase tickets to an event or attend an event at our venue.

How we collect personal information

Personal information is often provided to City Recital Hall when engaging with us, such as if you:

Purchase tickets to an event (whether through our ticketing services or where we are otherwise involved in facilitating the event);
In person when you attend an event at our venue (or another venue, facilitated by us);
Hire our venue or engage with us as an event promoter or partner;
Sign up to receive communications from us (including our newsletter);
Create an account;
Join our membership program;
Interact with our Website;
Interact with us on social media;
Contact us for customer service requests, accessibility arrangements or feedback;
Enter our competitions or promotions;
Make a donation (including as part of a ticket purchase or separately); or
Otherwise interact with us whether online, over the phone, in person or by other means,

(together, “Engagements”).

You may provide personal information to City Recital Hall directly, for example when completing your information to receive our newsletter.

When you visit City Recital Hall, your image may be collected by our security systems which include closed circuit tv (CCTV) footage. Reasonable steps are taken to ensure CCTV footage is stored in a secure format, and is used only for purposes the security and safety of our people and patrons and the protection and management of City Recital Hall. Your image may also be collected incidentally by photography, video and/or audio recordings made at City Recital Hall events. City Recital Hall occasionally uses those recordings for marketing purposes, and your image or voice may be included in such materials. By entering our venue, you acknowledge that photography, video and audio recordings may take place.

City Recital Hall takes our responsibility to keep your information secure seriously. Any personal information collected by City Recital Hall is kept in a centralised and secure storage platform, and only accessible by authorised employees who need access to the information to perform their roles. Those employees are subject to security controls and procedures.

Indirect collection of personal information: We may also, in limited circumstances, collect personal information about you indirectly from third parties. For example:

if someone purchases a ticket on your behalf and provides your personal details for the ticket;
where events at City Recital Hall are presented or ticketed by third parties, we may receive personal information about ticket holders (such as name and contact details) from those third parties to facilitate entry, ticket scanning and event operations; or
if you are applying for a position to work with us, from recruiters, referees, social media platforms and other parties involved in the job application process.

How we use personal information

City Recital Hall takes care to limit use of your personal information to the purposes you provided it to us for, for reasonable related secondary purposes, to optimise your experience and relationship with us, and as otherwise permitted or required by law.

We may use your personal information for a range of purposes relating to our operations, events and services, including to:

provide our services and manage events, including processing ticket purchases, facilitating entry to events, managing attendance, and providing ticketing services (including where we assist third parties with ticketing);
communicate with you, including in relation to tickets you have purchased to City Recital Hall events or other events at our venue (such as order confirmations, event updates and important notices), to provide information about membership benefits, provide post-show surveys and to respond to enquiries or provide customer support;
- If you have opted to receive our newsletter, we will use your personal information to send you updates about upcoming events and news at City Recital Hall; and
- We may also send you reminder messages where you have begun but not completed a ticket purchase on our Website (for example, an abandoned cart notification), which may include an offer or incentive to complete your transaction;
manage your membership, donations and other programs, including administering membership benefits, processing donations and managing waitlists;
support our marketing and promotional activities, including providing you with information about upcoming events, offers and venue services (such as food and beverage options), and helping us tailor our communications and advertising to your interests (see ‘Marketing communications’ for more details, including how you can opt-out of receiving these messages);
understand and improve our venue and services, including analysing attendance patterns, purchase history, engagement with communications, and movement within our venue spaces;
manage our relationships with event hirers, promoters and partners, including sharing information where appropriate to deliver events, enable reporting and analytics, and facilitate communications where you have opted in (see ‘When we disclose personal information’ for more details);
operate, test, train, maintain and improve our systems and technology, including through third party service providers who assist with administering our ticketing platforms, marketing systems, website functionality and technical support, as well as through the use of artificial intelligence tools;
assist with any actual or potential business or share sale, or corporate restructure, including to facilitate or implement a transfer or sale of all or part of our assets or business, or if we undergo any other kind of corporate restructure, acquisition or sale; and
comply with our legal and regulatory obligations, and manage risks, safety and security at our venue.

Overall, we use your personal information to ensure you receive excellent service, to optimise your experience at City Recital Hall, and to enhance our relationship through communication.

Who do we disclose (share) personal information and why

We may disclose (share) personal information with our third-party service providers that perform internal business functions or collect information on our behalf. For example, we necessarily provide personal information to software service providers that automate certain administrative customer experience functions for us. We may also share personal information:

with event promoters, hirers and partners where this is necessary to deliver an event, manage attendance, or where you have opted in to receive communications from them (see ‘Marketing communications’ for further details);
with our third party service providers, including those who assist with ticketing, marketing, website development and maintenance, merchandise fulfilment (including meet and greet fulfilment), event experiences, and technology support;
with the primary ticketing agent for an event, in the instance we are not the primary ticketing agent for that event. We may be required to supply basic personal information of ticketholders (customer identifier, email, name, tickets purchased, address) to the primary agent but the primary agent cannot contact you unless you have expressly opted in to receive communication from them;
with third party platforms and providers who assist us with marketing, analytics and customer engagement activities;
with other organisations where this is reasonably necessary to support our operations, including troubleshooting, system support and service delivery;
with entities considering acquiring an interest in City Recital Hall or any business or assets of City Recital Hall, investors or transaction participants, for the purpose of facilitating or implementing a transfer or sale of all or part of our assets or business, or if we undergo any kind of corporate restructure. In this context, your personal information may be transferred to another entity; and
if we are legally required to do so, or if disclosure is reasonable and necessary to prevent harm to our people, patrons, partners, or affiliates (to the extent permitted by law). We will notify you of such disclosure wherever practicable.

When we share information with third parties, we use de‑identified or aggregated information wherever reasonably possible. However, in some cases, we may share limited information with event promoters, hirers and partners for reporting and analytics purposes. This may include aggregated attendance trends, postcode information, or technical identifiers (such as customer reference numbers) that are not intended to directly identify you, but which may, in some circumstances, be capable of identifying you when combined with other information. In those cases, we take reasonable steps to minimise the information disclosed.

Where that is not possible, we take reasonable steps to ensure these third parties only collect and use personal information in accordance with this Privacy Policy, and for no other purpose other than providing us with the agreed services.

When we disclose or share personal information outside Australia

Some of our third-party service providers are located overseas. As a result, your personal information may be stored, accessed from, processed in, or disclosed to organisations located outside Australia.

This may include organisations located in the United States of America, Ireland and other countries in the European Union.

In some cases, these overseas service providers may access personal information from overseas to provide services to us, such as IT support or other business operations.

Where we share personal information to overseas third parties, we take reasonable steps to ensure the personal information is handled securely and in a manner that is consistent with the Privacy Act and Australian Privacy Principles.

Cookies, pixels and third-party tracking technologies

Cookies: Cookies are small files placed on browsers by websites to understand users' engagement with particular websites, and to facilitate their convenient access and use. Cookies do not cause damage to a user's computer and are not malicious files. Some cookies may be associated with personal information and some may not.

Pixels: A tracking pixel is a piece of code that a business or third-party provider can place on its website or in email to collect information about a users’ activity, including the site pages they visit time spent on each page, IP address, and/or form inputs (as relevant). When users visit pages with pixels, the pixel “loads” and send the information it is designed to collect back to the server of e.g. in the case of third-party pixels this would be to the third-party service provider.

City Recital Hall uses cookies, pixels and other third-party tracking technologies to collect information in the form of various usage and user metrics when you engage with our Website or services. For example, we use Google Analytics features to collect data about traffic to our Website using tracking technologies. We also use Meta and Tik Tok analytics tools to collect information from City Recital Hall social media channels which assists with our marketing activity. The information that is collected from these third-party technologies is pseudonymous or aggregated data, meaning it generally does not identify any individual user.

However, depending on the tracking technologies used, certain identifiers (such as hashed email addresses, hashed phone numbers or other matching data) may be shared with social media platform providers (such as Meta) to help them identify you and connect your activity across devices. These third-parties may combine the information collected for us with other information they have independently collected. In some circumstances, this matching may occur even if you are not actively logged into your social media account at the time. As such, in some circumstances, information collected through these tracking technologies may be personal information.

The information transmitted via tracking pixels to third party platforms is not just technical data, it can include specific details around your preferences, likes and interests or your actions and intentions such as: browsing specific webpages such as what's on at City Recital Hall, and your progress in completing membership sign-up or a sponsorship donation.

Opting out: If you do not wish to receive any cookies (other than those that are strictly necessary), you can manage or reject the use of non-essential cookies by changing your browser's privacy settings or by disabling tracking on your mobile device.

Please note that if you refuse or reject essential cookies (those that enable the performance and functionality of the City Recital Hall Website), your experience of our Website may be impaired. For example, you may be unable to access certain pages or content on our Websites.

To change your web browser preferences, please visit the relevant preferences or settings page on your browser and amend the privacy settings in relation to cookies and site data. You can also use browser extensions available online to identify tracking pixels and in some instances, block ads. It may be necessary for you to opt out or install such extensions separately for each device and browser that you use to access online content.

Depending on what device you use, you may additionally be able to limit information collected by these tracking technologies via your device settings.

As we use third-party service providers, these parties may collect data related to your use of our online services through a suite of tracking technologies, such as third-party cookies, tracking pixels and web beacons, for analytic and/or marketing purposes. These third party providers may update their policies and settings from time to time, so we encourage you to review their terms and policies for more information on their data collection practices and options available to you for managing your privacy. Please note that how these third parties handle and use your data is governed by their own privacy policies, not ours.

In addition to opting out of cookies via your browser as described above, you can opt out of the following third-party tools we use via the instructions available at the links below:

Provider	Description
Hotjar	https://www.hotjar.com/policies/do-not-track/ - follow the relevant ‘Do Not Track’ instructions for your browser type.
Alphabet Inc	If you use YouTube, Google or any other platforms owned by Alphabet, you can manage how tracking technologies are used by checking your browser or account settings and adjusting your ‘privacy & safety’ and ‘search personalisation’ settings. If you would like more control over your Google Analytics settings, you can also download the Google Analytics Opt-out Browser Add-on. You can also manage your ad preferences on Facebook.
Meta Platforms Inc	If you use Facebook, Instagram, Threads or any other platforms or networks owned or used by Meta, you can generally adjust your ‘ad preferences’ in the account settings of the respective platform that you access and see ads in.
TikTok	If you use TikTok, you can adjust your ad preferences in the app’s settings to manage how ads are personalised based on your activity and interests. To do this, go to your profile, tap the menu icon, select “Settings and privacy,” then tap “Ads” and choose “Manage ad topics.”

Marketing communications

City Recital Hall may use and share your personal information for direct marketing through various channels, such as email, SMS or social media (through targeted advertisements on certain websites, mobile applications and social media channels). Marketing communications may include information about upcoming events, special offers, venue news, and recommendations such as nearby dining and entertainment options around the venue.

We will only send these communications in accordance with the Privacy Act (including Australian Privacy Principles 7) and the Spam Act 2003 (Cth), and only where you have not opted out from receiving such communication from City Recital Hall. We may share your personal information with third party service providers who assist us with our marketing and promotional activities, including providers that support digital marketing and customer communications.

We may also share your personal information with event promoters or performers only where you choose to opt in to receive communications from them during the ticket purchase process on the City Recital Hall Website.

You are always in control of the direct marketing communications which you receive from us and can opt-out at any time using the methods described below, as well as by disabling the third-party tracking tools via the methods set out above (see ‘Cookies, pixels and third-party tracking technologies’).

Generally, you can opt out or unsubscribe from receiving communications from City Recital Hall by changing the settings via a hyperlink in the footer of emails received from City Recital Hall.

If you have indicated a preference for a method of communication, we will endeavour to use that method wherever practical to do so.

Important points regarding opting out –

· regardless of whether you opt out from receiving marketing communications from City Recital Hall, we may still contact you where necessary in connection with events or services we provide to you, including to send you order confirmations, tickets, pre‑show information, post-show surveys and/or important event updates (for example, if an event is cancelled or materially changed).

· we may also send you reminder messages if you have begun but not completed a ticket purchase on our Website (such as an abandoned cart notification), which may include an offer or incentive to complete your transaction (which you can opt-out of using the unsubscribe link in such messages); and

· if you opt in to receive marketing communications from an event promoter, hirer or performer, this relates to communications from that third party only. Updating your preferences or opting out of communications from a promoter, hirer or performer will not automatically update your communication preferences with City Recital Hall, and vice versa.

Security of payment information

Payment information is necessarily provided to City Recital Hall when engaging in financial transactions with us. We take our responsibility to keep those payment details secure seriously.

All transactions on our Website, such as purchasing tickets to events or donating to City Recital Hall, are encrypted, meaning no third party that might intercept the data can interpret it. The encrypted payment information is processed by a secure third-party server and is not collected by City Recital Hall.

We also take reasonable steps to ensure the security of financial transactions made with us in person, such as if you purchase a ticket from our box office, buy merchandise, food or beverages. Our credit card readers encrypt your payment information, and if payment information must be provided directly to us for any reason, it will be destroyed immediately after the transaction is complete.

Links to other websites

When you access our Website or communicate with us online (including via email or on social media), we may provide, as a convenience to you, links to third party websites, including sites operated by our partners, hirers, promoters, or independent third parties. Each website has its own privacy practices, as described in that website’s privacy policy. Those practices may be different than the practices described in this Privacy Policy, and we encourage you to read each website’s privacy policy carefully before you use or submit information to that site.

Additionally, to the extent that you follow a link to a website operated by an independent third party, please be aware that we exercise no authority or control over that third party, and cannot and are not responsible for any information that you may submit to that site. We encourage you to read the relevant third party’s privacy policy before supplying any personal information to them.

Dealing with us without providing your personal information

If you do not want to provide personal information to City Recital Hall, you have the option to remain anonymous as far as it is practicable. However, sometimes it will be necessary to provide us with accurate contact details. For example, if you want to receive tickets by post, we will need accurate postal details to send them to you.

How you can access or seek correction of your personal information and make a complaint

Access and correction

City Recital Hall takes reasonable steps to ensure the personal information it holds is accurate, up-to-date, complete, relevant and not misleading. You can help us to do this by letting us know if you notice errors or discrepancies in information we hold about you, and informing us of any change in your personal details.

If you have an online account with us via our Website (Account), you can at any time access and change your personal information by updating your Account preferences after you log in to the City Recital Hall Website. If you wish to access personal information not accessible by logging into your Account, send us a request at the details under Contacting Us, and we will provide you the information without charge.

If you update your personal information or change your preferences, certain information may continue to exist in our systems. If you wish your account to be deleted completely and/or to ensure all of your information is deleted, send us a request at the details under Contacting Us and we will take all reasonable steps to remove or de-identify any personal information where we are permitted to by law. If we are unable to remove your information for any reason, we will notify you of this with an accompanying explanation.

If you are dissatisfied with City Recital Hall’s refusal to grant you access to, or correct your personal information, you can also complain to us as set out below.

Complaints

If you have any questions or concerns about this Privacy Policy or how we have handled your personal information (including any access or correction request), you may contact us at any time using the relevant contact details set out below in the contacting us section.

Please also contact us if you have a complaint about privacy. If you make a complaint about privacy, the following will occur:

Step

We will first consider your complaint to determine whether there are simple or immediate steps which can be taken to resolve the complaint. We will generally acknowledge your complaint within a week.
If your complaint requires more detailed consideration or investigation:
1. we will acknowledge receipt of your complaint within a week and endeavour to complete our investigation into your complaint promptly; and
2. we may ask you to provide further information about your complaint and the outcome you are seeking.
We will then typically gather relevant facts, locate and review relevant documents and speak with the individuals involved.
In most cases, we will respond to your complaint within 30 business days from when we receive your complaint. If the matter is more complex or our investigation may take longer, we will let you know.

If you are not satisfied with our response to a complaint, or you consider that we may have breached the Privacy Act (including the Australian Privacy Principles), you are entitled to make a complaint to the Office of the Australian Information Commissioner (the Australian privacy regulator).

The Office of the Australian Information Commissioner can be contacted by telephone on 1300 363 992, or you can fill out this form to make a complaint about our handling of your personal information. Full contact details for the Office of the Australian Information Commissioner can be found online at www.oaic.gov.au.

Contacting Us

If you have questions or concerns about this Privacy Policy, or our handling of your personal information, please contact our Privacy Officer as soon as possible.

You can contact our Privacy Officer directly via email [email protected]

Or write to the Privacy Officer at:

GPO Box 3339

Sydney NSW 2001, Australia