Your information, handled with care.

Who we are

The Scaled Brick is an independent creative practice operated by a sole trader (ABN 72 878 522 731) based in Brunswick, Victoria, Australia. In this policy, "we", "us" and "our" mean The Scaled Brick. You can reach us any time at hello@thescaledbrick.com or via our contact page.

We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth). While a small business of our size may not currently be bound by all of those obligations, we choose to follow them as good practice — and we will keep this policy current as the law changes.

What we collect

We only collect what we need to provide what you've asked for:

• Contact details — your name, email address and (if you give it) phone number, when you book, enquire or subscribe.
• Booking details — the role-playing session, event or commission you're booking, the number of places, and any notes you add.
• Accessibility & safety information — anything you choose to tell us about access needs, allergies or support requirements so we can run a safe, welcoming session.
• Children's details — for participating teenagers, limited information (such as a first name, age range or allergy note) provided by a parent or guardian, used only to run the activity safely.
• Payment information — payments are processed by Square. We receive a record that a payment was made and the amount, but we do not collect or store your full card numbers.
• Messages — the content of enquiries you send us.

How we use it

We use your personal information to:

• Confirm and run your role-playing booking, event or commission;
• Respond to your enquiries and provide quotes;
• Process payments (through Square) and keep basic transaction records;
• Keep you safe and meet our duty of care and Child Safe obligations;
• Send you updates only if you've asked us to (see Marketing, below); and
• Meet our legal, tax and insurance obligations.

Marketing & your choices

We'll only send you marketing emails if you've explicitly opted in. Programme interest forms send your details and selected interest to our studio by email, with your permission to contact you about that programme. They do not enrol you in a paid session or subscribe you to a general newsletter. When an email list launches, every marketing message will include a clear unsubscribe option. If you opt out, we'll remove you within five business days, in line with the Spam Act 2003 (Cth). Booking you into a game never automatically subscribes you to marketing.

Who we share it with

We do not sell your personal information, ever. We share it only where needed to run the business — for example with Square (payments) and our email and booking tools — and only so they can perform that service for us. We may also disclose information if required by law, or to protect the safety of a participant. Some of these providers may store data overseas; we choose reputable providers who take privacy seriously.

How we store and protect it

Booking records are stored privately on our website's server, behind a password-protected administrator area and blocked from public web access; they are not shared publicly or committed to any public code repository. Payment data lives with Square under their bank-grade security. We take reasonable steps to protect your information from misuse, loss and unauthorised access, and we keep it only as long as we need it for the purposes above or to meet our legal obligations.

Cookies & analytics

We use only strictly-necessary cookies. The site sets a single first-party session cookie so the studio administrator can stay signed in to the private booking area — ordinary visitors browsing the site are not tracked, and no consent banner is needed for an essential cookie like this.

When you make a payment you are taken to Square's secure hosted checkout; Square may set its own cookies on that page to process the transaction, governed by Square's privacy policy. Our web fonts are served from this website. Embedded videos use YouTube's privacy-enhanced youtube-nocookie.com domain; YouTube may still receive technical information when a page containing a video loads or when you play it. We do not run Google Analytics, Meta Pixel, or third-party advertising cookies. If we ever add analytics, we'll use a privacy-respecting tool and update this policy first.

Accessing or correcting your information

You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it where we're able to. Just email hello@thescaledbrick.com and we'll help. If you're ever unhappy with how we've handled your information, you can also contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Children's privacy

We collect children's information only from a parent or guardian, only what's needed to run an activity safely, and we handle it in line with Victoria's Child Safe Standards. We don't market to children.

Changes to this policy

We may update this policy from time to time — for example, as our services or the law change. The "last updated" date at the top shows the current version. For anything you're unsure about, please get in touch.