Privacy Policy
Wilder Romp ("we", "us", "our") is a private filming location hire business operated in Victoria, Australia. This privacy policy explains how we collect, use, store and protect your personal information when you visit wilder-romp.com or contact us through the website.
This policy is designed to meet the requirements of the Australian Privacy Act 1988 (including the Australian Privacy Principles), the EU General Data Protection Regulation (GDPR), the UK GDPR, and applicable US state privacy laws including the California Consumer Privacy Act (CCPA/CPRA), Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act, Connecticut Data Privacy Act, and Texas Data Privacy and Security Act.
1. Information We Collect
Information you provide directly
When you submit the contact form on this website, we collect the following personal information:
- Your name
- Your email address
- Your Instagram handle (optional)
- Your preferred session type and dates
- The content of your message
Information collected automatically
When you visit this website, we use Google Analytics 4 (GA4) to collect anonymised usage data, but only if you have given consent via the cookie banner. GA4 is a web analytics service provided by Google LLC ("Google"). When you consent to analytics cookies, GA4 may collect:
- Pages visited, time spent on each page, and navigation path through the site
- Referring website, search engine, or campaign source
- General geographic region (country and city level, derived from anonymised IP address — not your precise location)
- Device type, screen resolution, browser, and operating system
- Interactions such as button clicks, scroll depth, and form engagement
- Session duration, frequency of visits, and new vs returning visitor status
IP anonymisation is enabled, meaning your full IP address is never stored by Google Analytics. We do not use GA4's advertising features, remarketing, or demographic profiling. No analytics data is collected until you actively click "Accept" on the cookie consent banner.
2. How We Use Your Information
We use your personal information solely for the following purposes:
- To respond to your enquiry about hiring the property
- To manage bookings and scheduling
- To improve our website and understand how visitors use it (anonymised analytics only, with consent)
We will never use your information for unsolicited marketing unless you have given explicit, separate consent.
3. Legal Basis for Processing
We process your personal information on the following legal bases:
- Consent — You provide consent when you submit the contact form or accept analytics cookies
- Legitimate interest — To respond to enquiries and manage our business operations
- Contractual necessity — To process bookings and fulfil our obligations to you
4. Data Storage & Security
Form submissions are processed and stored by Netlify, Inc. (US-based, headquartered in San Francisco, California). The website is hosted on Netlify's global content delivery network.
Analytics data is processed and stored by Google LLC (US-based, headquartered in Mountain View, California) through Google Analytics 4. Google processes this data on our behalf and in accordance with our settings. Google's privacy policy is available at policies.google.com/privacy.
We take reasonable steps to protect your personal information from unauthorised access, loss or misuse. However, no method of internet transmission or electronic storage is completely secure.
5. Data Retention
We retain your personal information (contact form submissions) for up to two (2) years from the date of your last contact with us, unless an ongoing business relationship exists. After this period, your data will be securely deleted unless you have given separate consent for continued communications.
Google Analytics 4 data retention is set to 14 months. After this period, event-level data is automatically deleted by Google. Aggregated, non-identifiable reporting data may be retained longer. You can read more about Google's data retention practices at Google Analytics data retention.
6. Data Sharing
We do not sell, rent or trade your personal information. Your data may be shared only with the following third-party service providers who process data on our behalf:
- Netlify, Inc. — for form submission processing and website hosting (US-based). Netlify's privacy policy: netlify.com/privacy
- Google LLC — for anonymised website analytics via Google Analytics 4 (US-based). Google's privacy policy: policies.google.com/privacy. You can opt out of Google Analytics across all websites by installing the Google Analytics Opt-out Browser Add-on.
We do not share your personal information with any other third parties unless required by law or to protect our legal rights.
7. Your Rights
All visitors
Regardless of where you are located, you have the right to:
- Request access to the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your personal information
- Withdraw consent at any time
Australian residents
Under the Australian Privacy Act 1988, you have the right to access and correct your personal information. If you believe we have breached the Australian Privacy Principles, you may lodge a complaint with us directly or with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
EU/UK residents (GDPR)
Under the GDPR, you have additional rights including the right to data portability, the right to restrict processing, and the right to object to processing. You also have the right to lodge a complaint with your local data protection authority.
US residents
If you are a resident of California, Virginia, Colorado, Connecticut, Texas or another US state with consumer privacy legislation, you have the right to know what personal information we collect, request deletion, and opt out of any sale or sharing of personal data. Wilder Romp does not sell your personal information. To exercise your rights, contact us using the details below.
8. Cookies
A cookie is a small text file stored on your device by your web browser. This website uses cookies in the following categories:
Essential cookies (no consent required)
These cookies are strictly necessary for the website to function. They include:
- wr-cookie-consent — Stores your cookie consent preference (accept or decline). Stored in your browser's local storage. No expiry unless you clear your browser data.
Analytics cookies (consent required)
These cookies are set by Google Analytics 4 and are only loaded if you click "Accept" on the cookie consent banner. They include:
- _ga — Distinguishes unique visitors. Expires after 2 years.
- _ga_90KGLQQTT2 — Maintains session state. Expires after 2 years.
If you decline cookies, no analytics cookies are set and no data is sent to Google.
Managing your preferences
You can change your cookie preferences at any time by:
- Clearing your browser cookies and local storage, then revisiting the site — the cookie banner will reappear
- Using your browser's built-in cookie management settings to block or delete specific cookies
- Installing the Google Analytics Opt-out Browser Add-on to prevent Google Analytics from collecting data across all websites you visit
9. International Data Transfers
Your data may be transferred to and processed in the United States through our use of Netlify (hosting and form processing) and Google (analytics). Both companies are based in the United States.
For transfers from the EU/UK to the US, these providers rely on the EU-US Data Privacy Framework, Standard Contractual Clauses (SCCs), and/or other approved transfer mechanisms under the GDPR and UK GDPR. For transfers from Australia, these transfers are made in accordance with Australian Privacy Principle 8 (cross-border disclosure of personal information), and we take reasonable steps to ensure that overseas recipients handle your information in accordance with the Australian Privacy Principles.
By using this website and consenting to analytics, you acknowledge that your data may be processed outside your country of residence as described above.
10. Do Not Track Signals
Some browsers transmit a "Do Not Track" (DNT) signal to websites. Because there is no universally accepted standard for how to respond to DNT signals, this website does not currently respond to them. However, our consent-based approach to analytics means that no tracking occurs unless you have actively clicked "Accept" on the cookie banner, which provides equivalent or stronger privacy protection than DNT compliance.
11. Do Not Sell or Share My Personal Information (US Residents)
Wilder Romp does not sell your personal information, as defined under the California Consumer Privacy Act (CCPA/CPRA), the Virginia Consumer Data Protection Act (VCDPA), or any other applicable US state privacy law. We do not share your personal information for cross-context behavioural advertising. We do not use GA4's advertising features, Google Signals, or remarketing capabilities.
Because we do not sell or share personal information, there is no need to submit a "Do Not Sell" request. However, if you have any concerns, you may contact us via the enquiry form at wilder-romp.com.
12. Children's Privacy
This website is not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has submitted personal information to us, please contact us and we will promptly delete it.
13. Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
14. Contact
If you have any questions about this privacy policy or wish to exercise your rights, please contact us via the enquiry form at wilder-romp.com.