• 9 Riverina Court, Nerang
Logo of "Surf & Swirl" featuring an ice cream cone styled as a wave with a sun in the background. Text reads "Ride the Creamy Wave."
Get In Touch

Privacy Policy

  • Privacy Policy

Last updated: 21 Jan 2026

This Privacy Policy explains how Surf & Swirl (“we”, “us”, “our”) collects, uses, discloses, and protects your personal information when you visit our website, make a booking, contact us, or use our services (including our ice cream van services across Brisbane, Gold Coast, Ipswich, Moreton Bay, Logan, Redland and surrounding areas).

We are committed to respecting your privacy and protecting your personal information. This Policy is designed to be consistent with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), as applicable to our business.

By using our website or services, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Who We Are

Business Name: Surf & Swirl
Website: surfandswirlicecream.com.au
Contact Email: rvonhoff@hotmail.com
Contact Phone: 0431434208

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us using the details above.

2. What Information We Collect

We may collect the following types of personal information, depending on how you interact with us:

2.1 Information You Provide Directly

  • Contact details: name, email address, phone number.
  • Booking details : event date, time, location, type of event, estimated guest numbers, special requests.
  • Business details : if booking on behalf of a school, company, council, or organisation.
  • Payment details : we generally use third‑party payment providers and do not store full credit card numbers, but may collect limited billing information.
  • Communication content : messages you send via contact forms, email, social media, SMS, or phone enquiries.
  • Feedback and testimonials : comments, reviews, or testimonials you choose to provide.

2.2 Information Collected Automatically

When you visit our website, we may automatically collect:

  • Usage data : pages visited, time spent on pages, links clicked, referring website, and general browsing behaviour.
  • Device and technical data : IP address, browser type and version, device type, operating system.
  • Cookies and similar technologies : small data files placed on your device to improve your browsing experience (see “Cookies and Tracking Technologies” below).

2.3 Photos and Event Media

From time to time, we may take photos or short videos at events to use on our website, social media, and marketing materials. Where reasonably practical, we will:

  • Inform you (or the event organiser) that photography may occur, and
  • Respect any reasonable request not to include identifiable images of specific individuals.

If you appear in a photo and would like it removed from our platforms, please contact us and we will take reasonable steps to remove it.

We do not knowingly collect personal information directly from children online. Our website and online forms are directed at adults (such as parents, schools, and organisations) arranging bookings.

3. How We Use Your Information

We may use your personal information for the following purposes:

  • To provide our services : process enquiries and bookings, manage event details, and deliver our ice cream van services.
  • To communicate with you : respond to your questions, confirm bookings, send updates about your event, and provide customer support.
  • To process payments : handle invoicing, payment confirmations, and related financial administration (via secure third‑party payment providers).
  • To improve our website and services : analyse how visitors use our website to help us improve content, user experience, and service offerings.
  • To send marketing communications : with your consent, send you updates, promotions, special offers, or news about our services. You can opt out at any time.
  • To manage reviews and testimonials : with your permission, use feedback or testimonials for marketing or promotional purposes.
  • To comply with legal obligations : respond to lawful requests, prevent fraud, and protect our legal rights.

We will only use your personal information in a way that is reasonably necessary for our business activities, or as otherwise required or authorised by law.

4. Cookies and Tracking Technologies

Our website may use cookies and similar technologies to:

  • Remember your preferences and settings.
  • Help our website function correctly and securely.
  • Understand how visitors use our website (e.g. via tools like Google Analytics).
  • Improve our content, layout, and services.

You can usually choose to disable cookies through your browser settings. However, some parts of our website may not function properly if cookies are disabled.

If we use third‑party analytics or advertising tools, those providers may collect or receive information from our website and use it to provide services such as analytics or targeted advertising. These providers have their own privacy policies governing how they handle that information.

5. Sharing Your Information

We do not sell your personal information. We may share your information with:

5.1 Service Providers and Partners

Third parties who assist us in operating our business and providing services, such as:

  • Website hosting and maintenance providers.
  • Email and communication tools.
  • Analytics providers (e.g. website traffic analysis).
  • Payment processors.
  • Marketing and advertising partners (where applicable).

These third parties are only given access to the information needed to perform their services and are expected to handle that information securely.

5.2 Legal and Safety Reasons

  • Comply with a legal obligation or respond to lawful requests.
  • Protect and defend our rights, property, or safety.
  • Prevent or investigate possible wrongdoing in connection with our services.
  • Protect the personal safety of our customers or the public.

We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to:

5.3 Business Transfers

If our business is sold, merged, or undergoes a similar change of control, your personal information may be transferred as part of that transaction. We will take reasonable steps to ensure the new entity honours this Privacy Policy or a substantially similar one.

6. Data Storage and Security

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. These steps may include:

  • Using secure servers and password protection.
  • Restricting access to personal information to personnel who need it for business purposes.
  • Using reputable third‑party service providers for hosting, payments, and communications.

However, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

7. Data Retention

We retain personal information for as long as reasonably necessary to:

  • Provide our services.
  • Comply with our legal and taxation obligations.
  • Resolve disputes and enforce our agreements.

When personal information is no longer needed for these purposes, we will take reasonable steps to de‑identify or securely destroy it.

8. Your Rights and Choices

Depending on applicable law, you may have the right to:

  • Access the personal information we hold about you.
  • Request corrections if your information is inaccurate, incomplete, or out of date.
  • Opt out of marketing communications at any time by following the unsubscribe link in emails or contacting us directly.
  • Withdraw consent where our processing of your information is based on your consent (for example, for certain marketing activities or photo usage).

To exercise these rights, please contact us using the details in the “Who We Are” section. We may need to verify your identity before responding to certain requests.

9. Third‑Party Links

Our website may contain links to other websites or services that we do not operate or control (for example, social media platforms, partner websites, or external booking/payment systems).

We are not responsible for the privacy practices of those third‑party sites. We encourage you to review the privacy policies of any website you visit before providing personal information.

10. Children’s Privacy

Our services are often used for events that include children, but our website and online forms are intended for adults organising those events (such as parents, schools, councils, and organisations).

We do not knowingly collect personal information directly from children under 13 through our website. If you believe that a child has provided us with personal information without appropriate consent, please contact us and we will take reasonable steps to remove that information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. The “Last updated” date at the top of this page indicates when the Policy was most recently revised.

We encourage you to review this Privacy Policy periodically. Your continued use of our website or services after any changes are posted will constitute acceptance of those changes.

12. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or how we handle your personal information, please contact us:

Surf & Swirl
Email: rvonhoff@hotmail.com
Phone: 0431434208
Postal Address: 9 Riverina Court, Nerang

We will endeavour to respond to your enquiry within a reasonable timeframe.

For any issue

Contact Us