1. About This Policy
Eazy Labs Pty Ltd(ACN 699 772 417) trading as EvntEazy (ABN 42699772417) (“EvntEazy,” “we,” “us,” “our”) operates a business management platform purpose-built for professional event planners in Australia. This Privacy Policy explains how we collect, use, store, disclose, and protect personal information in connection with our platform and website.
We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where you access the platform from outside Australia, additional laws (such as the GDPR for EEA residents) may also apply.
2. Who This Policy Covers - Three Distinct Groups
EvntEazy handles personal information for three distinct groups of people, each with a different relationship to us:
2.1 Planners (our direct customers)
Professional event planners who create an EvntEazy account. You are our customer. We are the data controller for your account information, and you are the data controller for the information about your own clients and vendors that you enter into the platform.
2.2 End Clients (planner’s clients)
The individuals whose events are being planned - for example, a couple whose wedding, corporate function, or other event a planner is managing. You may access a Client Portal shared by your planner without creating an EvntEazy account. You have not signed up with us directly, but your personal information is stored on our platform on behalf of your planner. We act as a data processor for this information on the planner’s behalf.
2.3 Leads and Prospective Clients (entered into the CRM)
Individuals whose enquiry details - name, event date, budget, contact method - a planner records in the Lead Pipeline. These individuals have not directly interacted with EvntEazy. We process this information as a data processor on the planner’s behalf.
3. Information We Collect
3.1 Information planners provide to us
- Account registration: name, email address, password, business name.
- Billing information: payment card details or bank account data (processed by our payment processor; we do not store full card numbers).
- Profile and business settings: preferences, notification settings, team member details (Agency plan).
- Support communications: messages, feedback, and files you send to us.
3.2 Information planners enter about their clients and vendors
When a planner uses the platform, they may enter personal information about third parties, including:
- Client details: couple or client names, event date, venue, budget, notes, dietary or accessibility requirements, and contact details.
- Vendor details: supplier names, business contacts, contract status, and notes.
- Lead details: prospect name, enquiry date, event date, estimated budget, enquiry source, and conversation notes.
- Documents: uploaded contracts, floor plans, seating charts, run sheets, or other files that may contain personal information.
EvntEazy processes this information as a data processor acting on the planner’s instructions. Planners are responsible for ensuring they have a lawful basis to enter and store this information, and for providing appropriate privacy notices to their own clients.
3.3 Information collected automatically
- Usage data: pages visited, features used, time spent, actions taken within the platform.
- Device and connection data: IP address, browser type, operating system, device identifiers, referring URL.
- Cookies and similar technologies: as described in our Cookie Policy.
- Error and performance logs: to help us diagnose issues and improve reliability.
- Advertising and analytics tags: we use Google Analytics and the Meta (Facebook) Pixel on our marketing website to understand how visitors find and use our site and to measure the effectiveness of our advertising. These tools automatically collect information such as pages viewed, referring source, and general device information, and share it with Google LLC and Meta Platforms, Inc. respectively. We do not currently enable Meta’s Advanced Matching feature, which means we do not send hashed contact details (such as email or phone number) to Meta through the Pixel. If this changes, we will update this Policy beforehand.
3.4 Information from third parties
- Payment confirmation data from our payment processor (e.g., transaction ID, last four digits of card).
- Information from integrations you choose to connect to your account.
4. Sensitive Information
Some information planners enter for their clients may constitute sensitive information under the Privacy Act - for example, dietary requirements that reveal a health condition, accessibility needs, or religious observance for event planning purposes.
Planners must not enter sensitive information about their clients unless they have obtained the client’s consent and have a legitimate reason to store it. EvntEazy will only process such information as part of providing the platform services to the planner, and will not use it for any other purpose.
5. How We Use Information
5.1 For planner accounts (as data controller)
- To create and manage your account and deliver the platform features you subscribe to.
- To process subscription payments and send invoices and renewal reminders.
- To send transactional communications: account confirmations, password resets, and security alerts.
- To send product updates, new feature announcements, and (where you have consented or as permitted by law) promotional communications. You can unsubscribe at any time.
- To provide customer support and respond to enquiries.
- To detect and prevent fraud, abuse, and security incidents.
- To analyse aggregate usage patterns and improve the platform.
- To comply with legal obligations, including tax, financial reporting, and responses to lawful authority requests.
5.2 For client, vendor, and lead data (as data processor)
We use this information only to provide the platform services to the planner - storing, displaying, and making it accessible within the planner’s workspace and Client Portal. We do not use your clients’ or leads’ data for our own marketing, analytics, or any purpose beyond service delivery.
6. Client Portal and Third-Party Access
The Client Portal allows planners to share a unique link with their end clients so those clients can view a read-only summary of their event. This portal is accessible without creating an EvntEazy account, and may optionally be protected by a password set by the planner.
When a client accesses a portal link, we log the access (IP address, timestamp, device type) for security and audit purposes. We do not use this access data for advertising or tracking the client across other websites.
The planner controls what information is visible in the portal. EvntEazy is not responsible for the accuracy or completeness of information the planner chooses to share with their client via the portal.
7. Disclosure of Information
7.1 Service providers
We engage trusted third-party service providers to help us operate the platform. These include:
- Cloud infrastructure and hosting providers (data may be stored in Australia, the United States, or other countries where major cloud providers operate).
- Payment processors (who handle billing and card data under their own PCI-DSS compliant security standards).
- Email and communication delivery providers.
- Analytics and advertising providers, including Google LLC (Google Analytics) and Meta Platforms, Inc. (Meta Pixel), who receive website interaction data to help us measure and improve our marketing and advertising.
- Customer support tooling.
All service providers are bound by contractual obligations to handle personal information confidentially and consistently with this Policy and applicable law.
7.2 Law enforcement and regulatory authorities
We may access, preserve, and disclose personal information to regulators, law enforcement, courts, or other government authorities where we are required to do so by law, where we have a good-faith belief that disclosure is necessary to detect or address fraud, prevent death or serious injury, protect our legal rights or property, or enforce our Terms of Service.
Where a law enforcement or government request is received, we will assess its validity and scope, disclose only what is legally required, and - where we are permitted to do so - notify the affected planner.
7.3 Business transfers
If EvntEazy is involved in a merger, acquisition, restructure, or sale of assets, personal information may be transferred to the relevant successor entity, subject to equivalent privacy protections.
7.4 We do not sell personal information
EvntEazy does not sell, rent, or trade personal information to third parties for their own marketing or commercial purposes.
8. Overseas Transfers
Some of our service providers store or process data outside Australia, primarily in the United States. This includes our cloud hosting providers, and our analytics and advertising providers Google LLC and Meta Platforms, Inc., both of which are based in the United States. Where we transfer personal information overseas, we take reasonable steps to ensure the recipient handles it in a manner consistent with the Australian Privacy Principles, including through contractual safeguards.
9. Data Security
- All data is encrypted in transit (TLS/HTTPS) and at rest.
- Access to production systems is restricted to authorised personnel and protected by multi-factor authentication.
- We conduct regular security reviews and monitor for anomalous access.
- In the event of an eligible data breach under the Notifiable Data Breaches scheme, we will notify the Office of the Australian Information Commissioner (OAIC) and affected individuals as required by law.
No system is completely secure. We encourage planners to use strong, unique passwords and to log out of shared devices.
10. Data Retention
10.1 Planner account data
Retained for as long as you hold an active account plus a reasonable period thereafter to meet legal obligations (for example, financial records for 7 years under Australian tax law). If you close your account, we will delete or de-identify your personal account data within 90 days, except where retention is required by law.
10.2 Client, vendor, and lead data
Retained for as long as the relevant planner’s account is active. The platform notes that completed events are archived rather than deleted, so planners retain access to historical records. If a planner closes their account, this data is deleted within 90 days of account closure.
Planners may delete individual records, events, or leads from the platform at any time. Deletion requests are processed promptly and are irreversible.
11. Your Rights
11.1 Planner rights
Under the Privacy Act and APPs, you have the right to:
- Access the personal information we hold about you.
- Correct inaccurate or out-of-date personal information.
- Request deletion of your personal information (subject to legal retention obligations).
- Opt out of direct marketing communications at any time.
- Lodge a complaint with the Office of the Australian Information Commissioner (www.oaic.gov.au) if you believe we have mishandled your personal information.
11.2 End client and lead rights
If your personal information has been entered into EvntEazy by a planner, your primary point of contact for privacy requests is that planner. Where you are unable to resolve a concern through the planner, you may contact us at privacy@evnteazy.com and we will assist where we are able, including by facilitating access, correction, or deletion requests within 30 days.
If you are located in the EEA or UK, you may have additional rights under the GDPR or UK GDPR, including the right to data portability and to lodge a complaint with your local supervisory authority.
12. Children
The EvntEazy platform is intended for use by professional event planners (adults). We do not knowingly collect personal information from individuals under 18. If we become aware that a minor has provided personal information to us without appropriate consent, we will delete it promptly. Contact privacy@evnteazy.com if you believe this has occurred.
14. Changes to This Policy
We may update this Policy from time to time as the platform evolves or legal requirements change. We will notify planners of material changes by email or in-app notice at least 14 days before they take effect. The “Last updated” date at the top of this page reflects the most recent revision.
Continued use of the platform after a change takes effect constitutes acceptance of the updated Policy. If you disagree with a change, you may close your account before the change takes effect.
15. How to Contact Us
For any privacy-related questions, requests, or complaints, you can contact us on:
| privacy@evnteazy.com | |
| Postal | EvntEazy Privacy Team, 150, Mount Carmel dr, Box Hill NSW 2765 |
| Response time | We aim to acknowledge all requests within 5 business days and resolve them within 30 days. |