Privacy policy
Tribe Eleven respects your privacy and is committed to handling personal information responsibly, transparently and securely.
This Privacy Policy explains how Tribe Eleven collects, uses, stores, discloses and protects personal information when you visit this website, purchase artwork or products, make an enquiry, subscribe to communications, register for an event or workshop, or engage Tribe Eleven for practitioner or other services.
Tribe Eleven aims to handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) wherever they apply, and adopts the APPs as a privacy best-practice standard across its business.
1. About Tribe Eleven
Tribe Eleven is an Australian artist and creative practice offering artwork, prints, commissions, workshops, events and practitioner services.
For privacy enquiries, requests to access or correct personal information, or privacy complaints, please contact:
Tribe Eleven
Email: hello@tribeeleven.com.au
Where required, Tribe Eleven will provide this Privacy Policy free of charge and in an appropriate format.
2. What is personal information?
Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether recorded in material form or not.Depending on how you interact with Tribe Eleven, this may include:
your name
email address
telephone number
postal, billing or delivery address
order and purchase information
payment and transaction information
workshop or event registration information
correspondence and enquiries
information you provide through website forms
information relating to commissions or creative projects
photographs or other material you voluntarily provide
practitioner appointment information
information about your health or wellbeing where you choose to provide it for a practitioner service
preferences and communication choices
website, device and technical information such as IP address, browser type and pages visited
information required to administer refunds, cancellations, bookings or other transactions.
Tribe Eleven aims to collect only information that is reasonably necessary for its functions and activities.
3. Sensitive information and health information
Some information may be considered sensitive information under Australian privacy law. This includes certain health information and other information relating to matters such as racial or ethnic origin, religious or philosophical beliefs, sexual orientation, political opinions, membership of professional or trade associations, criminal record and biometric information.
Tribe Eleven will not intentionally collect sensitive information unless there is a legitimate reason to do so and the applicable legal requirements are satisfied. Where practitioner services involve collecting health or wellbeing information, that information will be handled with additional care and in accordance with the requirements applying to health information. Where consent is required to collect sensitive information, Tribe Eleven will seek appropriate consent before collecting it.
You are not required to provide health or other sensitive information unless it is reasonably necessary for the service being provided or otherwise required by law.
4. How we collect personal information
Tribe Eleven may collect personal information:
directly from you when you purchase a product or service
when you submit a website enquiry
when you contact Tribe Eleven by email, telephone or social media
when you register for a workshop or event
when you book or participate in a practitioner service
when you subscribe to a mailing list
when you submit information for a commission or creative project
when you provide information during an in-person transaction
through payment and booking platforms
automatically through website technologies such as cookies, analytics and server logs
from third-party platforms where you have interacted with Tribe Eleven through those platforms.
Where practical, Tribe Eleven will collect personal information directly from you. If personal information is collected from another source, Tribe Eleven will handle that information in accordance with applicable privacy requirements.
5. Why we collect personal information
Tribe Eleven may collect, hold, use and disclose personal information for purposes including:
processing purchases and payments
fulfilling and delivering orders
providing receipts and transaction information
managing refunds and exchanges
responding to enquiries
providing commissioned artwork and creative services
administering workshops and events
administering practitioner appointments and services
maintaining appropriate client and customer records
providing customer and client support
maintaining financial and accounting records
managing subscriptions or memberships
sending marketing communications where permitted
improving the website, services and customer experience
detecting and preventing fraud, misuse or unauthorised transactions
protecting the safety and security of customers, clients and Tribe Eleven
complying with legal, tax, accounting or regulatory requirements
resolving disputes and protecting Tribe Eleven's legal rights.
Tribe Eleven will not use personal information for unrelated purposes unless permitted or required by law or with appropriate consent.
6. Payment processing
Tribe Eleven uses third-party platforms to process payments and transactions. Depending on the product, service, event or payment method used, these may include:
Square
Squarespace Payments
PayPal
Stripe
Humanitix for event and workshop registrations.
These providers may collect information necessary to process a transaction, which may include your name, contact details, billing or delivery information, transaction information and payment information. Payment providers may independently collect, use, store and disclose information in accordance with their own privacy policies and legal obligations.
Tribe Eleven does not intentionally collect or store your complete payment card number or card security code.
7. Square and Instant Profiles
Where a transaction is processed through Square and Square's Instant Profiles feature applies, Square may automatically create a customer profile in Tribe Eleven's Square Customer Directory. This may occur even where you have not separately registered an account with Tribe Eleven or specifically asked Tribe Eleven to create a customer profile.
Square states that, for certain in-person transactions, its Instant Profiles feature may collect information from the front of a customer's chip card, including some or all of the cardholder's name depending on the card issuer's data-sharing arrangements. Information associated with subsequent transactions may be added to an existing Square customer profile. Information held in a Square customer profile may include information such as:
name
contact information where provided or available
transaction information
purchase history
customer preferences or other information entered into the Square Customer Directory.
Tribe Eleven may use this information for legitimate business purposes including:
processing and administering purchases
maintaining transaction records
providing receipts and customer service
managing refunds and transaction enquiries
fulfilling orders
maintaining financial and accounting records
identifying and preventing fraudulent or unauthorised transactions.
The automatic creation of a Square customer profile does not, by itself, constitute consent to receive Tribe Eleven marketing communications.
Square has its own privacy practices and may process information independently of Tribe Eleven. Square's Australian Buyer Privacy Notice explains how Square handles information collected when customers interact with Square and Square sellers.
8. Squarespace and Squarespace Payments
Tribe Eleven uses Squarespace to operate and host this website and may use Squarespace ecommerce and payment functionality. When you use the Tribe Eleven website to make a purchase, Squarespace may receive information necessary to operate the website, administer orders and provide ecommerce functionality.
Where Squarespace Payments is used, Squarespace and its payment-processing partners may process personal and transaction information. Squarespace's current Payments Terms place responsibility on sellers to provide appropriate privacy information and comply with applicable privacy and data protection requirements. Squarespace may also collect technical information about website visitors, including information about devices, browsers, IP addresses and website interactions.
9. PayPal
Where PayPal is offered as a payment method, PayPal may collect and process personal and financial information necessary to provide its payment services. PayPal operates its own privacy framework and may disclose information to service providers and other recipients, including recipients outside Australia, in accordance with its applicable privacy notices and legal requirements.
Tribe Eleven does not control PayPal's independent handling of personal information.
10. Humanitix and events
Tribe Eleven may use Humanitix to manage registrations, ticketing and payments for workshops, events and other activities. When you register for an event through Humanitix, information you provide may be processed by Humanitix and made available to Tribe Eleven where necessary to administer the event. This may include:
name
email address
telephone number
ticket or registration information
transaction information
answers to event-specific questions
information required for accessibility, dietary or other event arrangements where applicable.
Humanitix operates its own Privacy and Cookies Notice and states that it complies with the Australian Privacy Principles. Tribe Eleven will only request information through Humanitix that is reasonably necessary for the relevant event or service.
11. Practitioner services and client information
Where you engage Tribe Eleven for a practitioner service, additional personal information may be collected to provide and administer that service. Depending on the service, this may include:
your name and contact details
appointment information
information you voluntarily provide about your health or wellbeing
information relevant to your stated reason for attending
information you voluntarily provide about relevant circumstances or needs
notes necessary to administer or document the service
emergency contact information where reasonably necessary.
Health information is sensitive information under Australian privacy law. Where Tribe Eleven provides a health service and holds health information, the Privacy Act may apply regardless of the size of the business. The OAIC specifically identifies complementary medicine practitioners among health service providers covered by the Privacy Act.
Tribe Eleven will:
collect only information reasonably necessary for the relevant service
explain why health or wellbeing information is being requested
obtain consent where required
limit access to practitioner information
use information only for the purpose for which it was collected, or another permitted purpose
not use health information for direct marketing unless the required consent has been obtained
take reasonable steps to protect practitioner records from unauthorised access, loss, misuse or disclosure.
You may choose not to provide information that is not reasonably necessary for the service. However, if information that is reasonably necessary to provide a service is not provided, Tribe Eleven may be unable to provide that service safely or appropriately.
12. Practitioner confidentiality
Information disclosed during a practitioner session will be treated as confidential except where disclosure is:
authorised or requested by you
necessary to provide the service and reasonably expected by you
required or authorised by law
necessary to address a serious threat to a person's life, health or safety
otherwise permitted under applicable privacy law.
Tribe Eleven will not use identifiable client stories, testimonials, photographs or other practitioner-related information for promotional purposes without appropriate permission or consent where required.
13. Practitioner information is not automatically used for marketing
Information provided for practitioner services, including health or wellbeing information, will not be added to marketing databases simply because you have attended a session. In particular, practitioner information will not be used to create targeted marketing based on a client's health or wellbeing information without the required consent.
14. Direct marketing
Tribe Eleven may send marketing communications about artwork, prints, workshops, exhibitions, practitioner services, events, memberships or other offerings where permitted by law. Where consent is required, Tribe Eleven will obtain consent before sending commercial electronic messages. Marketing communications will identify Tribe Eleven and provide a straightforward way to unsubscribe.
You may withdraw marketing consent at any time. Unsubscribing from marketing communications will not affect necessary service communications such as order confirmations, receipts, booking information, appointment information or other messages required to administer a transaction or service. Australian spam law requires commercial electronic messages to be sent with consent and to identify the sender and provide a functional unsubscribe mechanism.
15. Customer purchases do not automatically create marketing consent
Making a purchase, receiving a receipt, registering for an event or having a customer profile created by a payment provider does not automatically mean that you have agreed to receive Tribe Eleven marketing. Where a customer provides an email address solely for a transaction, Tribe Eleven will distinguish transactional communications from promotional communications.
This approach also applies to information collected through Square, including information associated with Instant Profiles.
16. Website analytics and cookies
The Tribe Eleven website may use cookies and similar technologies to:
operate essential website functions
remember preferences
process ecommerce transactions
maintain security
understand website usage
improve website performance
measure the effectiveness of marketing where applicable.
Information collected through these technologies may include:
IP address
browser type
device information
operating system
pages viewed
referring website
approximate location derived from technical information
date and time of visits
interactions with website features.
Some third-party services integrated with the website may also collect information through cookies, pixels or similar technologies. The specific technologies in use may change as website functionality changes.
17. Third-party websites and embedded content
The Tribe Eleven website may contain links to or integrations with third-party websites and services. These may include payment providers, Humanitix, social media platforms, video platforms, mapping services, analytics services and other external services. Once you leave the Tribe Eleven website or interact directly with a third-party service, that provider's own privacy policy may apply. Tribe Eleven is not responsible for the independent privacy practices of third-party websites.
18. Disclosure of personal information
Tribe Eleven may disclose personal information to third parties where reasonably necessary for the purposes described in this Privacy Policy.
These parties may include:
payment providers
Squarespace
Square
PayPal
Humanitix
shipping and delivery providers
website and hosting providers
email and mailing-list providers
accounting and bookkeeping providers
technology and cloud-storage providers
professional advisers
insurers
government agencies or regulators where required
legal advisers where necessary
emergency services or other appropriate authorities where required to protect life, health or safety.
Tribe Eleven does not sell or rent customer personal information to third parties for their own independent marketing purposes.
19. Overseas disclosure
Some third-party providers used by Tribe Eleven may store or process personal information outside Australia. This may include technology, payment, hosting, analytics, email and cloud service providers. For example, Square states that it may disclose information to service providers outside Australia, including in the United States, Canada, Japan, Ireland, France, Spain and the United Kingdom. PayPal also states that personal information may be disclosed to recipients outside Australia.
Where the Australian Privacy Principles apply, Tribe Eleven will take reasonable steps to comply with the requirements relating to overseas disclosure. The countries and locations involved may change as service providers change their infrastructure or subcontractors.
20. Security of personal information
Tribe Eleven takes reasonable steps to protect personal information from:
misuse
interference
loss
unauthorised access
unauthorised modification
unauthorised disclosure.
Security measures may include:
using reputable payment and technology providers
password and account security
limiting access to information
using secure payment platforms
avoiding unnecessary collection of information
securely disposing of information when it is no longer required
taking reasonable steps to maintain the security of practitioner records.
No internet-based system can be guaranteed to be completely secure.
21. Data breaches
If Tribe Eleven becomes aware of a suspected or actual data breach, it will assess the incident and take reasonable steps to contain, investigate and remediate it. Where the Privacy Act and the Notifiable Data Breaches scheme apply, Tribe Eleven will comply with the applicable notification requirements. The Notifiable Data Breaches scheme applies to private-sector health service providers and other entities covered by the Privacy Act.
22. Retention of personal information
Tribe Eleven will retain personal information only for as long as reasonably necessary for the purposes for which it was collected, or where retention is required or permitted by law. Financial and transaction records may need to be retained for taxation and accounting purposes. Where information is no longer required and there is no legal, accounting, tax, dispute-resolution, fraud-prevention or other legitimate reason to retain it, Tribe Eleven will take reasonable steps to securely delete or de-identify it. Deletion from Tribe Eleven's records may not result in deletion from independent third-party systems such as Square, PayPal, Squarespace or Humanitix. Those providers may retain information according to their own legal and contractual obligations.
23. Access to personal information
You may request access to personal information Tribe Eleven holds about you. You may also ask us to explain how your information is being handled. We may need to verify your identity before providing access. In some circumstances, access may be refused where permitted or required by law. Where this occurs, Tribe Eleven will explain the basis for the refusal where legally permitted.
24. Correction of personal information
You may ask Tribe Eleven to correct personal information that is inaccurate, out of date, incomplete, irrelevant or misleading. We will take reasonable steps to correct information where appropriate. If information is held independently by a third-party provider, you may also need to contact that provider directly.
25. Deletion and withdrawal of consent
You may ask Tribe Eleven about deletion or de-identification of personal information. Deletion may not be possible where information is required to be retained for:
taxation
accounting
legal obligations
dispute resolution
fraud prevention
insurance
health record requirements
other legitimate business or regulatory purposes.
Where consent is the basis for a particular use of information, you may withdraw that consent, subject to any legal or contractual consequences of doing so. Withdrawal of consent does not make previous lawful processing unlawful.
26. Anonymity and pseudonymity
Where lawful and practicable, you may interact with Tribe Eleven anonymously or using a pseudonym. This may not be practical where identification is necessary to:
process a payment
deliver an order
administer an event
provide a practitioner service
comply with taxation or legal obligations
prevent fraud
verify a person's identity
administer a refund or dispute.
27. Children's information
Tribe Eleven does not intentionally collect sensitive personal information from children without appropriate consent or authority. Where workshops, events or other services are available to people under 18, additional requirements may apply, including parental or guardian consent. Where a parent or guardian believes that Tribe Eleven has collected information from a child inappropriately, they may contact Tribe Eleven using the details in this Privacy Policy.
28. Privacy complaints
If you believe Tribe Eleven has mishandled your personal information, please contact us first. We will:
acknowledge the complaint where appropriate;
review the circumstances;
investigate relevant records and systems;
take reasonable steps to resolve the complaint; and
provide a response.
You may contact:
Tribe Eleven
Email: hello@tribeeleven.com.au
If the Privacy Act applies and you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).
29. Changes to this Privacy Policy
This Privacy Policy may be updated from time to time to reflect changes to:
Tribe Eleven's services
payment providers
website functionality
technology
data practices
legal or regulatory requirements.
The latest version will be published on this website with its effective date.
30. Contact
For privacy questions, access or correction requests, consent withdrawals or privacy complaints, contact:
Tribe Eleven
Email: hello@tribeeleven.com.au
Privacy Policy last updated: 27 September 2026.