The Front Privacy Policy

Last updated: 14 July 2026

The Front is committed to protecting and respecting your privacy, and takes its obligations under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) seriously.

In this policy, “The Front”, “we”, “us” and “our” means The Front Pty Ltd, ABN 15 112 955 521, of 118 Wentworth Avenue, Banksmeadow NSW 2019, together with its successors and assigns. This policy covers The Front’s equipment hire business, Studio At The Front, and our trade (credit) accounts. It explains what personal information we collect, why we collect it, how we hold and protect it, who we share it with, and how you can access, correct or complain about the way we handle it.

Baker Street Studios operates as a separate business and is not covered by this policy.

---

1. What personal information do we collect and hold?

Depending on how you deal with us, we may collect and hold:

• Contact details, such as your name, email address, phone number and postal or business address.
• Identity verification information captured when you hire equipment, book a studio, or apply for a trade account, such as a driver’s licence or passport, which we use to confirm your identity and manage the relationship. This is some of the most sensitive information we hold, and we treat it accordingly (see section 9).
• Payment information. We do not store full credit card numbers. Card payments are processed and securely tokenised by our payment provider, Fat Zebra. We may hold a payment token, the type of card, and a truncated card reference so we can process authorised payments and any charges you have agreed to.
• Bank account details, only in the limited case where you provide them to us so we can pay a refund to you. We use them for that purpose and do not keep them longer than we reasonably need to.
• If you apply for a trade (credit) account, information about your business and the people behind it: your business or entity name, ABN or ACN and business structure; the names, positions and contact details of your directors or proprietors; and, for any guarantor and the person authorised to sign, their residential address and date of birth. We collect this to assess and administer the account.
• Trade references you give us (the referee’s name and contact details) and your trading history, so we can assess your application.
• Credit information about your business, obtained from commercial credit reporting bureaux and from other credit providers, used to assess and manage your account.
• Booking, hire and account history, including the equipment or studio time you have hired, your trade-account activity, and related notes.
• Records of your communications with us, including emails, messages and enquiry forms.
• CCTV footage of our premises at 118 Wentworth Avenue, Banksmeadow NSW 2019, recorded for security and safety purposes.
• Website and device information when you visit our site, such as your IP address, browser type, the pages you view, and the date and time of your visit.

We do not collect all of this information from everyone who contacts us. We only collect what we reasonably need for the purpose you are dealing with us.

We do not collect sensitive information (such as health information) as part of our normal hire, studio or trade-account process. If we ever needed to, we would ask for your consent first, unless the law allowed otherwise.

Where we collect a government-related identifier (such as a driver’s licence or passport number), we use it only to verify your identity. We do not adopt it as our own identifier for you, and we do not use or disclose it except as permitted by law.

2. Why do we collect, hold, use and disclose your personal information?

We use personal information to:

• Provide and manage equipment hire and studio bookings, including preparing and administering hire agreements.
• Assess an application for a trade (credit) account, and set and review a credit limit.
• Establish, administer and manage a trade account, including sending invoices and statements.
• Recover overdue amounts and manage credit risk.
• Verify your identity and manage risk, including damage, loss, non return and fraud.
• Process payments and any charges you have authorised.
• Respond to your enquiries and provide customer support.
• Communicate with you about your bookings and account, and, where you would reasonably expect it or have opted in, send you marketing about our products and services. You can opt out at any time (see section 5).
• Maintain the security and safety of our premises, staff and customers.
• Improve our services, website and customer experience.
• Meet our legal, tax and regulatory obligations.

We only use or disclose your personal information for the purpose we collected it for, for a related purpose you would reasonably expect, where you have consented, or where we are required or permitted by law.

3. How do we collect your personal information?

We prefer to collect personal information directly from you. We usually collect it when you:

• Make a booking or hire enquiry, including by phone.
• Complete an onboarding, booking, contact or trade-account application form (including forms hosted by our provider, Formsite).
• Sign a hire agreement or a guarantee.
• Contact us for support or to report a problem.
• Visit our premises (CCTV).
• Visit our website (cookies and analytics, see section 4).

Sometimes we may collect information about you from someone else, for example a colleague booking on your behalf, or a publicly available source, where it is unreasonable or impracticable to collect it directly from you. Where we do, we take reasonable steps to make sure you are aware of the matters in this policy.

When you apply for a trade account, we also collect information to assess the application from commercial credit reporting bureaux, from the trade referees, banks and other credit providers you name, and from public registers such as ASIC. The credit reporting we obtain is commercial credit information about the applicant business; we do not obtain a consumer credit report — that is, a credit report about an individual’s personal, domestic or household credit — about any individual, including any director or guarantor. We do this with your authority, given as part of the trade-account application.

4. Cookies and our website

Our website uses cookies, which are small pieces of data stored on your device. We use them to help the site function, remember your preferences, keep you logged in where relevant, and understand how the site is used so we can improve it. Most browsers let you refuse or delete cookies. If you disable cookies, some parts of the site may not work properly.

5. Direct marketing and how to opt out

If you have opted in, or where you would reasonably expect it as an existing customer, we may send you marketing about our products and services by email or SMS. Every marketing message includes a way to unsubscribe. You can also opt out at any time by emailing privacy@thefront.com.au. We will action your request promptly, and in any case within 5 business days. We do not sell your personal information, and we do not provide it to third parties for their own marketing.

6. Can you deal with us anonymously or under a pseudonym?

Where it is lawful and practicable, you can deal with us anonymously or using a pseudonym, for example when making a general enquiry or a complaint. In many cases, though, we need to know who you are, particularly to verify identity for a hire or a trade account, administer an agreement, assess credit, or take payment. If you do not provide the information we need, we may not be able to provide you with the product, account or service you are asking for.

7. Who do we disclose your personal information to?

We limit access to your personal information to staff who need it to do their job. We may disclose personal information to service providers who help us run our business, including:

• Current RMS (OnRent Events), our booking and customer management system, which holds our customer and account records.
• Fat Zebra, our payment gateway. Card data is tokenised, so we do not hold full card numbers.
• Xero, our accounting and invoicing system.
• Google Workspace, for email, calendar and file storage.
• Cloudflare, which provides the infrastructure and databases behind our website and our online application forms (including trade-account applications).
• Resend, which sends some of our transactional and notification emails.
• Formsite, which hosts some of our online booking and onboarding forms.
• Google Nest, which stores footage from some of our security cameras.

If you apply for or hold a trade account, we may also disclose relevant information to:

• Commercial credit reporting bureaux (for example CreditorWatch), to obtain commercial credit information about your business.
• Trade referees and other credit providers, to verify your trading and payment history.
• Debt collectors and our lawyers, if we need to recover overdue amounts.
• The Personal Property Securities Register (PPSR) — a public register — where we register a security interest (for example over hired equipment or under a guarantee). Some details of a registration can be searched by others.

We may also disclose personal information:

• To law enforcement or a government authority where we reasonably believe it is necessary, for example to investigate suspected unlawful activity or a threat to safety.
• Where you have specifically authorised us to.
• Where we are required or permitted to by law.

Some of these providers are based, or store information, outside Australia. See section 8.

We are not responsible for the privacy practices of other websites or services that we link to. When you follow a link away from our site, we encourage you to read that site’s own privacy policy.

8. Do we send your personal information overseas?

Yes, in some cases. Several of the service providers we use store personal information outside Australia, mostly in the United States. In particular:

• Xero (accounting and invoicing) stores data on servers in the United States.
• Formsite (online forms) stores data on servers in the United States.
• Google Workspace (email, calendar and file storage) stores data on Google’s global infrastructure, which may include the United States and other countries.
• Cloudflare (website and application infrastructure) is a United States–based provider operating a global network; application data is held in its cloud.
• Resend (transactional email) stores data on servers in the United States.
• Current RMS (our booking and customer management system) is provided by a United Kingdom–headquartered vendor and may store data outside Australia.
• Google Nest, used for some of our security cameras, stores footage on Google’s cloud infrastructure, which may be located in the United States or other countries. Footage from our other CCTV system is recorded and stored locally in Australia.

The commercial credit reporting bureaux we use to assess trade accounts are Australian-based; some may be part of international corporate groups. Where any of them handles your information overseas, we take reasonable steps to protect it as described in this section.

Before disclosing personal information to an overseas recipient, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles, including through our agreements with these providers and their security and data-protection commitments, and we remain accountable for information we disclose overseas. You should be aware, however, that your information may be stored and processed overseas, where privacy laws may differ from those in Australia.

9. How do we keep your personal information secure?

We take reasonable steps to protect the personal information we hold from misuse, interference and loss, and from unauthorised access, modification or disclosure. These steps include restricted staff access on a need to know basis, secure logins and access controls, tokenisation of card data through Fat Zebra, encryption of information in transit and at rest in our major systems, and physical security at our premises.

No method of transmitting or storing information is completely secure. Any transmission of information over the internet is at your own risk, and while we take reasonable steps to protect it, we cannot guarantee the security of information transmitted to us. Where we give you or you choose a password or login, you are responsible for keeping it confidential.

If a data breach occurs that is likely to result in serious harm, we will assess it and, where the Notifiable Data Breaches scheme requires, notify affected individuals and the Office of the Australian Information Commissioner (OAIC).

10. How long do we keep your personal information?

We keep personal information only for as long as we reasonably need it for the purposes described in this policy, or for as long as the law requires us to (for example, tax and financial record keeping obligations). When we no longer need it, we take reasonable steps to destroy it or permanently de identify it.

Identity documents captured for verification are held only as long as we reasonably need them. Where we collect identity documents to verify a trade-account applicant or guarantor, we destroy the document images within about 30 days of a decision, once verification is complete, and keep a record that verification occurred. We retain the related account, credit-assessment and guarantee records for the life of the account and a reasonable period afterwards to meet our legal and tax obligations, then destroy or de-identify them.

11. Do we use automated decision making?

As at the last updated date of this policy, we do not use computer programs to make, or to substantially assist in making, decisions that significantly affect your rights or interests. Hire, booking and trade-account approvals are made by our team — a person makes the substantive credit decision, using any credit-report information only as one input. If this changes, we will update this policy to describe what information is used and which decisions are automated or computer assisted.

12. How can you access and correct your personal information?

You can ask us for access to the personal information we hold about you, or ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. Contact our Privacy Officer using the details in section 15. We will respond within a reasonable period, and usually within 30 days. There is no charge for making a request, although we may charge a reasonable cost for giving access in some cases. If we refuse a request, we will tell you why in writing and explain how you can complain.

13. How can you complain about a privacy breach?

If you think we have mishandled your personal information or breached the Australian Privacy Principles, please contact our Privacy Officer using the details in section 15. Tell us what happened and how you would like it resolved.

14. How will we deal with your complaint?

We take privacy complaints seriously. We will acknowledge your complaint, investigate what happened, and respond to you within a reasonable period. If we got something wrong, we will tell you what we are doing to fix it and to prevent it happening again.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au, by phone on 1300 363 992, or by writing to GPO Box 5288, Sydney NSW 2001.

15. Contact us

Our Privacy Officer is your point of contact for anything in this policy, including access, correction and complaints.

The Front Pty Ltd (ABN 15 112 955 521)
Privacy Officer
118 Wentworth Avenue, Banksmeadow NSW 2019, Australia
Email: privacy@thefront.com.au
Phone: +61 2 8399 0027

Business hours: Monday to Friday 7am to 6:30pm, Saturday 8am to 1pm, Sunday closed.

16. Changes to this policy

We review this policy from time to time and update it to reflect current practice and changes in the law. The version published on our website is the current version and governs how we handle your personal information. Where a change is significant, we will take reasonable steps to bring it to your attention.