Last updated: 1 August 2026
The Maroondah Exchange (MX, we, us or our) respects your privacy. This Privacy Policy explains how we collect, hold, use and disclose personal information when you visit themx.com.au, subscribe to our newsletter, create an account, submit an event or food special, contact us, book or purchase something through an available feature, or otherwise interact with MX.
We manage personal information consistently with applicable Australian privacy laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply.
1. What personal information we may collect
Depending on how you interact with MX, we may collect:
- Contact details, such as your name, email address, telephone number, organisation and role.
- Account information, such as your username, profile details, password in securely protected form, login activity and account preferences.
- Newsletter information, such as your email address, subscription status, preferences and interactions with emails we send.
- Event and business submission information, such as organiser or business contact details, event or offer details, venue information, booking links, images, permissions, corrections and approval records.
- Communications, including enquiries, story tips, feedback, complaints, corrections and correspondence with MX.
- Transaction or booking information if tickets, paid products or services are offered, such as the item selected, amount, date and transaction status. Complete payment-card details are generally handled by the relevant payment provider rather than stored by MX.
- Website and device information, such as IP address, browser and device type, pages visited, referring pages, approximate location derived from technical data, cookies and similar usage information.
- Other information you choose to provide.
We do not intentionally collect sensitive information unless it is reasonably necessary for a particular activity and permitted by law, including where you have consented. Please do not send sensitive personal information that is not needed.
2. How we collect personal information
We may collect information:
- directly from you through website forms, account registration, newsletter sign-up, event and food-special submissions, emails, telephone calls, surveys, competitions, bookings and other interactions;
- from organisers, venues, community organisations, businesses or representatives who provide information for publication or verification;
- from publicly available sources when researching and verifying local events, places, businesses and community information;
- automatically when you use the website, through cookies, server logs, analytics and security tools; and
- from service providers that help us operate the website, newsletter, accounts, event features, payments, security and communications.
Where practical, you may contact us without identifying yourself or by using a pseudonym. We may need your correct details where identification is required to provide a service, manage an account, verify a submission, process a transaction, protect the website or comply with law.
3. Why we collect, use and disclose information
We may use personal information to:
- operate, maintain, secure and improve MX and its website;
- provide local event information, guides, newsletters, accounts and other requested services;
- review, verify, edit, publish and update submitted events, offers, images and community information;
- communicate with organisers, businesses, contributors, subscribers and readers;
- respond to enquiries, tips, feedback, correction requests and complaints;
- manage subscriptions, bookings, transactions, promotions and partnerships;
- understand website and newsletter use and improve relevance, accessibility and performance;
- detect misuse, fraud, spam and security threats;
- keep appropriate operational, financial and legal records; and
- comply with applicable laws and lawful requests.
We may also use information for another purpose where you have consented or where permitted or required by law.
4. Information intended for public publication
MX is a local publishing and discovery service. Information submitted for an event, activity, venue, organisation, food special, business profile, story or other public contribution may be published on the MX website, in newsletters, guides, social media or related MX channels.
This may include an organiser or business name and public contact or booking details when supplied for that purpose. Please do not include private personal information in a submission unless it is intended and appropriate for publication. If you supply images or information about another person, you are responsible for having appropriate authority or permission to do so.
MX may edit submissions for clarity, accuracy, length, style and safety, and may contact you to verify details. Publication is not guaranteed.
5. Newsletter and direct communications
If you subscribe, we may send you MX newsletters, local updates and related communications. We may use a specialist email service to deliver messages and measure basic delivery and engagement, such as opens and link clicks where supported.
You can unsubscribe using the link in any marketing email or by contacting us. We may still send service messages that are reasonably necessary for an account, submission, booking, transaction or privacy request.
6. Cookies, analytics and security tools
MX and its service providers may use cookies and similar technologies to:
- keep the website functioning and secure;
- support login, account and form features;
- remember relevant preferences;
- understand traffic and how visitors use the website; and
- diagnose errors and protect against spam, fraud and malicious activity.
MX uses website analytics and security services, which may receive technical information such as your IP address, device details and page activity. You can adjust cookie controls in your browser, but blocking essential cookies may prevent some features from working correctly.
7. Embedded content, external links and social media
MX pages may link to or embed material from event organisers, booking platforms, maps, video, social networks and other third parties. Those services may collect information, use cookies or track interactions under their own privacy policies. MX is not responsible for the privacy practices or content of external services.
8. Who we may disclose information to
We may disclose personal information where reasonably necessary to:
- website hosting, technology, email delivery, analytics, security, backup, form, account, ticketing, payment and professional service providers;
- event organisers, venues, businesses or community organisations where required to action your request or resolve a submission;
- contractors and collaborators working for MX under appropriate confidentiality expectations;
- regulators, law-enforcement bodies, courts or other parties where required or authorised by law; and
- a successor or adviser in connection with a proposed or completed restructure, sale or transfer of the MX operation, subject to appropriate protections.
We do not sell personal information or subscriber lists.
9. Overseas processing
Some technology, website, email, analytics, security, social-media and payment providers may store or process information outside Australia, including in the United States and other countries where those providers or their subcontractors operate. Privacy laws in those locations may differ from Australian law.
Where required, MX will take reasonable steps appropriate to the circumstances when using overseas service providers. Provider locations and arrangements can change, so you may contact us if you would like current information about a particular service relevant to your data.
10. How we hold and protect information
Information may be held in WordPress and related website systems, email and newsletter platforms, secure cloud services, business records and backups. We use reasonable administrative, technical and organisational safeguards appropriate to the nature of the information.
No internet transmission or storage system is completely secure. If a data breach occurs, we will investigate and take appropriate action, including notification where required under applicable law.
11. How long we retain information
We retain personal information only for as long as reasonably needed for the purpose for which it was collected, to maintain accurate publication and transaction records, resolve disputes, protect the service and meet legal, accounting or reporting obligations.
Retention periods vary. For example, an active account or subscription may be kept while it remains in use; published event and editorial records may be retained as part of MX’s public or archival record; and security backups may persist for a limited period. When information is no longer required, we take reasonable steps to delete it or remove identifying details, subject to technical and legal requirements.
12. Accessing or correcting your information
You may ask to access personal information MX holds about you or request a correction by emailing hello@themx.com.au with the subject line Privacy request.
We may need to verify your identity before providing access or making changes. In some circumstances, access may be limited or refused where permitted by law. If that occurs, we will explain the reason where we are able to do so.
Account holders may also be able to update some information through their account settings. For urgent corrections to a published event or public contact detail, please identify the relevant page in your request.
13. Privacy enquiries and complaints
If you have a privacy question or believe MX has mishandled your personal information, contact:
Privacy Contact
The Maroondah Exchange
Email: hello@themx.com.au
Website: themx.com.au
Please describe your concern and include enough information for us to investigate it. We will usually acknowledge a complaint within seven business days and aim to provide a response within 30 days, although complex matters may take longer.
If you are not satisfied with our response and the Australian Privacy Principles apply, you may be able to contact the Office of the Australian Information Commissioner.
14. Children and young people
MX publishes information about family and youth activities but is not designed to collect personal information directly from children. A parent, guardian or authorised adult should provide personal information or make submissions on behalf of a child where appropriate. If you believe a child has provided personal information without suitable permission, please contact us.
15. Automated decisions
MX does not currently arrange for computer programs to use personal information to make decisions that could reasonably be expected to significantly affect an individual’s rights or interests. If this changes, we will update this policy and provide the information required by applicable law.
16. Changes to this policy
We may update this Privacy Policy when MX services, technology or legal obligations change. The latest version will be published on this page with its updated date. We encourage you to review it periodically.