Privacy Policy

Last updated: 10 September 2026

Butterfly 73 is operated by Klassic Group Pty Ltd, ABN 26 616 912 040, of 73 Francis Street, Northbridge WA 6003. Email us at info@butterfly73.com.

We are covered by the Privacy Act 1988 (Cth) and the Australian Privacy Principles. This policy explains what we do with your information across butterfly73.com, gallery.butterfly73.com, our ticketing and guest list, our marketing email, the photos we publish, and the venue itself. Some of that runs on other companies' platforms — Fourvenues sells our tickets, Pixieset hosts our galleries. We are responsible for the information we collect through them; they are responsible for their own products and their own tracking, and their privacy policies cover that.

The short version

Buy a ticket or join the guest list and we get your name, email, phone number and date of birth. That happens on Fourvenues, not on this website.
Photographers shoot the crowd on event nights. A photo of you can end up in a public gallery without you doing anything. Ask us and it comes down — no reason needed.
Marketing consent is a tick box, unticked by default on our galleries. Tickets, entry and photo access never depend on it.
Google Analytics and a Meta (Facebook) pixel run on this site from the moment you open it. There is no cookie banner.
If you book a birthday package, software checks it automatically against the rules and may email you by itself.
Most of the companies that hold your information are overseas.
Want a photo down, want out of our emails, or want to know what we hold? Email info@butterfly73.com.

Dealing with us anonymously

You do not have to identify yourself to deal with us in general. You can pay cash at the door, buy a drink and come in without telling us your name, and you can ask us a general question without giving one.

Three things to know. The venue is covered by CCTV, your ID is scanned at the door because our licence requires it, and photographers work on event nights — all three are explained below. And to buy a ticket, hold a table, claim a birthday package or have us find a photo of you, we need enough detail to actually do it.

What we collect, and where it comes from

When you visit butterfly73.com

The site is built and hosted on Wix, which sets its own cookies so pages work. Wix also loads Sentry, an error-monitoring tool, to catch broken pages.

Two tracking tools run on the site:

Google Analytics (property G-XYHBH51R4Z) — pages you view, roughly where you are, your device and browser, how far you scroll. It uses the _ga cookies.
The Meta pixel (ID 2133953950388752) — it sets the _fbp cookie and tells Meta which pages you looked at. On the /photos page, clicking a gallery card also sends Meta and Google the name of that gallery.

Both load as soon as the page opens, and there is no cookie banner on the site today. If you do not want them, you can block cookies or use a tracker-blocking extension, and you can turn off ad personalisation in your Google and Meta account settings.

Today the website has no forms of its own — there is nowhere on it to type your details, and every place you can is run by one of the companies below. The tracking above still records your visit.

When you buy a ticket, pre-register, or join the guest list

This runs on Fourvenues, our ticketing platform. Through it we collect and hold:

your name, email address and phone number
your date of birth
your ticket or guest list type, what you paid, whether it was refunded, and your QR code
whether you were checked in at the door, and when
whether you ticked the marketing consent box
for table bookings: name, phone, party size, the area you booked and your deposit
if you pre-register for an event before tickets go on sale, your email address and the event you registered for

Fourvenues runs its own tracking on its checkout pages, separate from ours: its own Google Analytics, a Cloudflare bot check, and two session-recording tools — Microsoft Clarity and Hotjar — which record how you move around the checkout page so it can be replayed later. Those are Fourvenues' tools and its privacy policy covers them.

Our own advertising tools also run on that checkout: a second Meta pixel (ID 2331213890719383) and Meta's Conversions API, which tell Meta when someone buys a ticket or pre-registers. The Conversions API sends that from a server rather than your browser, and it includes identifiers Meta uses to match the purchase to a Meta account. A tracker blocker in your browser will not stop it.

We never see or store your full card number. Card payments are handled by Fourvenues and its payment provider online, and by Square in the venue.

Photos taken at the club

Photographers work in the public areas of the venue — the floor, the bar, the booths — on event nights.

Photos are uploaded to Pixieset as a private draft. A person at Butterfly 73 reviews every album before anything goes live, and only then does the gallery appear on butterfly73.com/photos. Nothing publishes itself. We also keep the photographers' original files in our own Dropbox storage as an archive, including photos that never make it into a gallery.

A photo of you is personal information about you. It can also show things the law treats as sensitive — who you were with, your ethnicity, a religious item you are wearing, the state you were in that night. We know that. That is why removal is unconditional: see "Getting a photo taken down" below.

CCTV

The venue is covered by CCTV throughout — the entrance, the floor, the bars and back of house. It records whenever we are open.

Footage is kept for 60 days and then overwritten. We use it for the safety of guests and staff and to look into incidents. Only management and security have access. We may give footage to police in connection with an incident, or where the law requires us to.

ID scanning at the door

Your ID is scanned at entry using a system called IDU Identification, which reads your ID to confirm you are over 18 and that the ID is genuine. This is a condition of our liquor licence — it is not something we chose to do, and it is not something you can opt out of and still come in.

Those scan records stay with us. We do not share them with other venues, with one exception: if someone is banned from Butterfly 73, that ban is shared with other venues using the same system, and with police where they are investigating something. If you are not banned, your scan is not shared with anyone.

When you unlock a gallery

To open a gallery you enter your email address. There is a separate tick box that says "Send me news and promotions from Butterfly 73". It is unticked by default. Ticking it changes nothing about your access — the photos are free and identical either way.

We keep those two things apart on purpose. Everyone who enters an email is on an access list that is never used for marketing. Only people who ticked the box are added to our mailing list. That is a hard rule in our systems, not a preference.

Consent travels between the two doors: if you opted in at the ticket checkout, our systems treat you as opted in for gallery email too, and the other way around. It is one profile, so one unsubscribe covers both.

The same Google Analytics property runs on the gallery site. There is no Meta pixel there.

Marketing email

We send marketing email two ways: through Fourvenues' own campaign tool, which reaches our main mailing list, and through Klaviyo. Both send from info@butterfly73.com. Fourvenues delivers its campaigns using Mailgun.

Klaviyo holds your email address, your first and last name, and a record of what we have sent you and how you have engaged with it. We also send it a small amount of context so the emails are not generic: how many times you have visited, whether your booking was a birthday package or a VIP table, and which gallery you unlocked. We do not send Klaviyo your date of birth.

Through Klaviyo, one automated marketing email runs today: a review request the day after you visit. It only goes to guests who ticked marketing consent, and guests without consent are skipped before the email is ever created. We also send occasional campaigns to our mailing lists. Separately, our birthday package check sends automatic emails about your booking — those are service messages, described below.

We don't currently send marketing texts or marketing WhatsApp messages. We do not sell your information, and we do not share it for anyone else's marketing.

When you message us

Messages to our WhatsApp business number +61 494 798 308 are handled through Twilio. Twilio holds your phone number, your WhatsApp profile name, your message and the recent back-and-forth. The text of your message is also sent to Anthropic, an AI provider, so an assistant can draft a reply.

Some of those replies are sent to you automatically, with nobody reading them first. If you ask about booking a table, you get an immediate reply and a booking link, and your name, number and message are forwarded to our table team and to the owner. If the assistant can't help, or something goes wrong, you get an immediate message saying a person will follow up. Other replies may be checked by a member of our team before they are sent.

Twilio also carries staff alerts that can include your name and ticket reference — for example when the door team is told about a booking.

Email to info@butterfly73.com and lost@butterfly73.com lands in Google Workspace mailboxes and is read by our team, and by Composio, the service that connects our systems to those mailboxes so we can send from them. Incoming mail to info@ is also scanned automatically every 15 minutes to spot photo removal requests and flag them to a person. Whatever you put in that email — a lost phone, a complaint, a photo request — we hold.

Birthday packages

If you book a BUTTERFLY BIRTHDAY package, an automated check runs every evening. It reads the birthday tickets on upcoming events and compares each one against the package's published conditions: within 14 days either side of your birthday, Friday or Saturday, once every 12 months, 18 and over. To check the once-a-year rule it groups your bookings together where they share an email address or a phone number, across up to 400 days of past bookings.

Three emails can reach you with no person involved. If your booking falls outside the 14-day window, the software emails you an offer to move to a night that works or to fix a mistyped date, and asks you to reply within 24 hours. If the night is tonight, it emails you straight away with no reply window, because a deadline after the event would be pointless. And if 24 hours pass with no reply, it emails you again to say the package on your booking is being released. To work out whether you replied, it searches our own info@ mailbox for a message from your address.

Everything that needs judgement — a repeat claim, an odd date of birth, an apparent under-18 booking — goes to a manager instead and is never auto-emailed. No ticket is cancelled by software; only a person can do that, though by that point the decision has been made and you have been told.

Door staff are given a list of which packages were pulled and why, so they can explain it to you, plus a list of tickets that need a closer ID check. Your age is confirmed by photo ID at the door, not by what was typed into the booking form — the form defaults the birth year, so the year we hold is often wrong and we ignore it.

Decisions made by software

Some things are decided by software alone. So you know where you stand:

Information used: your name, email address, phone number, date of birth, your ticket and booking history for the past 400 days, the wording of your WhatsApp message, and how many times you have visited.
Decisions made: whether your birthday package meets the conditions, and which of the three emails above to send you; whether your WhatsApp message is a table enquiry that gets an instant automatic reply; and which category you fall into for the day-after review email (birthday, VIP table, or repeat visitor).

If a decision about you looks wrong, email info@butterfly73.com and a person will look at it.

Why we collect all this

To sell you a ticket, get you through the door and honour your booking, table or package
To run the guest list and check people in
To publish event photos and to find and remove a photo when you ask
To send you marketing, if you said yes
To check birthday package eligibility and stop the package being abused
To measure how our website and our ads perform
To answer your messages, enquiries and lost property claims
To keep business records, and to meet legal obligations including liquor licensing and lawful requests from police or regulators

Who else holds your information, and where they are

The three that matter most to you are Fourvenues (your booking and your date of birth), Pixieset (your photos) and Klaviyo (your email). We are an Australian business, but almost none of this software is. Your information is likely to be held or handled in the countries below.

Fourvenues — Spain. Tickets, guest list, table bookings, the date of birth you enter, and our main marketing mailing list.
Pixieset — Canada. The photo galleries and the email addresses used to unlock them.
Klaviyo — United States. Marketing email and mailing lists.
Mailgun — European Union. Delivers the Fourvenues campaigns.
Wix — United States and Israel. Hosts this website.
Google — United States. Analytics on this site and the gallery site, and the mailboxes behind info@ and lost@.
Meta Platforms — United States. The pixel on this site, and the pixel and Conversions API on the ticketing checkout.
Twilio — United States. WhatsApp messages to our business number, and staff alerts that can name you.
Anthropic — United States. The text of WhatsApp messages, used to draft a reply.
Sentry — United States. Website error reports, loaded by Wix.
Cloudflare — United States. The bot check on the ticketing checkout.
Microsoft (Clarity) — United States, and Hotjar — Malta. Session recording on the Fourvenues checkout. These are Fourvenues' tools.
Dropbox — United States. The photographers' original files.
Square — United States. Card payments made in the venue.
Composio (operated by Sampark Inc, United States) — connects our systems to our mailboxes.

We also work with independent PR promoters who run their own guest lists for our events. If you join a promoter's list, that promoter can see your name on it.

We give each of them only what they need to do their job. We rely on their data protection terms to hold them to a standard like ours, but their countries' privacy laws are not the same as Australia's. Ask us and we will tell you what we hold about you and where it is.

We also give information out where the law requires it, or to police and regulators acting under a lawful request.

How long we keep it

We will be straight with you about this. One rule is enforced automatically today; the rest we action by hand.

Birthday package booking history — a rolling 400 days, then deleted automatically.
Gallery unlock email addresses — 24 months, then deleted.
Working copy of booking contacts (email address, visit count, date of birth) held on our own computers so our reporting and birthday checks can run — kept while in use and refreshed from Fourvenues. Ask us and we will remove you from it.
Marketing profile — unsubscribing stops the email but does not delete your profile or its history in Klaviyo. Ask us to delete it and we will.
Photos — in the gallery until you ask us to take one down, or we take the gallery down. The photographers' originals stay in our archive unless you ask us to remove those too.
Ticket and booking records — held in Fourvenues, and kept as long as we need them for tax, accounting and liquor licensing.
CCTV footage — 60 days, then overwritten.
Door ID scans — held in IDU Identification. Ban records are kept for as long as the ban stands.

If we no longer need something and no law requires us to keep it, we delete it.

Marketing: your consent, and getting out

Consent is optional and unticked by default on our galleries. Nothing you buy or access depends on it.
Every marketing email has an unsubscribe link. It costs nothing, it keeps working for at least 30 days after the email is sent, and we action it within 5 working days.
You can also just email info@butterfly73.com and say stop. Same result, and it covers both our senders.
If you want to know where we got your contact details, ask and we will tell you.
The venue is 18+ and we do not knowingly market to anyone under 18.

Getting a photo taken down

Email info@butterfly73.com, paste the link to the gallery and describe the photo (or give the filename shown when you open it). The link is what lets us find it fast. You do not need to give a reason and we will not ask for one.

We remove it from the gallery, normally within 2 business days, and tell you when it's done. Tell us if you also want it removed from the photographers' original files we keep. If it is on one of our own social accounts, point us at it and we will take that down too.

We will not send you the photo, and we will not confirm who else is in it — that protects everyone, including you. Once a photo has been downloaded or reposted by someone else we cannot pull those copies back, so it is worth telling us early.

Seeing, fixing or deleting what we hold

Email info@butterfly73.com. Ask us what we hold about you, ask us to correct it if it is wrong or out of date, or ask us to delete it. It is free, and we will respond within 30 days.

We will delete what we can. Some things we may need to keep — a transaction record, or something involved in a legal or licensing obligation — and if that applies we will tell you what we kept and why. In the rare case we cannot give you access to something, we will tell you that in writing and explain why, and you can complain about that decision.

Keeping it safe

Your information mostly sits inside the platforms listed above, protected by their security and reached through accounts limited to the staff who need them. Some working copies of booking data — email addresses, visit counts, dates of birth — are also held on Butterfly 73 computers so our reporting and birthday checks can run.

If there is ever a data breach that is likely to cause you serious harm, we will tell you and we will notify the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.

Complaints

If you think we have mishandled your information, email info@butterfly73.com. We will respond within 30 days. If you are not happy with our answer, you can take it to the Office of the Australian Information Commissioner at oaic.gov.au. You do not need our permission to do that.

Under 18s

Butterfly 73 is an 18+ venue and our marketing is for adults. We do not knowingly collect information from anyone under 18, and a birthday-package booking that looks like it belongs to someone under 18 is escalated to a manager. Age is checked by photo ID at the door on every guest.

Our website, including the /photos page, is public and carries the analytics and advertising tools described above, so anyone can browse it. If you believe we hold information about a child, email info@butterfly73.com and we will delete what we can.

If you work for us

This policy is for our guests and our website visitors. If you work for Butterfly 73, your rostering, timesheet and payroll information is handled separately under our employment arrangements.

Changes to this policy

We will update this page when what we do changes, and change the date at the top. If we change something that matters — a new tracking tool, a new use of your data — we will say so here rather than quietly editing it.

Contact us

Klassic Group Pty Ltd, ABN 26 616 912 040, trading as Butterfly 73
73 Francis Street, Northbridge WA 6003
info@butterfly73.com