NVR GVN UP collects child, guardian, emergency contact, medical and permission details to organise sessions, support your child and manage authorised pickups.
Registration and booking records are stored in NVR GVN UP’s Google Sheet. Cloudflare hosts this website and stores the booking information needed to process and reconcile payments. Stripe handles payment details and receipts. Medical information is not sent to Stripe.
Campaign labels, such as a QR source code, campaign name or creative version, help us understand how families find us. They are recorded with the booking for internal reporting. This form does not subscribe you to a marketing mailing list.
To ask about your information or request a correction, contact dave@nvrgvnup.com.
A shareable invitation identifies its referring family, campaign and session using a random link code. It does not disclose family records to the person opening it. We record the referral when the invited parent submits their own registration, and use booking, payment and attendance records to measure the campaign. We do not collect the names or email addresses of people you share a link with. Invitation codes and referral family identifiers are not sent to Meta.
We count successful page loads by day, page and staff-registered QR or campaign label. This separate counter does not use visitor identifiers, analytics cookies, browser storage, IP addresses, fingerprinting, form answers, full URLs or referral tokens. It keeps daily totals, not individual events or paths between pages, and does not send these totals to Meta. Refreshes count again; these are not unique-person or conversion counts. Query-string labels can remain on internal links so the same flyer batch can be counted on different pages without identifying a visitor. Unknown or missing labels are reported as untagged. Totals are stored in Cloudflare for 90 days. Global Privacy Control and links marked measure=off are excluded. Normal hosting and security processing is separate from this counter.
We do not automatically show a measurement permission popup. Optional website analytics and advertising measurement stay off for new visitors unless you choose to enable them in Privacy settings. Previously saved choices remain in effect. QR and campaign labels are still recorded with bookings separately, as described above.
If you allow website analytics, we measure visits and progress through booking: opening the booking page, selecting a date, verifying email, completing child and contact details, opening payment checkout, and a confirmed purchase or fully credited booking. We record that a step was reached, never the answers or email entered.
We use a random first-party browser reference to avoid counting refreshes repeatedly. A visit ends after 30 minutes without a measured action, or when a different campaign link is opened. We keep the most recent source on that browser for up to 30 days to understand return visits. This does not identify the same person across different browsers or devices.
Analytics contains campaign labels, registered QR source and partner assignment, referral hostname (not a full referring URL), times, step counts, random references and order totals. We do not add names, emails, child details, form answers, IP addresses, browser fingerprints or Meta identifiers to this first-party analytics store. A random reference links a confirmed booking to its measured visit; this link is also held with the operational order. Website analytics is stored in Cloudflare and is not sent to Meta.
Detailed visits and conversion deduplication records expire after 90 days. Aggregated reports may be exported for longer-term campaign comparisons. Choosing “Website analytics only” does not enable Meta advertising measurement. Declining or withdrawing stops future website analytics, including pending conversions; it does not remove historical aggregate reports. Your booking still works.
If you allow it, we send Meta a visit to our homepage, the start of a valid payment checkout, and a purchase only after successful payment and a saved booking. A purchase includes the actual order total in AUD and a random event reference. Two children in one paid order count as one purchase.
With advertising permission, we also maintain separate internal delivery diagnostics for date selection, completed child details and completed contact details. These internal counts use a random booking-attempt reference to avoid counting refreshes twice, contain no form answers, are kept for 30 days and are not sent to Meta.
With your permission, we also send your browser’s IP address and browser type, any genuine existing Meta browser or click identifiers, and a click identifier from an actual Meta ad link. These help Meta connect the adult’s purchase with an advertisement.
We do not send names, email addresses, phone numbers, children’s details, dates of birth, medical information, emergency contacts, registration answers or full query strings to Meta. We do not use automatic advanced matching or automatic form-event detection. Children booked remain a separate internal operational count.
These events go from our server to Meta’s Conversions API without loading Meta’s advertising script. Meta may process this information outside Australia under its Privacy Policy.
You can decline and still book. When measurement is enabled, use the privacy settings to change your choice. Withdrawal stops future events and suppresses queued events that have not yet been sent. It cannot retrieve events already received by Meta. A Global Privacy Control signal is treated as declining tracking.
All bookings start with email verification. We use Google’s email service to send a six-digit code, valid for 10 minutes. Verification unlocks any family details saved against your primary booking email. A secure sign-in cookie lasts 30 minutes. Your browser tab temporarily retains the email and request reference so you can return from your email app; it does not save the code or sign-in cookie in the booking draft. Verification does not subscribe you to marketing.
To recover an unfinished booking after a refresh, the details you enter are saved in this browser tab for up to 30 minutes after your latest change. They are cleared when a booking is confirmed, when you sign out or choose “Start again”, or when the tab’s session storage is cleared. These drafts stay in your browser and are not sent to Meta.
Essential cookies support sign-in and checkout. Separate first-party cookies record your website analytics and advertising choices for up to 180 days. QR and campaign cookies keep the latest tagged source for up to 30 days for booking attribution, including when optional analytics is declined. A new tagged campaign replaces the earlier one. Advertising browser identifiers and event contexts expire after seven days and are removed by scheduled cleanup. A minimal delivery record, containing the random event reference, event type, value and delivery status, expires after 30 days to prevent duplicates and diagnose failures.
Operational family and booking records are separate. We keep them for as long as needed to provide the program and meet applicable obligations.