In this policy, we set out a summary of how we manage your personal information.
Collection
The core functions of our business (ie. the primary purposes for which we collect personal information) are to facilitate the booking and marketing of our various travel products. We will not collect personal information unless it is necessary for one or more of these functions or a related activity.
We may also collect information about you in order for you to register as a member, complete a travel profile, participate in a survey or promotion, ask a question or initiate a transaction on our website, over the phone, a mobile application or through a franchised agent.
As far as it is reasonable or practicable, we will collect your personal information directly from you. If it is not reasonable or practicable and personal information is collected from someone else (e.g. another person booking on your behalf), we will take reasonable steps to ensure that you are made aware of the collection of your personal information, , unless specific exemptions apply. Sensitive information will only be collected with your consent, unless specific legislative exemptions app.
Information about other travellers
If you provide us with information about other people travelling with you (for example, family members), you should make them aware of this Privacy Policy and any privacy collection notices we provide you.
Use and Disclosure
Our general rule is that we will not use or disclose your personal information other than for the purpose stated at the time of collection. If another use is proposed, we will seek your further consent unless that other purpose is related to the original purpose of collection (the “secondary purpose”). For example, you could reasonably expect us to use or disclose your personal information collected from your booking form for the secondary purpose of sending you information about your automatic entitlements to special offers,
potential discounts as a past passenger and any special promotions that are on offer.
Whilst we retain various third parties to assist us in our marketing and promotional activities (eg. to administer our newsletter email service and to maintain an off-site database for information concerning our past passengers), we do not disclose your personal information to anyone else for their promotional use. Similarly, we are not in the practice of purchasing mailing lists (whether post or email) from third parties for our promotional use.
Any promotional information that we send to you (by post or by email) will contain instructions for how you can easily opt out of receiving further notifications. We seek written assurances from parties to whom we may disclose personal information to ensure that they will treat that information in accordance with our privacy policy.
Data Quality
We will take reasonable steps to ensure that the personal information we collect, use or disclose is accurate, complete, up to date and relevant, having regard to the purpose for which the information is proposed to be used. We encourage you to contact us if you believe personal information we hold about you is incorrect or incomplete in some way.
Data Security
We take reasonable steps to protect the personal information we hold from misuse and loss, and from unauthorised access, modification or disclosure in accordance with industry standards. This includes physical security for our office and electronic security (such as password access, encryption and firewalls) for our office network servers and electronic data transfers. All credit card details are transmitted using encryption processes.
Access and Correction
Generally, we will give you access to the personal information we have collected about you and we may correct it at your request. If we do not grant your request for access to or for a correction of personal information we have collected about you, we will provide you with a written explanation of the reasons for our decision.
Further Information about Privacy
If you are in Australia and you would like further information about privacy generally, please contact the Office of the Australian Information Commissioner by calling 1300 363 992 or visit the Commissioner’s web site at www.privacy.gov.au.
Comments
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Cookies
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Who we share your data with
If you request a password reset, your IP address will be included in the reset email.
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where your data is sent
Visitor comments may be checked through an automated spam detection service.