Tourism Whitsundays Limited is committed to protecting user privacy. We understand and appreciate that visitors and users of this website are concerned about their privacy and the confidentiality and security of any information that may be provided.
Tourism Whitsundays Limited is subject to the Information Privacy Act 2009 which requires that we comply with the Information Privacy Principles (IPPs) set out in the Act. The IPPs set out how Queensland Government agencies should collect, store, use and disclose personal information and how individuals can access and apply to amend documents containing their personal information.
When you visit a Tourism Whitsundays Limited website, our server makes a record of your visit and logs certain information for statistical purposes only. No attempt is or will be made to identify users or their browsing activities except, in the unlikely event of an investigation, where a law enforcement agency may exercise a power to inspect activity logs.
When this policy mentions “TW,” “we,” “us,” or “our,” it refers to Tourism Whitsundays Limited.
The types of personal information that we collect will depend on the nature of your dealings with us. For example, we may collect personal information directly from you when you:
In each case, we only collect the personal information that we need to carry out our specific functions.
Any personal information collected by Tourism Whitsundays Limited will only be made available to Tourism Whitsundays personnel or approved contracted parties whose duties require them to use this information. Any personal information collected through this website will also be disclosed if required by law.
There are three general categories of information that we collect.
1. Information You Give Us
We collect information you share with us when you use the TW website in order to ensure the adequate performance of contracts between you and TW, or between you and a Supplier.
2. Information We Automatically Collect from Your Use of the TW Website
When you use the TW website, we collect information about the services you use and how you use them, even if you don’t sign up for a TW account. We process this information for the activities and legal bases described in Section 2 below.
3. Information We Collect from Third Parties
We may collect information that others provide about you when they use the TW website, or obtain information from other sources and combine that with information we collect through the TW website. TW does not control, supervise or respond for how the third parties providing your information process your personal data, and any information request regarding the disclosure of your personal information to TW should be directed to such third parties.
How We Use The Information We Collect
We use, store, and process information about you to provide, understand, improve, and develop the TW website, and to create and maintain a trusted and safer environment.
1. Provide, Improve, and Develop the TW website
We process this information given our legitimate interest in improving the TW website and our users’ experience with it, and to ensure the adequate performance of our contract with you.
2. Create and Maintain a Trusted and Safer Environment
We process this information given our legitimate interest in protecting the TW website, to verify and ensure the adequate performance of our contract with you, and to comply with applicable laws.
3. Provide, Personalise, Measure, and Improve our Advertising and Marketing
We process this information given our legitimate interest in protecting the TW website, to measure the adequate performance of our contract with you, and to comply with applicable laws.
With Your Consent or Where Authorised by Law
Sharing between Customers and Suppliers
Sharing this information is necessary to provide Customers with our services, and we don’t share your billing and payout information with other Members.
Reviews, Listings, and other Public Information
The TW website publishes information that is visible to the general public. For example:
Information you share publicly on the TW website may be indexed through third party search engines. If you change your settings or your public-facing content, these search engines may not update their databases. We do not control the practices of third party search engines, and they may use caches containing your outdated information.
We use a variety of third party service providers to help us provide services related to the TW website and ensure we can adequately provide you with our services. For example, service providers may help us: a) verify or authenticate your identification, b) check information against public databases, c) assist us with background checks, fraud prevention, and risk assessment, or d) provide customer service, advertising, or payments services. These providers have limited access to your information to perform these tasks on our behalf, and are contractually obligated to use it consistent with this policy.
Additional Services by Suppliers
Suppliers may use third party services available through the TW website to assist with managing their Accommodation or providing additional services, such as cleaning services, insurance or activities providers. Suppliers may use features on the TW website to share information about the Customer (like the Customer’s check-in and check-out dates, name, phone number, and email address) with that third party service provider for the purposes of coordinating the stay, managing the Accommodation, or delivering other services.
Safety and Compliance with Law
TW may disclose your information to courts, law enforcement or governmental authorities, or authorised third parties, if and to the extent we are required or permitted to do so by law or if such disclosure is reasonably necessary:
We will attempt to notify Members about these requests unless:
In instances where we comply with legal requests without notice for these reasons, we will attempt to notify that Member about the request after the fact if we determine in good faith that we are no longer legally prohibited from doing so and that no Risk Scenarios apply.
In jurisdictions where we facilitate the collection and remittance of occupancy taxes, Customers and Suppliers expressly grant us permission, without further notice, to disclose Customers’ and Suppliers’ data and other information relating to them or to their transactions, bookings, Accommodations and occupancy taxes to the relevant tax authority, including, but not limited to, the Customer’s or Supplier’s name, listing addresses, transaction dates and amounts, tax identification number(s), the amount of taxes received (or due) by Suppliers from Customers, and contact information.
We may also share aggregated information (information about our users that we combine together so that it no longer identifies or references an individual user) and other de-identified information for industry and market analysis, regulatory compliance, demographic profiling, marketing and advertising, and other business purposes.
Analysing your Communications
We may review, scan, or analyse your communications on the TW website for fraud prevention, risk assessment, regulatory compliance, investigation, product development, research, and customer support purposes. For example, as part of our fraud prevention efforts, we scan and analyse messages to mask contact information and references to other websites. In some cases, we may also scan, review, or analyse messages to debug, improve, and expand product offerings. We use automated methods where reasonably possible. However, occasionally we may need to manually review some communications, such as for fraud investigations and customer support, or to assess and improve the functionality of these automated tools. We will not review, scan, or analyse your communications to send third party marketing messages to you, and we will not sell reviews or analyses of these communications. These activities are carried out based on TW’s legitimate interest in ensuring compliance with applicable laws, preventing fraud, promoting safety, and improving and ensuring the adequate performance of our services.
Linking Third Party Accounts
You may link your TW account with your account at a third party social networking service. When you create this link:
We only collect your information from linked third party accounts to the extent necessary to ensure the adequate performance of our contract with you, or to ensure that we comply with applicable laws, or with your consent.
Third Party Partners & Integration
The TW website may contain links to third party websites or services, such as third party integrations, co-branded services, or third party-branded services (“Third Party Partners”). TW doesn’t own or control these Third Party Partners and when you interact with them, you may be providing information directly to the Third Party Partner. These Third Party Partners will have their own rules about the collection, use, and disclosure of information. We encourage you to review the privacy policies of the other websites you visit.
Managing Your Information
You may access, update, and correct most of your basic personal information by logging into your TW account and reviewing your settings and profile. Where permitted by applicable law, you may request written copies of your personal information held by us. In some cases and where permitted by law, we may charge a fee which will be disclosed to you before we comply with your request. You are responsible for keeping your personal information up-to-date.
Data Retention & Account Cancellation
We generally retain your information for as long as is needed to provide the TW website to you, or for as long as your account is active. If you no longer want us to use your information to provide the TW website to you, you may cancel your account or request us to erase your personal information. To cancel your TW account, contact us. If you cancel your account or request erasure of your personal information, note that:
In some jurisdictions, applicable law may entitle you to request a copy of your personal information that you have provided to us and/or to request us to move such personal information to another service provider. In such cases, and in line with our legal obligations, we will provide you or the service provider with information in a structured and commonly used format.
In certain extraordinary circumstances (e.g. where you think that TW is not holding accurate data about you) and in line with applicable law, you may request TW to temporarily restrict our use of your personal information for a limited period of time until the extraordinary circumstance that justified the restriction ends.
Objecting to Processing (including Automated Decision-Making)
In some jurisdictions, applicable law may entitle you to require TW not to process your personal information for certain specific purposes, such as profiling or marketing purposes.
Exercising Rights and Lodging Complaints
Tourism Whitsundays Limited utilizes a combination of industry-standard security technologies, procedures and organizational measures to help protect your personal information from unauthorized access, use or disclosure.
When you make a payment through our websites your personal and financial details are protected at all stages of the transaction by powerful encryption technology. Your credit card details are NOT stored on our servers at any stage of the transaction. Once the credit card details have been sent to our financial institution they are no longer known to our system. This ensures that your credit card details are seen only by yourself and the bank performing the transactions.
Tourism Whitsundays Limited website contain links to other sites that are external. Tourism Whitsundays Limited takes care in linking websites but has no direct control over the content of the linked websites, or to the changes that may occur to the content on those sites. It is the responsibility of the user to make their own decisions about the accuracy, currency, reliability and correctness of information contained in linked external websites.
This is a website of Tourism Whitsundays Limited. E-mail correspondence sent to this site is subject to the Right to Information Act 2009 and will be treated as a public record and retained as required by the Public Records Act 2002 and other relevant Acts and regulations.
Your name and address details will not be added to a mailing list without your consent, nor will we disclose these details to third parties without your consent unless required by law. Email messages may be monitored by our website support staff for system trouble shooting and maintenance purposes.
If you have any queries about our privacy and security practices please send an email to firstname.lastname@example.org.
If you wish to access or alter any personal information we may have collected about you, you may request such access by contacting our Privacy Officer at email@example.com.
Last Updated: 25th May 2018