Privacy Policy

01Introduction

This Privacy Policy explains how AUStaysDownUnder handles personal information when visitors use our Australian hotel discovery website, submit an enquiry, join a newsletter, adjust cookie choices or interact with planning tools. We aim to use clear language so visitors can understand what is collected, why it is used and what choices are available. This policy should be read together with our Cookie Policy and Terms. We document decisions carefully, keep collection proportionate and aim to provide a practical response without unnecessary delay. Records are reviewed against their purpose, access is limited to authorised people and privacy choices remain available throughout the website.

02About AUStaysDownUnder

AUStaysDownUnder is a destination-guide website focused on Australian hotel stays, regional dining, wellness, live entertainment, practical travel planning and information about adults-only casino facilities. We provide guide content and enquiry pathways. The website does not create user accounts, operate a wallet, process casino deposits or accept payments. We document decisions carefully, keep collection proportionate and aim to provide a practical response without unnecessary delay. Records are reviewed against their purpose, access is limited to authorised people and privacy choices remain available throughout the website.

03Scope of this policy

This policy applies to information collected through austaysdownunder.com and its local website files, including forms, newsletter fields, cookie settings and interactive tools. It does not govern independent hotel systems, map providers, external support services or websites reached through outbound links. Those organisations publish their own notices. We document decisions carefully, keep collection proportionate and aim to provide a practical response without unnecessary delay. Records are reviewed against their purpose, access is limited to authorised people and privacy choices remain available throughout the website.

04Information visitors provide

Visitors may provide their name, email address, phone number, preferred hotel, travel dates, group size, enquiry subject and message. Information should be accurate, relevant and limited to what is necessary for the request. Visitors should not include financial account details, identity documents, health records or other highly sensitive information in free-text fields. We document decisions carefully, keep collection proportionate and aim to provide a practical response without unnecessary delay. Records are reviewed against their purpose, access is limited to authorised people and privacy choices remain available throughout the website.

05Contact form information

The contact form requests enough information to route an enquiry and support a useful response. Required fields include name, email, preferred hotel, number of adults, category, subject, message and privacy consent. Optional fields such as phone number, travel dates and number of children help clarify the planning context. We document decisions carefully, keep collection proportionate and aim to provide a practical response without unnecessary delay. Records are reviewed against their purpose, access is limited to authorised people and privacy choices remain available throughout the website.

• Use only the information needed for the stated purpose.
• Provide clear choices where processing is optional.
• Keep records only for an appropriate period.

06Hotel preference information

A selected hotel or region helps direct questions to the most relevant destination. Preference information may also be used in aggregated form to understand which guide areas receive more interest. It is not used to infer sensitive traits, gambling behaviour or financial capacity. We document decisions carefully, keep collection proportionate and aim to provide a practical response without unnecessary delay. Records are reviewed against their purpose, access is limited to authorised people and privacy choices remain available throughout the website.

07Travel date information

Arrival and departure dates can be supplied to discuss likely availability, package windows, event timing or seasonal considerations. Dates entered into the front-end stay planner remain in the browser unless a user separately submits them through a form. We do not use travel dates to make automated eligibility decisions. We document decisions carefully, keep collection proportionate and aim to provide a practical response without unnecessary delay. Records are reviewed against their purpose, access is limited to authorised people and privacy choices remain available throughout the website.

08Newsletter details

Newsletter forms may collect a first name, email address, preferred region and consent. Subscription information is used to send destination updates, planning notes and guide features. Each marketing message should provide an unsubscribe method. Withdrawing newsletter consent does not affect a separate hotel enquiry. We document decisions carefully, keep collection proportionate and aim to provide a practical response without unnecessary delay. Records are reviewed against their purpose, access is limited to authorised people and privacy choices remain available throughout the website.

09Technical data

Web servers and security services may process technical data such as IP address, request time, requested page, response status and general browser information. Technical logs support website delivery, diagnostics, abuse prevention and security. We avoid using technical data to create detailed personal travel or gambling profiles. We document decisions carefully, keep collection proportionate and aim to provide a practical response without unnecessary delay. Records are reviewed against their purpose, access is limited to authorised people and privacy choices remain available throughout the website.

10Device information

General device information may include browser type, operating system, screen size, language setting and mobile or desktop category. This helps test responsive design and identify compatibility issues. We do not need a precise device fingerprint for ordinary guide functions. We document decisions carefully, keep collection proportionate and aim to provide a practical response without unnecessary delay. Records are reviewed against their purpose, access is limited to authorised people and privacy choices remain available throughout the website.

• Use only the information needed for the stated purpose.
• Provide clear choices where processing is optional.
• Keep records only for an appropriate period.

11Website usage data

If analytics are enabled, aggregated usage data may show which pages are visited, how long sections remain open, which buttons are used and whether errors occur. Optional analytics should only run after the relevant preference is accepted. Reports should be configured to reduce unnecessary identification. We document decisions carefully, keep collection proportionate and aim to provide a practical response without unnecessary delay. Records are reviewed against their purpose, access is limited to authorised people and privacy choices remain available throughout the website.

12LocalStorage

The website uses browser localStorage to remember cookie choices and may remember selected interface preferences. LocalStorage remains on the device until it expires through application logic, is removed by the visitor or is cleared with browser data. It is not a remote database and should not be used for sensitive information. We document decisions carefully, keep collection proportionate and aim to provide a practical response without unnecessary delay. Records are reviewed against their purpose, access is limited to authorised people and privacy choices remain available throughout the website.

13Cookies

Cookies are small data files that a website or service may place in a browser. Necessary technologies support consent and security, while optional categories may support preferences, analytics or campaign measurement. Detailed categories, typical durations and management methods appear in the Cookie Policy. We document decisions carefully, keep collection proportionate and aim to provide a practical response without unnecessary delay. Records are reviewed against their purpose, access is limited to authorised people and privacy choices remain available throughout the website.

14Purposes of processing

We use information to answer enquiries, provide requested destination material, operate forms, remember cookie choices, improve accessibility, maintain security, understand aggregated site performance and send newsletters where consent has been given. Information is not used to guarantee hotel availability or casino outcomes. We document decisions carefully, keep collection proportionate and aim to provide a practical response without unnecessary delay. Records are reviewed against their purpose, access is limited to authorised people and privacy choices remain available throughout the website.

15Legal bases

Depending on the activity and applicable Australian privacy principles, processing may be based on consent, steps taken at a visitor’s request, legitimate operational interests or legal obligations. Where consent is the basis, it can be withdrawn. Where an operational interest is relied upon, we consider necessity and the impact on visitors. We document decisions carefully, keep collection proportionate and aim to provide a practical response without unnecessary delay. Records are reviewed against their purpose, access is limited to authorised people and privacy choices remain available throughout the website.

• Use only the information needed for the stated purpose.
• Provide clear choices where processing is optional.
• Keep records only for an appropriate period.

16Consent

Consent is requested for newsletter marketing, optional cookie categories and privacy acknowledgement in forms. Consent should be freely given, specific and informed. A visitor can reject optional cookies and still use the main guide. A visitor can also contact a hotel without subscribing to marketing. We document decisions carefully, keep collection proportionate and aim to provide a practical response without unnecessary delay. Records are reviewed against their purpose, access is limited to authorised people and privacy choices remain available throughout the website.

17Legitimate interests

Legitimate operational interests may include responding to a genuine enquiry, maintaining service security, preventing abuse, improving page performance and keeping basic business records. We do not treat commercial convenience as a reason to ignore reasonable privacy expectations. We document decisions carefully, keep collection proportionate and aim to provide a practical response without unnecessary delay. Records are reviewed against their purpose, access is limited to authorised people and privacy choices remain available throughout the website.

18Enquiry handling

Enquiries may be reviewed by authorised support personnel and, where relevant, directed to the selected hotel contact. We use the details to understand the question, request clarification if necessary and provide a response. The content is not published as a review or shared for unrelated advertising. We document decisions carefully, keep collection proportionate and aim to provide a practical response without unnecessary delay. Records are reviewed against their purpose, access is limited to authorised people and privacy choices remain available throughout the website.

19Service providers

Service providers may assist with hosting, email delivery, security, analytics, form routing or technical maintenance. They should receive only the information required for their role and be subject to contractual, confidentiality and security expectations appropriate to the service. We document decisions carefully, keep collection proportionate and aim to provide a practical response without unnecessary delay. Records are reviewed against their purpose, access is limited to authorised people and privacy choices remain available throughout the website.

20Third-party services

The website may load Google Maps, Google Fonts, Font Awesome or similar external resources. These services can receive technical request information, including IP address and browser details. Visitors can review provider notices and use browser controls or blocking tools where appropriate. We document decisions carefully, keep collection proportionate and aim to provide a practical response without unnecessary delay. Records are reviewed against their purpose, access is limited to authorised people and privacy choices remain available throughout the website.

• Use only the information needed for the stated purpose.
• Provide clear choices where processing is optional.
• Keep records only for an appropriate period.

21Data sharing

Information may be shared with a chosen hotel to answer a property-specific enquiry, with service providers performing contracted functions, with professional advisers where necessary, or with authorities when lawfully required. We do not sell personal information to advertisers or data brokers. We document decisions carefully, keep collection proportionate and aim to provide a practical response without unnecessary delay. Records are reviewed against their purpose, access is limited to authorised people and privacy choices remain available throughout the website.

22International data transfers

Some technology providers may process information outside Australia. Where international handling occurs, we seek appropriate contractual and technical safeguards and consider the privacy practices of the provider. Visitors should understand that foreign laws may differ from Australian requirements. We document decisions carefully, keep collection proportionate and aim to provide a practical response without unnecessary delay. Records are reviewed against their purpose, access is limited to authorised people and privacy choices remain available throughout the website.

23Retention periods

Enquiry information is retained only as long as reasonably necessary to respond, manage follow-up, resolve disputes and meet legal or record-keeping obligations. Newsletter information remains until unsubscribe or removal. Security logs and consent records may be held for a limited operational period. We document decisions carefully, keep collection proportionate and aim to provide a practical response without unnecessary delay. Records are reviewed against their purpose, access is limited to authorised people and privacy choices remain available throughout the website.

24Data security

Reasonable safeguards may include access controls, secure connections, software updates, backups, logging, staff confidentiality and limited data collection. No website can promise absolute security. Visitors should avoid sending confidential financial, identity or medical information through general enquiry forms. We document decisions carefully, keep collection proportionate and aim to provide a practical response without unnecessary delay. Records are reviewed against their purpose, access is limited to authorised people and privacy choices remain available throughout the website.

25Access rights

Visitors may ask whether we hold personal information about them and request access, subject to lawful exceptions. A request should include enough detail to identify the relevant enquiry or subscription without asking the visitor to disclose unnecessary information. We document decisions carefully, keep collection proportionate and aim to provide a practical response without unnecessary delay. Records are reviewed against their purpose, access is limited to authorised people and privacy choices remain available throughout the website.

• Use only the information needed for the stated purpose.
• Provide clear choices where processing is optional.
• Keep records only for an appropriate period.

26Correction rights

If information is inaccurate or incomplete, a visitor may request correction. We may ask for a reasonable way to verify the change. Corrections do not guarantee that independently held hotel or third-party records will also be updated. We document decisions carefully, keep collection proportionate and aim to provide a practical response without unnecessary delay. Records are reviewed against their purpose, access is limited to authorised people and privacy choices remain available throughout the website.

27Deletion rights

A visitor may request deletion where information is no longer needed, consent has been withdrawn or handling is otherwise inappropriate. Some records may need to be retained for legal, security or dispute purposes. Where deletion cannot be completed, we explain the reason where permitted. We document decisions carefully, keep collection proportionate and aim to provide a practical response without unnecessary delay. Records are reviewed against their purpose, access is limited to authorised people and privacy choices remain available throughout the website.

28Restriction and objection

Visitors may object to marketing, ask that optional processing stop or request restricted use while a concern is reviewed. Cookie preferences can be reopened from the footer. Browser-level controls can also restrict storage and third-party requests. We document decisions carefully, keep collection proportionate and aim to provide a practical response without unnecessary delay. Records are reviewed against their purpose, access is limited to authorised people and privacy choices remain available throughout the website.

29Marketing preferences

Marketing communication is separate from transactional responses. Unsubscribing from newsletters does not prevent a reply to an existing hotel enquiry. We use preference information to reduce irrelevant communication rather than increase message frequency. We document decisions carefully, keep collection proportionate and aim to provide a practical response without unnecessary delay. Records are reviewed against their purpose, access is limited to authorised people and privacy choices remain available throughout the website.

30Withdrawing consent

Consent can be withdrawn through an unsubscribe link, cookie settings or direct contact. Withdrawal applies going forward and does not make earlier consent-based processing unlawful. Necessary storage may remain where required to record a preference or meet obligations. We document decisions carefully, keep collection proportionate and aim to provide a practical response without unnecessary delay. Records are reviewed against their purpose, access is limited to authorised people and privacy choices remain available throughout the website.

• Use only the information needed for the stated purpose.
• Provide clear choices where processing is optional.
• Keep records only for an appropriate period.

31Children’s privacy

The guide is intended for general travel planning, but casino-related content and facilities are intended only for adults aged 18 and over. We do not knowingly request newsletter subscriptions from children. Parents and guardians should supervise minors using travel websites. We document decisions carefully, keep collection proportionate and aim to provide a practical response without unnecessary delay. Records are reviewed against their purpose, access is limited to authorised people and privacy choices remain available throughout the website.

32Adult casino-related content

Casino information is informational and forms one part of broader hotel profiles. We do not collect betting histories, stakes, gaming account data or deposit information. Visitors should never submit such details through our forms. Responsible gambling resources are available throughout the site. We document decisions carefully, keep collection proportionate and aim to provide a practical response without unnecessary delay. Records are reviewed against their purpose, access is limited to authorised people and privacy choices remain available throughout the website.

33External websites

Outbound links may lead to map services, support organisations, social platforms or independent providers. Their privacy practices are outside our control. Visitors should review the destination website before submitting information or enabling additional tracking. We document decisions carefully, keep collection proportionate and aim to provide a practical response without unnecessary delay. Records are reviewed against their purpose, access is limited to authorised people and privacy choices remain available throughout the website.

34Changes to the policy

We may update this policy to reflect legal, technical or operational changes. The last updated date will change when material revisions are published. Continued use after an update does not replace any consent required for new optional processing. We document decisions carefully, keep collection proportionate and aim to provide a practical response without unnecessary delay. Records are reviewed against their purpose, access is limited to authorised people and privacy choices remain available throughout the website.

35Contact information

Privacy questions, access requests or corrections can be directed to [email protected] or AUStaysDownUnder, Australia. Please identify the relevant enquiry or subscription and describe the request clearly. Do not send identity documents unless specifically and securely requested. We document decisions carefully, keep collection proportionate and aim to provide a practical response without unnecessary delay. Records are reviewed against their purpose, access is limited to authorised people and privacy choices remain available throughout the website.

• Use only the information needed for the stated purpose.
• Provide clear choices where processing is optional.
• Keep records only for an appropriate period.