Privacy Policy
Last Updated: September 10, 2026
1. Introduction
This Privacy Policy explains how wind-stoat ("we," "us," or "our") collects, uses, and protects personal information when you use our website or book our heritage tour services.
2. Information We Collect
2.1 Information You Provide
When you make a booking or contact us, we collect:
- Full name
- Email address
- Tour preferences and selected services
- Any additional information you provide in communications with us
2.2 Automatically Collected Information
When you visit our website, we may automatically collect:
- IP address
- Browser type and version
- Pages visited and time spent on pages
- Referring website addresses
3. How We Use Your Information
We use collected information to:
- Process and confirm your tour bookings
- Send booking confirmations and tour details
- Respond to your inquiries and provide customer support
- Improve our website functionality and user experience
- Send occasional updates about our services (you may opt out at any time)
4. Information Sharing
We do not sell, trade, or rent your personal information to third parties. We may share information only in these limited circumstances:
- With service providers who assist in tour operations (all bound by confidentiality agreements)
- When required by law or to protect our legal rights
- With your explicit consent
5. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no internet transmission is completely secure, and we cannot guarantee absolute security.
6. Data Retention
We retain your personal information only as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Booking information is typically retained for seven years for accounting and legal purposes.
7. Your Rights
Under applicable privacy laws, you have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your information (subject to legal retention requirements)
- Object to processing of your information
- Withdraw consent where processing is based on consent
To exercise these rights, contact us at [email protected]
8. Cookies
Our website uses cookies to enhance functionality and analyze usage. You can control cookie preferences through your browser settings. For detailed information, see our Cookies Policy.
9. Third-Party Links
Our website may contain links to external sites. We are not responsible for the privacy practices of these third-party websites. We encourage you to review their privacy policies.
10. Children's Privacy
Our services are not directed at individuals under 16 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The updated date at the top of this page indicates when the policy was last revised. We encourage you to review this policy regularly.
12. Australian Privacy Principles
As an Australian business, we comply with the Australian Privacy Principles contained in the Privacy Act 1988 (Cth). This includes obligations regarding the collection, use, disclosure, and security of personal information.
13. Contact Information
For questions about this Privacy Policy or our data practices, contact us:
Email: [email protected]
Address: 127 Macquarie Street, Sydney NSW 2000, Australia