Introduction

Kosciuszko Tourist Park (ABN [if applicable]) (referred to as "we," "our," or "us") is committed to protecting your privacy and handling your personal information responsibly and in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy outlines:

• What personal information we collect
• How we collect and use your information
• Who we share your information with
• How we protect your information
• Your rights regarding your personal information

By using our website or services, you consent to the collection and use of your information as described in this policy.

What Personal Information We Collect

1. Information You Provide Directly

When you make a booking or interact with our services, we may collect:

• Contact details: Name, postal address, email address, phone number
• Booking information: Arrival and departure dates, accommodation type, number of guests (including ages of children)
• Payment information: Credit/debit card details, billing address (processed securely through our payment provider)
• Vehicle information: Vehicle registration number, make, model, and color (for parking and security purposes)
• Emergency contact details: Name and phone number of emergency contact person
• Special requests: Dietary requirements, accessibility needs, or other preferences
• Correspondence: Any information you provide when contacting us via email, phone, or in person

2. Information Collected Automatically

When you visit our website, we automatically collect certain technical information:

• Device information: IP address, browser type and version, operating system, device type
• Usage data: Pages visited, time spent on pages, links clicked, referring website
• Location data: Approximate geographic location based on IP address
• Cookies: Small data files stored on your device (see our Cookie Policy for details)

3. Information from Third Parties

We may receive information about you from:

• Online Travel Agents (OTAs): Such as Booking.com, Airbnb, or Expedia when you book through their platforms
• Payment processors: Transaction confirmation and fraud prevention information
• Social media: If you interact with our social media pages or use social login features

4. CCTV and Security Information

For safety and security purposes, we operate CCTV cameras in public areas of the park. Recorded footage may capture your image and is retained for security purposes only.

How We Collect Your Information

We collect your personal information through various channels:

• Direct bookings: When you book accommodation through our website or by phone
• Online forms: Inquiry forms, contact forms, cancellation/amendment request forms
• Email and phone: When you communicate with us directly
• In person: During check-in, check-out, or visits to our reception
• Third-party platforms: When you book through OTAs or booking engines
• Cookies and tracking: Through our website (see our Cookie Policy)
• CCTV: Visual recordings in public areas for security purposes

How We Use Your Information

We use your personal information for the following purposes:

Primary Purposes

• Process bookings: Confirm reservations, manage arrivals and departures, allocate accommodation
• Payment processing: Process payments, issue receipts, manage refunds
• Customer service: Respond to inquiries, handle complaints, provide assistance
• Account management: Maintain your booking records, manage amendments and cancellations
• Communication: Send booking confirmations, pre-arrival information, and important updates

Secondary Purposes

• Marketing: Send promotional offers, newsletters, and special deals (with your consent only)
• Service improvement: Analyze website usage, improve our facilities and services
• Security: Monitor CCTV footage, prevent fraud, ensure guest and property safety
• Legal compliance: Meet legal and regulatory obligations, respond to legal requests
• Business operations: Statistical analysis, business planning, financial reporting

How We Share Your Information

We may share your personal information with the following parties:

Service Providers

• Booking systems: Little Hotelier, SiteMinder, or other property management systems
• Payment processors: Secure payment gateways for credit card processing
• Email services: For sending booking confirmations and communications
• Analytics providers: Google Analytics and similar services (anonymized data)
• IT support: Website hosting, maintenance, and technical support providers

Online Travel Agents (OTAs)

When you book through platforms like Booking.com, Airbnb, or Expedia, we share necessary booking information with these platforms to facilitate your reservation.

Legal and Regulatory Authorities

We may disclose your information if required by law, court order, or to:

• Comply with legal obligations
• Protect our rights or property
• Prevent fraud or security threats
• Respond to emergency situations

Business Transfers

If we sell, merge, or transfer any part of our business, your information may be transferred to the new owner as part of that transaction.

Your Privacy Rights

Under Australian privacy law, you have the following rights:

Access Your Information

You can request access to the personal information we hold about you. We will provide this information within a reasonable timeframe, usually within 30 days.

Correct Your Information

If your personal information is inaccurate, incomplete, or out of date, you can request that we correct it. We will take reasonable steps to ensure your information is accurate and up to date.

Withdraw Consent

You can withdraw consent for:

• Marketing communications: Unsubscribe from emails or contact us to opt out
• Cookies: Adjust your browser settings (see our Cookie Policy)

Request Deletion

In certain circumstances, you may request that we delete your personal information. However, we may need to retain some information for:

• Legal or regulatory compliance
• Completing transactions you've initiated
• Resolving disputes or enforcing agreements
• Security and fraud prevention

Lodge a Complaint

If you believe we have breached your privacy, you can lodge a complaint with us (see contact details below). If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Email: enquiries@oaic.gov.au

Data Security

We take the security of your personal information seriously and implement appropriate technical and organizational measures to protect it from:

• Unauthorized access or disclosure
• Accidental loss or destruction
• Misuse, interference, or modification

Security Measures Include:

• Secure servers: SSL/TLS encryption for data transmission
• Payment security: PCI DSS compliant payment processing (we do not store complete credit card details)
• Access controls: Limited employee access to personal information based on job requirements
• Staff training: Regular privacy and security training for our team
• Regular reviews: Ongoing assessment and improvement of security practices

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.

Typical Retention Periods:

• Booking records: 7 years (for accounting and tax purposes)
• Marketing consent: Until you withdraw consent or become inactive (typically 2-3 years)
• CCTV footage: 30-90 days (unless required for investigation)
• Website analytics: 26 months (Google Analytics default)
• Correspondence: As long as relevant for customer service or legal purposes

After the retention period expires, we securely delete or anonymize your personal information.

Third-Party Websites

Our website may contain links to third-party websites, including:

• Social media platforms (Facebook, Instagram, etc.)
• Tourism websites
• Partner organizations
• Online booking platforms

We are not responsible for the privacy practices of these third-party websites. We encourage you to review their privacy policies before providing any personal information.

Children's Privacy

Our services are not directed to children under 18. We do not knowingly collect personal information from children except as part of family bookings where a parent or guardian provides the information.

If you believe we have inadvertently collected information from a child, please contact us immediately so we can delete it.

International Data Transfers

Some of our service providers (such as cloud hosting or analytics services) may be located overseas, including in the United States and European Union. When we transfer your information overseas, we ensure that:

• The recipient is subject to privacy laws substantially similar to Australian privacy laws, or
• We have contractual arrangements in place to protect your information

By using our services, you consent to these international transfers.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes in our business practices
• New legal or regulatory requirements
• Technological developments
• Improvements to our services

Any significant changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically to stay informed about how we protect your information.

Your continued use of our services after any changes indicates your acceptance of the updated policy.

Additional Information

Cookie Policy

For detailed information about how we use cookies and similar technologies, please see our Cookie Policy.

Terms and Conditions

This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern your use of our services and website.