WALKDAYS Privacy Policy
WALKDAYS TRAVEL CO PTY LTD (ACN 702 161 779), trading as WALKDAYS, respects your privacy. This policy explains what personal information we collect, why we collect it, who we share it with and what control you have over it.
We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth). We do this as a matter of policy whether or not the small business exemption applies to us.
1. What we collect
When you book or enquire: name, email address, postal address, phone number, date of birth, country of residence, passport details where a supplier requires them, emergency contact details, travel insurance details, and the preferences you tell us about.
Information about other travellers: the person who makes a booking gives us the name, date of birth and contact details of everyone travelling on it. If you book for other people, you confirm that they know you are giving us their details and that they have had a chance to read this policy. Where a traveller is aged 12 to 17, the accompanying parent or guardian gives us their details and signs for them.
Payment details: we take payment by card and by electronic funds transfer. Card payments are handled by our bank or payment provider. We do not store full card numbers.
Health, fitness and dietary information: the fitness declaration each traveller signs before we take a deposit, and the medical conditions, injuries, allergies, medication needs, mobility limitations and dietary requirements you give us on our Pre Departure Details form. The health and dietary part is sensitive information. We collect it only with your consent, only where we need it to run your trip safely, and we hold it in confidence.
When you use our website: IP address, browser and device type, pages viewed, referring site and similar analytics information, collected through cookies and analytics tools.
When you contact us or subscribe: the content of your enquiry and your email address.
We do not collect sensitive information beyond what is described above.
2. Why we collect it
- to quote for, confirm and deliver your walking holiday
- to make reservations with hotels, luggage transfer operators and other suppliers
- to keep you safe on your trip and respond in an emergency
- to process payments and issue invoices and receipts
- to answer your questions and handle complaints
- to send you trip information you have asked for
- to send you marketing about our trips, where you have opted in
- to improve our routes, website and service
- to meet our legal and tax obligations
If you do not give us the information we need, we may not be able to confirm or deliver your booking.
3. Who we share it with
We share your personal information with:
- hotels and accommodation providers on your itinerary, to hold your reservation
- luggage transfer and transport operators, to deliver your bags and any included transfers
- activity and restaurant operators, where we book something at your request
- payment processors and our bank, to take payment by card or electronic funds transfer
- our software providers, including our website host, booking system, email and customer records systems
- our professional advisers and insurers, where necessary
- emergency services, medical providers and your emergency contact, if you need help while travelling
- government agencies, where the law requires it
We give suppliers only what they need. We do not sell, rent or trade your personal information.
4. Overseas disclosure
Our trips run in Australia, so most suppliers are Australian. Some of the software we use to run our business stores information on servers outside Australia, including in the United States and the European Union. Our website is built and hosted on Wix, and we use Google Analytics. Both store data outside Australia. Where we disclose your information to an overseas recipient, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles.
If you are in the United Kingdom or the European Economic Area, you also have rights under the UK GDPR or the GDPR, including rights of access, correction, erasure, restriction, objection and data portability. Our lawful bases for processing are performance of your booking contract, your consent for marketing and for health information, and our legitimate interests in running and improving our business. To exercise those rights, contact us using the details in section 9.
5. Marketing
We only send marketing emails to people who have opted in. We do not add you to our mailing list simply because you made a booking or an enquiry. Every marketing email has an unsubscribe link and we act on unsubscribes promptly. Unsubscribing does not stop the operational messages we need to send about a booking you have made.
6. Cookies and analytics
Our website uses cookies to make the site work, remember your preferences and understand how the site is used. Our website is hosted on Wix, which sets its own cookies. You can block or delete cookies in your browser settings, though some parts of the site may not work as well if you do.
We use Wix Analytics and Google Analytics to understand site traffic. We do not run advertising pixels and we do not use your browsing on our site to target advertising to you elsewhere.
7. Security and retention
We take reasonable steps to protect personal information from misuse, loss, and unauthorised access, modification or disclosure, including access controls, encryption in transit and vetting of the systems we use. No online system is completely secure.
Our booking and pre departure forms are completed and returned by email. Ordinary email is not a fully secure channel. If you would rather not send health information that way, tell us and we will arrange another method.
We keep booking records, signed booking forms and signed declarations for at least 7 years to meet tax and legal requirements and to show what was agreed. We delete or de identify health and dietary information within 12 months of the end of your trip, unless you ask us to keep it for a future booking. Marketing records are kept until you unsubscribe.
8. Access, correction and complaints
You can ask us for a copy of the personal information we hold about you, and ask us to correct anything that is wrong. Write to us at info@walkdays.com.au. We will respond within 30 days. We do not charge for access requests.
If you think we have mishandled your personal information, tell us first and we will investigate and respond within 30 days. If you are not satisfied you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
9. Contact us
WALKDAYS TRAVEL CO PTY LTD
11 Wallace Street, Willoughby NSW 2068, Australia
10. Changes to this policy
We may update this policy. The current version is always on our website with the date it was last updated. If we make a significant change we will tell customers with active bookings by email.