Privacy Policy

Introduction

Core-petal is committed to protecting your personal information and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website and services.

By using our website or engaging our services, you acknowledge that you have read and understood this Privacy Policy.

Information We Collect

We may collect the following types of personal information:

• Contact Information: Name, email address, postal address when you submit enquiries or make bookings
• Booking Details: Tour preferences, dates, group sizes, and special requirements
• Technical Data: IP address, browser type, device information, and browsing patterns when you visit our website
• Communication Records: Records of correspondence when you contact us

How We Use Your Information

We use your personal information for the following purposes:

• Processing and managing tour bookings
• Responding to enquiries and providing customer support
• Sending booking confirmations and tour information
• Improving our website and services
• Complying with legal obligations
• Analysing website usage to enhance user experience

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to fulfil your booking requests
• Legitimate Interests: Improving our services and website functionality
• Consent: Where you have provided explicit consent for specific uses
• Legal Compliance: Where required by Australian law or regulation

Data Sharing

We do not sell your personal information to third parties. We may share your data with:

• Partner heritage sites and venues to facilitate your tour
• Service providers who assist in operating our business (payment processors, email services)
• Legal authorities when required by law

All third parties are contractually obligated to protect your data and use it only for specified purposes.

Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected. Booking records are retained for seven years to comply with Australian business record-keeping requirements. You may request deletion of your data at any time, subject to our legal obligations.

Your Rights

Under applicable privacy laws, you have the right to:

• Access your personal data held by us
• Request correction of inaccurate data
• Request deletion of your data (where legally permissible)
• Object to certain processing activities
• Withdraw consent where processing is based on consent
• Lodge a complaint with the Office of the Australian Information Commissioner

Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure servers, and restricted access to personal data.

International Transfers

Your data is primarily stored and processed in Australia. If we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated revision date. We encourage you to review this policy regularly.

Contact Us

For privacy-related enquiries or to exercise your rights, please contact:

Privacy Officer
Core-petal
42 Heritage Lane
Sydney NSW 2000
Australia

Email: [email protected]