Privacy Policy

Privacy Policy TRVL Australia Pty Ltd ACN 682 834 153 (TRVL) is committed to complying with the Australian Privacy Principles as contained in the Privacy Act 1988 (Cth) (Privacy Act). The purpose of this policy is to inform individuals about the manner in which TRVL collects and manages personal information. Copies of this policy will be made available free of charge to any person who requests it. What is personal information? Personal information is defined in the Privacy Act to mean information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not, and whether the information or opinion is recorded in a material form or not. Personal information can include sensitive information. Sensitive information is defined in the Privacy Act as information or an opinion about a person's race, ethnic origin, political opinions, membership of political associations and trade associations, religious or philosophical beliefs, sexual orientation or practices, criminal record, health information, genetic information about an individual that is not otherwise health information, biometric information that is used for the purpose of automated biometric verification or biometric identification and biometric templates. What kinds of personal information are collected and held by TRVL? Examples of the kinds of personal information that may be collected by TRVL include: •name and username; •date of birth; •email address and other contact details such as street address, postal address and telephone number; •gender, interests, preferences and location; •photographs, video, voice recordings, text, messages and other identifying content provided through, or uploaded to, the TRVL platform; •details of any purchases or bookings you make through the TRVL platform; •information about your activity on the TRVL platform; •information about the IP address and device that you use to access the TRVL platform; •identification documents such as passport or driver's licence; •a person's employer and/or place of business; and •information provided as part of an application for employment including education, experience and references. How does TRVL collect and hold personal information? TRVL collects personal information from: •individuals directly, for example when you register for an account on the TRVL platform, communicate with us through our platform or email or telephone our staff; •content provided through, or uploaded to, the TRVL platform by you or other users of the platform; •our suppliers, contractors and related entities; and •from public records and other publicly accessible sources. Upon request, we will provide you with the source of your personal information, unless it is impracticable or unreasonable to do so. By using the TRVL platform and agreeing to this Privacy Policy, you acknowledge and expressly consent to TRVL collecting, de-identifying, aggregating, and commercialising your personal information and usage data, including but not limited to location, behavioural, and preference-based data, for the purpose of monetization through sale, licensing, or disclosure to third parties. This may include data brokers, advertisers, analytics providers, research institutions, and other commercial partners. We may disclose aggregated, anonymised, or otherwise de-identified information derived from user activity to selected third parties for purposes which may include, but are not limited to, business insights, service improvement, commercial partnerships, or research and analysis. Such disclosures may occur on a one-off or ongoing basis, and may involve multiple parties across various industries. Such disclosure may be for the purposes of market intelligence, commercial analytics, trend forecasting, targeted marketing, and the development of third-party products or services. TRVL ensures that commercially disclosed data is either: (a) fully de-identified in accordance with prevailing legal standards; or (b) only disclosed with your express consent where personally identifiable data is involved. You retain the right to opt out of commercial data use at any time by managing your privacy preferences through the app’s settings or by contacting us directly. Cookies We may use "cookies", traffic measurement software or similar technologies to collect data. Most cookies will only collect de-identified personal information however some cookies do collect personal information. For example if you click "Remember me" when you log in to our website, a cookie will store your username. Cookies used on our platform can collect the following information from users: •Browsing activity •Preferences •Login details •Personal data •Device information If you do not want information to be collected through the use of cookies or traffic measurement software, your device and/or browser may enable you to delete or "turn off" cookies or some the measurement software features. However some or all parts of our platform may not function correctly if such features are disabled. The purposes for which TRVL collects, holds, uses and discloses personal information. TRVL may collect, hold, use and disclose personal information for the following purposes: •to operate the TRVL platform; •to supply our products and services and to conduct our other business activities; •to facilitate the delivery of any third party products or services that you may purchase through the TRVL platform; •to provide you with information about products or services offered by us or third parties; •to respond to requests and inquiries; •to contact individuals, via email, regular mail, telephone or otherwise; •to provide you with information that we believe may be of interest to you or that you have requested; •direct marketing and business development; •to develop and improve our platform, products, services and content; •to protect our rights and property; •for security and occupational health and safety purposes; •to investigate or report suspected unlawful activity; •to protect someone's life, health, safety or welfare; •to comply with a law or regulation, or a court order or other legal process. TRVL never uses any sensitive information for direct marketing purposes. Disclosure to other parties TRVL may disclose personal information to: •other users of our platform (when you voluntarily provide information via the platform for others to see); •our related entities and affiliates; •contractors and partners we use to support our business (including IT support and other IT services, payment processors, marketing and analytics services and financial institutions); •independent suppliers of goods or services that you book or purchase through our platform; •third party advertisers of goods or services on our platform; •our lawyers, accountants and other business advisers; •law enforcement officers, regulators, courts and government agencies - if required by law or regulation, court order or other legal process, to assist in the prevention or detection of crime, to improve the safety of our platform, in order to protect TRVL's or any user of the platform's rights or property, or if necessary to prevent a threat to any person's life, health or safety; and •to any purchaser or prospective purchaser of our business including in conjunction with a corporate sale, merger, dissolution, acquisition or other similar event. Disclosure outside of Australia Our servers are hosted in India. The TRVL platform is accessible globally and accordingly any personal information that you choose to share with other users may be disclosed anywhere in the world. You consent to any disclosure of your personal information outside of Australia on the understanding that if the overseas recipient handles the personal information in breach of the Australian Privacy Principles, the entity will not be accountable under the Privacy Act, and you will not be able to seek redress under the Privacy Act. The overseas recipient may not be subject to privacy obligations or any principles similar to the Australian Privacy Principles. Individuals may not be able to seek redress in some overseas jurisdictions, and overseas recipients may be subject to a foreign law that could compel the disclosure of personal information to a third party, such as an overseas authority. Regional data protection rights European Union (EU) Users In accordance with the General Data Protection Regulation (GDPR), users residing in the EU have specific rights regarding their personal data. These rights include, but are not limited to, the right to access, correct, update, or request the deletion of your personal information. You also have the right to object to or restrict the processing of your data in certain circumstances, including for direct marketing purposes. To exercise these rights, or if you have any concerns regarding the processing of your personal data, please contact us using the details provided below. United States (U.S.) Users, Including California Residents For U.S. users, including California residents, we comply with applicable privacy laws, including the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). Under these laws, you may have the right to request information about the categories and specific pieces of personal data we collect, as well as how we use and share that data. California residents also have the right to request that we delete your personal data, and you may opt-out of the sale of your personal information (if applicable). To exercise these rights or for any inquiries related to your data, please contact us at the details below. Canada (CA) Users In compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA), users in Canada have the right to access their personal information that we hold and request its correction if it is inaccurate. You also have the right to withdraw your consent to the processing of your personal data, subject to legal or contractual restrictions. To exercise any of these rights, please contact us using the contact information provided below. Government related identifiers TRVL does not use any government related identifiers, such as passport number or driver's licence number, as its own identifier of any individual. TRVL will not use or disclose any government related identifiers other than in accordance with the Privacy Act. Data integrity and security TRVL takes reasonable steps to ensure that the personal information that it collects, uses and discloses is accurate, up-to-date and complete. We encourage individuals to assist us with this by contacting us if you are aware that any of your personal information is not accurate, up-to-date or complete. TRVL takes reasonable steps to protect personal information it holds from misuse, interference and loss, as well as unauthorised access, modification or disclosure. When TRVL no longer needs personal information for any purpose for which the information may be used or disclosed under the Australian Privacy Principles, we take reasonable steps to destroy the information or ensure that it is de-identified, except if the information is part of a Commonwealth record or TRVL is required by law or a court or tribunal order to retain the personal information. Sensitive information If you provide us with sensitive information about other individuals, such as sexual orientation or health information, please ensure that the individual or the individual's representative is aware of the disclosure and that he or she consents to the disclosure to TRVL as well as to the handling of their personal information in accordance with this policy. Otherwise you must not provide us with any sensitive information about other individuals. De-identified data You consent to us using and disclosing your de-identified data (information that no longer identifies you) for any purpose including without limitation statistical analysis, product or service development, marketing and business planning or any other commercial purpose. We undertake technical measures to ensure that this data cannot be associated back to you. Automated decision making systems No personal information collected by us will be used by us in conjunction with the operation of a computer program or artificial intelligence to make, or do a thing that is substantially and directly related to making a decision that could reasonably be expected to significantly affect the rights or interests of an individual. Opting out of direct marketing communications To opt-out of push notifications from TRVL turn of notifications in device settings. You must cease using our platform if you no longer wish to receive advertisements or marketing communications through our platform. To otherwise opt out of receiving direct marketing communications from us, or to request that we do not disclose any of your personal information for the purpose of facilitating direct marketing by other organisations, please notify our Privacy Officer in writing and we will remove you from our marketing database. The contact details for our Privacy Officer are provided below. Access and correction Individuals have a right to request access to their personal information and to request its correction. To do so, please contact TRVL's Privacy Officer. Contact details are provided below. TRVL does not impose a charge for making a request for access, however we may charge for reasonable administrative costs incurred in providing access. TRVL encourages individuals to advise our Privacy Officer if your personal information requires correction or updating. TRVL does not impose any charge with respect to requests for correction or updates. Before correcting or providing access to personal information in response to a request, TRVL will require your identity to be confirmed. Requests for access or correction may be refused upon the grounds contained in the Privacy Act. If we refuse to provide access, or to correct personal information, TRVL will provide you with reasons for the refusal. Complaints A person who wishes to complain about a breach of the Australian Privacy Principles by TRVL should contact our Privacy Officer. TRVL will not impose any charge for making a complaint, or for dealing with the complaint. Once a complaint has been lodged, our Privacy Officer will acknowledge its receipt to you as soon as possible. We will do our best to ensure that our investigation is completed, and a decision on your complaint is communicated to you, within 30 days from our receipt of the complaint. We will contact you if we need more time. You may also contact the Australian Information Commissioner: Office of the Australian Information Commissioner GPO Box 5218 SYDNEY NSW 2001 Telephone: 1300 363 992 Fax: 02 9284 9666 Website: www.oaic.gov.au TRVL' Privacy Officer TRVL's Privacy Officer's contact details are: The Privacy Officer TRVL Australia Pty Ltd 17 Pavonia Heights South Lake WA 6164 Australia Email: brent@trvl.net.au Status of this Policy This policy may be varied by TRVL from time to time. This policy does not create any legally enforceable obligations on the part of TRVL, and does not grant to any individual any rights beyond the rights created under the Privacy Act. This policy was last updated on 8/5/2025.