Privacy

PRIVACY POLICY

1. Introduction

Travel Beyond Group (TBG) understands the importance of, and is committed to, protecting the privacy and confidentiality of your personal information. We comply with the Privacy Act 1988 (Privacy Act). We are bound by the Australian Privacy Principles (APPs), which regulate how we may collect, use, disclose and store personal information, and how our clients (individuals for whom we arrange travel products and services) (‘you’) may access and correct personal information we hold about you.

TBG complies with applicable laws in the jurisdictions in which it operates.  It is in our legitimate business interests to provide you with the Services which use the personal data provided to us for the purposes described herein.

2. Information We May Collect and Hold

The kinds of Personal Information we collect from you may vary depending upon the nature of the travel services you have engaged us to provide. We collect information about you that we reasonably need for our business functions and activities and which is required by law. Generally, we will collect the following kinds of personal information concerning an individual:

1. Your name, address and contact details;
2. Company details (if applicable);
3. Your date of birth;
4. Your gender;
5. Your nationality;
6. Your financial and credit information for payment purposes;
7. Travel-related details including passport details, frequent flyer details, drivers’ licence, travel preferences and other similar information;
8. Your employment details including in some cases superannuation information (in the case of group travel packages facilitated by your employer);
9. Personal identification documents such as your driver’s licence or birth certificate;
10. Your passport details;
11. Information concerning your visa status or information reasonably required to assist you in obtaining a visa in a jurisdiction other than Australia; and
12. Where you or your representative have engaged us to assist you in obtaining travel insurance or other similar services, we may also collect and hold sensitive information regarding your personal health and medical history.

3. How We Collect and Hold your Personal Information

We will collect the majority of your Personal Information from you directly, usually through telephone, email or through your completion of a form or any combination of these. We may also however obtain your Personal Information from:

1. Your employer or colleagues, where a travel package is being booked by them on your behalf;
2. Couriers;
3. In the case of prospective employees, recruitment agents;
4. Third parties who hold mailing lists to which you have subscribed;
5. Third party service providers such as airlines or accommodation providers where your booking is required to be made or amended by us on your behalf.
6. Our service providers may provide us with your personal information from websites, social media sites, mobile, and other technology-based sources.

We will obtain your consent before contacting any third party for the purposes of collecting your Personal Information.

4. Do You have to provide us with your personal information?

You can deal with us anonymously (without giving us your name and contact details) or by using a pseudonym (a name that does not include your real name, for example an email address or a user name that you use in an online forum (nickname)).

If you choose to deal with us anonymously or using a nickname, we can only give you general information about our products and services.  We cannot:

1. Give you information about travel you (or your employer) may have booked or deal with a complaint you may have
2. Provide you with a service or deliver a product or service to you at an address

You can deal with us using a nickname together with your real name and contact details. If you choose to deal with us in this way, we may collect your personal information together with your nickname. When you identify yourself to us using your nickname only, we can deal with you only as described above. We may ask you to provide proof of your identity if you use a nickname.

5. The Purposes for which we Collect, Hold, Use and Disclose your Personal Information

We collect, hold, use and disclose your Personal Information for the following purposes:

1. Providing travel, accommodation and event services to you, your business or your employees;
2. Providing you with information about other services that we, our related entities and other organisations that we have affiliations with, offer that may be of interest to you;
3. Facilitating our internal business operations, including the fulfillment of any legal requirements;
4. Documenting our relationship with current and prospective employees; and
5. Analysing our services and client needs with the view of developing new or improved services.

6. How you May Access or Seek the Correction of Personal Information Held by Us

You may access or seek the correction of any Personal Information held by us by contacting the consultant acting on your behalf in any of your current bookings with us.

We will deal with your request for such access within a reasonable time. If we refuse access, we will provide you with a written notice which sets out the reasons for the refusal and the relevant provisions of the Privacy Act that we rely on to refuse access. We may recover reasonable costs in relation to a request for access to personal information.

7. How You May Complain about a Breach of the APP’s by Us

If at any stage you feel we have breached the APP’s in our collection, use, disclosure, storage, security, management or disposal of your Personal Information, you may lodge a complaint in writing using the contact details available on our website www.travelbeyond.com.au.

We are committed to protecting your privacy and as such we treat all complaints very seriously. Our Managing Director will address your concerns and contact you to ensure you are satisfied with our proposed resolution. If we do not respond to you within 30 days or you are not satisfied with our response, you are entitled to lodge a “Privacy Complaint Form” with the Office of the Australian Information Commissioner. Copies of this form and details relating to lodgement are available at www.oaic.gov.au/privacy/making-a-privacy-complaint.

8. Our Disclosure of Your Personal Information

We will not use or disclose your personal information for a purpose other than:

1. A purpose set out in this privacy policy (primary or secondary purpose above);
2. A purpose you would reasonably expect;
3. A purpose required or permitted by law;
4. A purpose otherwise disclosed to you to which you have consented;

Depending on the circumstances, we may disclose your personal information to other people including one or more of the following:

1. Service providers including travel providers, agents, contractors, IT, security, legal, accounting, researchers, credit providers, credit reporting bodies, marketers, insurers, financial institutions and others;
2. Our affiliates and related companies;
3. Government, regulatory and law enforcement authorities, where we are required to or permitted to by law;
4. Your employer, if you are an employee of our business client; and
5. To prevent or investigate any fraud or crime (or a suspected fraud or crime).

We take reasonable steps to ensure that these organisations are bound by confidentiality, privacy and security obligations with respect to the protection of your personal information.

Trans-border information disclosure

We may disclose your personal information to an overseas service provider, for example a travel provider, a travel product or service provider, or a customer information call centre. Our overseas travel service providers may be located in any country that you travel to.  If it is not practicable or reasonable for us to gain your consent to disclose your personal information to an overseas service provider, we will take reasonable steps to notify you of the specific countries where we disclose your personal information. We will take reasonable steps to ensure that the overseas services provider is bound by privacy, confidentiality and security obligations. If you have any specific questions about where or to whom your personal information will be sent, please contact us using the contact details available at our website www.travelbeyond.com.au .

9. Countries in Which Overseas Recipients Are Likely to be Located

Given the nature of our business, we disclose Personal Information to a broad array of international destinations. We will only disclose your Personal Information to third parties in the country or countries to which you will be travelling during your booking made by us on your behalf. If we intend to disclose your Personal Information to parties outside of this jurisdiction or their jurisdictions, we will obtain your consent prior to such disclosure.

10. Our Websites

We collect website activity statistics such as the number of visitors, pages visited, time and date of visit and where you accessed our website from, so that we can make informed decisions relating to improving our website and the services we deliver.  This information is anonymous and does not identify a person. When you visit our website, a cookie is placed on your computer.  The cookie does not contain personal information that can identify you but may contain information about the page you visited on our website.  If you do not wish for this to occur, you can remove cookies from your computer, by following the standard procedures applicable to your internet browser.

11. Information Security

We hold your personal information in both paper-based and electronic files. We take reasonable steps to ensure that your personal information which is held by us is protected from loss and misuse, and from unauthorized access, modification, disclosure and interference.  We maintain various physical, electronic and managerial security systems and procedures to protect your personal information, and regularly review these systems and procedures.  TBG has an Information Security Policy in place and is PCI compliant.  While Travel Beyond Group does not have the ability to provision, harden, secure, and deploy another organisation’s system components, Travel Beyond Group follows PCI DSS due-diligence best practices as mandated in Requirement 12 of the Payment Card Industry Data Security Standards by obtaining all relevant information ensuring that such systems are safe and secure.

12. Review

This policy will be reviewed every three (3) years or sooner in the event of a change in privacy legislation.