What Information We Have and Where We Get It

“Personal Information” means any information or an opinion about an identified individual, or individual who is reasonably identifiable.

“Sensitive Information” means any personal information about a person’s racial or ethnic origin, political opinion, membership of a political association, religious beliefs or affiliations, philosophical beliefs, membership of a professional or trade association, membership of a trade union, sexual preferences or practices, criminal record or health information.

Personal Information includes any information that relates to you, identifies you personally or could be used to identify you, such as your user ID, name, email address, phone number, address and payment account number. The types of Personal Information that we may collect about you include, but are not limited to those described below:

We collect information you provide us directly
We collect information you share with us when you use our Services. For example, when you book a rail journey, touring, cruising, dining, attraction or accommodation experience through our Sites or by calling us, we may ask your name, phone number, street address, email address, and payment information. Similarly, when you fill out a booking form with us on our Site, we may collect your name, email, phone, company name and party information.

We may also collect your Personal Information in connection with you undertaking a recruitment process with us and/or your employment at Journey Beyond Group.

As a customer of Journey Beyond Group, we may collect various types of information about you to provide the Services. This includes your identification information, information relevant to your booking (such as dietary requirements), details relating to your use of our facilities and systems, your vehicle registration number, and other information necessary to provide you with our Services.

If we are dealing with you regarding a contract as a business partner or contractor, we may collect and hold information relating to your business details and experience, financial and banking details, qualifications, referees, other credit and finance-related information and other information relevant to our relationship with you.

We collect information from you passively
We may collect information about your use of the Services. For example, we may collect information that your browser sends whenever you visit our Sites or when you access the Sites by or through a mobile device (“Usage Data”). This Usage Data may include (without limitation) information such as your computer’s Internet Protocol address (e.g. IP address), domain name, browser type, browser version, search items, URLs, clickstream data, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, the referring and exit pages, unique device identifiers and other diagnostic data. When you access the Service with a mobile device, this Usage Data may include information such as the type of mobile device you use, your mobile device unique ID, the IP address of your mobile device, your mobile operating system, the type of mobile Internet browser you use, unique device identifiers and other diagnostic data.

We may also use and store information about your location if you give us permission to do so (“Location Data”). We use this data to provide features of our Service, to improve and customize our Services. You can enable or disable location services when you use our Services at any time by way of your device settings.

We collect information about you from our Affiliates and Subsidiaries
We may obtain your Personal Information from a company that is part of the Journey Beyond Group.

We collect information about you from third parties
For example, if you use a social media feature with our Sites or post to a social media platform, the social media site will give us some information about you.

If we collect information about you from another person, including a family member, friend, or travel agent, who seeks to use our Services on your behalf, that person will be asked to provide us with the same personal information that we would normally collect from you directly to complete your booking.

We may collect personal information from about you where another person has nominated as their next of kin or emergency contacts. We collect this information to ensure we can contact someone on their behalf in the event of an emergency or urgent operational requirement.

We may collect information about you from a colleague of yours, if you are a contact person for a business partner or contractor with whom we deal.

In each of the above cases, we consider that person to have your consent to provide us with your Personal Information for relevant purposes described in the Policy and for that information to be handled in accordance with the Policy, unless and until we are advised otherwise.

In some instances, we may collect Personal Information from third parties including our promotional partners, business partners, credit reporting agencies, third-party businesses (for example, in the case of business referrals) and law enforcement authorities or other government bodies.

We collect information about you via image and audio recording
We may record your image on our CCTV cameras, on our security officers’ body-worn video equipment or using other surveillance when you use our Services.

We may record your voice and conversations (for example, via equipment in and around our drivers’ cab area in our coaches). Additionally, we use audio recordings and transcriptions of our conversations when you phone us.

Your image, voice and likeness may be recorded during our Services (for example, photography or filming at our accommodation or experiences) and you hereby consent to this recording, including of any child/ren (i.e. under the age of 18) in your care. However, you may notify us prior to your journey if you do not consent to the recording of your image, voice or likeness, or that of any children in your care.

How We Use Your Information and Why

We will not ask you to disclose Sensitive Information (other than health information) to us. If Sensitive Information (other than health information) is disclosed to us, we will take reasonable steps to de-identify the data or destroy it where we can. Otherwise, Sensitive Information will be dealt with in accordance with this Privacy Policy.

We may collect information about your health, where necessary for safety or medical reasons, to facilitate provision of your access to our products and Services (for example, wheelchair access), and for insurance purposes. Specifically, we may collect data about any health conditions you have and your dietary requirements.

We use information to provide you with products and services
We will use your Personal Information to create a customer profile or account for you, provide information or deliver Services that you request and to allow you to participate in interactive features of our Service when you choose to do so (including competitions and promotions). If the applicable information is to be provided or Service is to be performed by a third-party, then we will disclose the applicable information to the third-party providing the information or performing applicable Services. Your information may be available or provided to third-party service providers and contractors that are contractually obligated to protect your information as disclosed in this Policy.

We use information to update you on changes to our services
We will send you administrative or account-related information to notify you about changes to our Services. Such communications may include information about Policy updates, confirmations of your transactions, security updates or other relevant transaction-related information. We process your contact information to send you such communications. Service-related communications are not promotional in nature. You are not able to unsubscribe from such communications, otherwise you may miss important developments relating to your account or the Services.

We use information to respond to your requests or questions
We collect any information that you provide to us when you contact us, such as with questions, concerns, feedback, disputes or issues. Without your Personal Information, we cannot respond to you or ensure your continued use and enjoyment of the Services.

We use information to send you Marketing and Promotional Communications
We may use your Personal Information to contact you with newsletters, marketing or promotional materials, competitions, promotions and offers including from other brands in the Journey Beyond Group or third parties that may be of interest to you based on:

• • your participation in our travel club or membership program;
  • the Services that you have already purchased or enquired about; or
  • your interactions with us,

unless you have opted not to receive such information.

You may opt-out of receiving any, or all, of these emails from us by following the unsubscribe link or the instructions provided in any email we send. You may opt-out of our SMS/texting program by messaging STOP to any SMS message we send. We will not purchase consent, or sell, rent or share consent to opt-in to our mobile SMS/texting program.

We use information to improve our services
We will use your information to conduct market, consumer and other research and gather analysis or valuable information so that we can improve our Services and to detect, prevent and address technical issues. We may also use your information to monitor the usage of our Services including without limitation search terms entered, pages visited and documents viewed.

We may share pseudonymised (or de-identified) individual and aggregate data from the information we have collected for research and analysis purposes.

We use information to enforce compliance with our policies

When you access or use our Services, you are bound to our Terms of Use which may be found on the Site for the Services and the applicable booking Terms and Conditions whihc may also be found on the Site for the Services or otherwise provided to you. To ensure you comply with them, we process your Personal Information by actively monitoring, investigating, preventing and mitigating any alleged or actual prohibited, illicit or illegal activities on our Services.

We also process your Personal Information to: investigate, prevent or mitigate violations of our internal terms, agreements or policies; enforce our agreements with third parties and business partners; and, as applicable, collect fees based on your use of our Services. We cannot perform our Services in accordance with our terms, agreements or policies without processing your Personal Information for such purposes.

We use information to market our business
Images and audio recorded during our Services may be used for marketing and promotional purposes. You agree that we have unrestricted use of the images and audio for these purposes in all mediums, including, but not limited to, web, printed collateral, social media and other media. You acknowledge that you will not be entitled to any payment or other compensation for the use of your image and/or voice.

If you do not consent to this use of your image and/or voice (or that of child/ren in your care), please notify us prior to the commencement of your journey.

We use information to maintain legal and regulatory compliance
Our Services are subject to certain laws and regulations which may require us to process your Personal Information. For example, we process your Personal Information to pay our taxes, to fulfill our business obligations, ensure compliance with employment and recruitment laws or as necessary to manage risk as required under applicable law. Without processing your Personal Information for such purposes, we cannot perform the Services in accordance with our legal and regulatory requirements.

We use information for security and safety purposes
We may use your information for security, safety, operational, and risk management purposes (such as security monitoring and emergency and incidents monitoring, investigation and reporting). There may be instances where we need to provide your information to an insurer or law enforcement authority, for example your contact details if you witnessed an accident, or CCTV footage containing your image.

We use information for specific purposes notified to you
We may use your Personal Information for any specific purposes notified to you in a Data Collection Notice or other collection statement provided to you at the time of collection of your information.

Who We Share Your Data With and Why
We may disclose your Personal Information with partners and other third parties as set out below.

We will share information within the Journey Beyond Group family of companies
Journey Beyond Group is a corporate organisation that has many legal entities, business processes, management structures and technical systems. We may share your Personal Information with this organisation in order to provide you with the Services and take actions based on your request.

We will share information with third parties who perform services on our behalf
We may employ third-party companies and individuals to facilitate our Services (“Service Providers”), provide the Services on our behalf, perform Service-related services or assist us in analysing how our Services are used. These third parties have access to your Personal Information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

We may share information with third-party owners or operators
We may share information with:

• • the hotels that we operate that are owned by third parties; and
  • third parties who operate hotels that we own.

For example, if you book accommodation in either of the above circumstances, your Personal Information may be shared with the relevant third party to facilitate your stay and enable the owner/operator of the hotel to manage its contractual relationship with you and comply with its legal obligations.

We have communicated the principles set out in this Policy with the respective owners and operators of the hotels and will take reasonable steps to ensure that the hotels comply with the applicable data protection laws and this Policy in relation to any processing of your Personal Information.

We may share information with third-party ticket providers
We may share information with other third-party ticket providers who are providing Services.  For example, if you purchase a bundle package that includes offerings from a company outside the Journey Beyond Group (“Ticket Provider”), your Personal Information may be shared to facilitate your purchase.  Once personal information is shared with a Ticket Provider, the information becomes subject to the Ticket Provider’s privacy practices.

We may share information if any part of our business is involved in a merger or acquisition
If the Journey Beyond Group is involved in a merger, acquisition, or asset sale (each a “transaction”) your Personal Information may be disclosed to evaluate and facilitate the transaction and/or transferred as a business asset. Where required, we will provide notice when your Personal Information is transferred or disclosed in relation to a transaction and becomes subject to different privacy policy protections.

We may share information if we think we have to in order to comply with the law or to protect ourselves.
Under certain circumstances, Journey Beyond Group may be required or permitted to disclose your Personal Information pursuant to applicable law or in response to valid requests by law enforcement public authorities (e.g. a court or a government agency) or our insurers. Journey Beyond Group may disclose your Personal Information in the good faith belief that such action is necessary or prudent to:

• • comply with a legal obligation;
  • protect and defend the rights or property of Journey Beyond Group;
  • prevent or investigate possible wrongdoing in connection with the Service;
  • protect the personal safety of users of the Service or the public;
  • provide required information to our insurers; and
  • protect against legal liability.

We may share information with third parties for marketing and promotional reasons
We may share your Personal Information with select third-party promotional partners whose products and services may be of interest to you, based on your interactions with us. They may send you newsletters, special offers or other marketing material in accordance with their privacy policy.

Looking After Your Information

How do we hold your personal information

The security of your information is very important to us.

We take reasonable steps to make sure that the Personal Information we collect, use or disclose is accurate, complete and up to date, and to protect the information in our systems from misuse, interference, loss, and any unauthorised access, modification or disclosure. If we no longer require your information, and we are legally permitted to, we will take all reasonable steps to destroy or de-identify the information.

For CCTV recordings, footage is held for no longer than two months, unless Journey Beyond is required to retain it for the purpose of an investigation or to comply with legal, regulatory or safety obligations.

We take reasonable steps to preserve the security of cookie and Personal Information. If your browser is suitably configured, it will advise you whether the information you are sending us will be secure (encrypted) or not secure (unencrypted).

We have put in place procedures to deal with any suspected Personal Information breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

We use standard security measures
The security of your data is very important to us, and we take steps to try to make sure your information is protected, but remember that no method of transmission over the Internet or method of electronic storage is 100% secure. Our security measures include industry-standard physical, technical and administrative measures to prevent unauthorised access to or disclosure of your information, to maintain data accuracy, to ensure the appropriate use of information, and otherwise safeguard your Personal Information. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security.

We will only retain your data for as long as necessary
Journey Beyond Group will retain your Personal Information only for as long as is necessary, as reasonably determined by us, for the purposes set out in this Policy. We will retain and use your Personal Information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes or claims and enforce our legal agreements and policies.

Journey Beyond Group may retain Usage Data for internal analysis and other business purposes, including to support the security and functionality of our Services and to comply with applicable legal or regulatory requirements. Once no longer required, this data is stored in a secure internal data warehouse and pseudonymised (or de-identified).

Personal Information stored in backup systems may continue to be retained for a period of time in accordance with our backup, business continuity, and disaster recovery processes. Where applicable, such information will be deleted, overwritten, anonymised, or otherwise managed in accordance with our record retention and information management practices.

We store information both in and outside Australia
Your Personal Information may be transferred to and maintained on computers located outside of your state, country or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

Some personal information may be transferred to countries outside of Australia in the course of our business. We may share Personal Information overseas for various reasons, including where we have engaged a service provider to assist us with certain technology or data storage functions.

Your Personal Information may be shared with parties located overseas, including in Australia, the United States, Canada, the European Union, the United Kingdom, Switzerland, the Netherlands, Singapore, India, and other countries from time to time.

Journey Beyond Group will take reasonable steps to ensure that your Personal Information is treated securely and in accordance with this Policy and no transfer of your Personal Information will take place to an organisation or a country unless there are adequate controls in place including the security of your Personal Information. If you do not want your information transferred to, processed or maintained outside of the country or jurisdiction where you are located, you should not use the Services.

We may link to third-party sites or services we don’t control
Our Service may contain links to other websites that are not operated by us. This includes donations made to Voyages Tourism Australia’s charitable trust, Anangu Communities Foundation, which accepts donations via a third-party service provider called Donation Point Go.

If you click a third-party link, you will be directed to that third-party website. We strongly advise you to review the privacy policy of every website you visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party websites or services.

Personal Information of Minors
We may collect Personal Information of a person under the age of 18 where they use our Services. For example, we will collect booking information of a child attending one of our accommodation or experience offerings. Where you provide Personal Information about a child in your care, you warrant that you have consent to provide this information and for the child’s information to be handled in accordance with this Privacy Policy.

Additionally, images and voice recording of our customers may be taken during our Services (e.g. on our coaches or ferries). You may revoke your consent for your child’s image, voice and likeness to be photographed, filmed or otherwise recorded by notifying us prior to the commencement of your journey.

COOKIES POLICY and AD CHOICES

We use common tracking technologies

We use several common tracking tools. These may include browser cookies. We use these tools:

• • To recognise new or past customers.
  • To store your password if you are registered on our sites.
  • To improve our website and mobile app.
  • To serve you with advertising content in which we think you will be interested. To do so, we may observe your behaviors over time on this website and across third-party websites. We may also collect information about your browsing history.
  • To better understand the interests of our customers and our website visitors.

We use cookies and similar tracking technologies to track the activity on our Services
Cookies are files with a small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Other tracking technologies are also used such as beacons, tags, and scripts to collect and track information and to improve and analyse our Services.

We only use non-essential cookies and similar tracking technologies, including analytics cookies, marketing cookies, remarketing cookies, pixels, tags, scripts and similar tools, where permitted by law and, where required, with your consent. You can manage your cookie preferences through the cookie management options available on our website (if applicable), or through your browser settings.

We use the following types of cookies on our Services:

• • Strictly Necessary Cookies – These cookies are essential because they enable you to use our Services. For example, strictly necessary cookies allow you to access secure areas on our Services. Without these cookies, some services cannot be provided. These cookies do not gather information about you for marketing purposes. This category of cookies is essential for our Services to work and they cannot be disabled.
  • Functional Cookies – We use functional cookies to remember your choices so we can tailor our Services to provide you with enhanced features and personalised content. For example, these cookies can be used to remember your name or preferences on our Services. We do not use functional cookies to target you with online marketing. While these cookies can be disabled, this may result in less functionality during your use of our Services.
  • Performance or Analytic Cookies – These cookies collect passive information about how you use our Services, including webpages you visit and links you click. We use the information collected by such cookies to improve and optimize our Services. We do not use these cookies to target you with online marketing. You can disable these cookies.
  • Marketing/Tracking Cookies – These cookies (and any other form of local storage) are used to create user profiles to display advertising or to track you on our website or across several websites for similar marketing purposes.
  • Third-Party Cookies – These are cookies that are provided by third-party service providers and belong in one of the cookie categories described above. These third-party providers process your Personal Information either on our behalf pursuant to our instructions and in accordance with this Policy, or under their own privacy policy.

We may use third-party Service Providers to monitor and analyse the use of our Service
An example of this is Google Analytics. Google Analytics is a web analytics service offered by Google LLC (“Google”) that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualise and personalise the ads of its own advertising network.
For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy?hl=en. Google Analytics Opt-out Browser Add-on provides visitors with the ability to prevent their data from being collected and used by Google Analytics, available at: https://tools.google.com/dlpage/gaoptout.

We do not control, and we are not responsible for, these third-party Service Providers’ handling of your Personal Information and each have their own respective Privacy Policy.

For information about any other third-party Service Providers we use to monitor and analyse the use of our Service, please email us at [email protected].

We may use remarketing services to advertise on third-party websites to you after you visited our Services
We and our third-party vendors use cookies to inform, optimise and serve ads based on your past visits to our Service. One example we use for these purposes is Google Ads. Google Ads remarketing service is provided by Google. You can opt-out of this by visiting the Google Ads Settings page: http://www.google.com/settings/ads.

Another example is Facebook Ads.  You can opt-out of this by visiting the Facebook Ad Preferences page: https://www.facebook.com/help/109378269482053.

For information about any other remarketing services we use to advertise on third-party websites to you after you visited our Services, please email us at [email protected].

We may use other tracking tools as well.
To see how our Site is performing we sometimes use conversion beacons, tags, scripts and pixels, which fire a short line of code to tell us when you have clicked on a particular button or reached a particular page. We also use these tracking technologies to analyse usage patterns on our Site. The use of these technologies allows us to record that a particular device, browser, or application has visited a particular webpage.

You can control cookies and tracking tools
You can accept, reject, update or manage non-essential cookies through the cookie management options available on our website (if applicable), or through your browser settings (see below).
Your browser may provide you with the option to refuse some or all browser cookies. Additionally, you can exercise your preferences in relation to cookies served on our Site by taking the steps outlined below:

• • First-Party Cookies – You can enable, disable or delete our cookies through the browser you are using to access our Services. To do this, follow the instructions provided by your browser (usually located within the “Help”, “Tools” or “Edit” settings). Please note, if you set your browser to disable cookies, you may not be able to access secure areas of our Services and parts of the Services may not work properly for you. You can find more information about how to change your browser cookie settings at http://www.allaboutcookies.org.
  • Third-Party Cookies – Modern browsers also allow you to block third-party cookies using the steps described above.
  • Do Not Track – We do not support Do Not Track signals. Do Not Track is a preference you can set in your web browser to inform websites that you do not want to be tracked. You can enable or disable Do Not Track by visiting the Preferences or Settings page of your web browser.

 

Access your personal information
You are entitled to request access to any of the Personal Information we hold about you.

If you would like to request access to your Personal Information, please contact us at:

The Privacy Officer, Journey Beyond, Level 5 233 North Terrace, Adelaide SA 5000.

Email: [email protected]

You will not be charged for making a request to access your Personal Information, but to the extent permitted by law, you may be charged for the reasonable time and expense incurred in compiling information in response to your request. For your protection we may need to verify your identity before implementing your request. We will comply with your request within a reasonable period after you make your request.

Contact Us

Please contact us if you have any questions
Before using our Services, please carefully read this Privacy Policy and our Terms of Use and the applicable Service Unless otherwise defined in this Policy, the terms used in this Policy have the same meanings as in our Terms of Use. By using the Services, you agree to the collection and use of your Personal Information in accordance with this Policy, Terms of Use, and, if any purchases are made, any applicable Service Terms and Conditions. If you do not feel comfortable with any part of this Policy, Terms of Use or applicable Service Terms and Conditions, you must not use, access, or purchase our Services.

If you have any questions or feedback about this Privacy Policy, please contact us by emailing us at [email protected].

What we will do if there is an update to this Policy
We may update this Policy from time to time. We will notify you of any changes by posting the new Policy on this webpage and updating the effective date. If changes are significant, we will provide a more prominent notice such as email notification if applicable. Please review this Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Copyright 2026 Journey Beyond. All rights reserved.