Stradbroke Island Tours

Privacy Policy

Last updated: 17 April 2026

1. Introduction

Stradbroke Island Tours (ABN 69 168 032 577), operated by Hernandez Corporation PTY LTD, is committed to protecting your personal information. This Privacy Policy describes how we collect, use, disclose, and protect personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. What personal information we collect

  • Contact details: name, email address, and phone number — provided when you use our contact form, email us, or call us.
  • Booking details: tour date, number of participants, pickup location, dietary requirements, and any accessibility needs you share. These are collected by Rezdy on our behalf at the time of booking.
  • Website usage data: IP address, browser type, pages visited, and referring URL. Collected automatically when you browse the site.
  • Payment information: we do not directly collect or store your payment card details. All payments are processed securely by our booking partner, Rezdy.

3. How we collect personal information

  • Directly from you when you submit our contact form, send us an email, or call us.
  • From Rezdy when you complete a booking through our booking platform.
  • Automatically through cookies and analytics tools when you browse the website (see Section 8).

4. Why we collect personal information

  • To respond to your enquiries and provide customer service.
  • To process, confirm, and manage tour bookings.
  • To send booking confirmations, pickup details, and tour information.
  • To improve our website and services.
  • To comply with our legal obligations.

We will not use your information for other purposes without your consent.

5. Who we disclose your information to

We may share your personal information with:

  • Rezdy — our booking platform, to process and manage reservations.
  • Hosting provider (Hostinger) — for website and database hosting.
  • Email service provider — to send booking confirmations and respond to enquiries.
  • Analytics provider (if installed) — to understand website usage in aggregate.
  • Government bodies or law enforcement — where required by law.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

6. Overseas disclosure

Some of our service providers may store data on servers located outside Australia (for example, Rezdy infrastructure). Where this occurs, we take reasonable steps to ensure your information is handled in accordance with the Australian Privacy Principles.

7. Data security

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access. These measures include:

  • SSL/TLS encryption for all website connections.
  • Secure server hosting with access controls.
  • Regular security updates and monitoring.

No data transmission over the internet is ever fully secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Cookies & tracking

Our website uses cookies to:

  • Maintain essential session functionality.
  • Understand website usage patterns (analytics cookies, if installed).

You can manage cookie preferences through your browser settings. Disabling cookies may affect website functionality. Australia does not currently require cookie-consent banners; we disclose cookie usage here for transparency.

9. Data retention

  • Contact form submissions are retained for as long as necessary to respond to your enquiry and for our records, then deleted.
  • Booking data is retained for the period required by Australian tax and business record-keeping obligations (generally 5 years).
  • Analytics data is retained in aggregate form and is not linked to identifiable individuals.
  • You may request deletion of your personal information at any time (see Section 10).

10. Your rights

Under the Australian Privacy Principles, you have the right to:

  • Access the personal information we hold about you.
  • Request correction of inaccurate or outdated information.
  • Request deletion of your personal information, subject to legal retention requirements.
  • Withdraw consent for any optional communications.
  • Opt out of marketing communications at any time.

To exercise any of these rights, contact us at info@stradbrokeislandtours.com.

11. Complaints

If you believe your privacy has been breached, please contact us at info@stradbrokeislandtours.com. We will investigate and respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

12. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent change.

13. Contact

Stradbroke Island Tours (ABN 69 168 032 577), operated by Hernandez Corporation PTY LTD.