top of page
Travel Agency

Privacy Policy

Privacy Policy for Travel Leaders Australia

Introduction

Travel Leaders Australia ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This privacy policy will inform you about how we collect, use, and protect your personal information when you visit our website, use our services, or interact with us in any manner. By availing our services, you agree to our terms and conditions and this privacy policy.

​

Important Information and Who We Are

Purpose of This Privacy Policy

This privacy policy aims to give you information on how Travel Leaders Australia collects and processes your personal data, including any data you may provide when you book flights, holiday packages, sign up for newsletters, or contact our service.

Controller

Travel Leaders Australia is the controller and responsible for your personal data.

Contact Details

If you have any questions about this privacy policy or our data practices, please contact us using the details provided below:

​

The Data We Collect

We may collect and process the following categories of personal data about you:

  • Identity Data: Including your name, username or similar identifier, title, date of birth, and gender.

  • Contact Data: Including your billing address, delivery address, email address, and telephone numbers.

  • Financial Data: Including payment card details, bank account details, and billing information.

  • Transaction Data: Including details about payments to and from you and details of products and services you have purchased from us.

  • Technical Data: Including your internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.

  • Usage Data: Including information about how you use our website, products, and services.

  • Marketing and Communications Data: Including your preferences in receiving marketing from us and your communication preferences.

We may also collect, use, and share aggregated data such as statistical or demographic data for any purpose. Aggregated data may be derived from your personal data but is not considered personal data as it does not directly or indirectly reveal your identity.

​

How We Use Your Personal Data

We use your personal data for the following purposes:

  • To provide and manage your access to our website and services.

  • To process and fulfil bookings and orders for flights and holiday packages.

  • To manage payments, fees, and charges.

  • To communicate with you, including sending booking confirmations and updates.

  • To personalise your experience and to deliver content and product offerings relevant to your interests.

  • To improve our website, products, and services.

  • To comply with legal obligations and regulations.

​

Disclosure of Your Personal Data

We may disclose your personal data to third parties who provide services to us, including:

  • Service providers who assist with website hosting, data analysis, payment processing, order fulfilment, and other services.

  • Professional advisors such as lawyers, bankers, auditors, and insurers who provide consultancy, banking, legal, insurance, and accounting services.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not sell your personal data to third parties.

​

International Transfers

Your personal data may be transferred to and processed in countries outside of your country of residence. These countries may have different data protection laws than your country. Where we transfer your personal data internationally, we will take appropriate steps to ensure that your personal data is treated securely and in accordance with this privacy policy.

​

Data Security​

We have implemented a comprehensive security program designed to ensure the security and confidentiality of your personal data. Our security measures include:

  • Encryption: We use advanced encryption standards (AES-256) to protect your personal data during transmission and at rest. All sensitive information is encrypted using Secure Sockets Layer (SSL) or Transport Layer Security (TLS) protocols.

  • Access Controls: Access to personal data is restricted based on the principle of least privilege. Only authorised personnel with a legitimate business need are granted access to personal data, and such access is controlled through multi-factor authentication.

  • Network Security: Our network is protected by state-of-the-art firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) to monitor and prevent unauthorised access.

  • Data Anonymization: Wherever possible, personal data is anonymized or pseudonymized to protect individual identities, especially in data analysis and reporting.

  • Regular Security Audits: We conduct regular security audits and vulnerability assessments, both internally and through third-party experts, to identify and address potential security weaknesses.

  • Incident Response Plan: We have a detailed incident response plan to manage and mitigate the impact of data breaches. This includes predefined roles, communication strategies, and steps for data recovery and forensic analysis.

  • Security Training and Awareness: All employees undergo regular training on data protection, cybersecurity, and the importance of safeguarding personal data. We maintain a culture of security awareness throughout the organization.

  • Data Backup and Recovery: We maintain regular data backups and have a robust disaster recovery plan to ensure data integrity and availability in the event of a system failure or other disruptive incidents.

  • Secure Development Practices: We follow secure coding practices and conduct regular code reviews and security testing to ensure that our applications are resistant to threats and vulnerabilities.

​

Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

​

Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data. These rights may include:

  • The right to request access to your personal data.

  • The right to request correction of your personal data.

  • The right to request erasure of your personal data.

  • The right to object to processing of your personal data.

  • The right to request restriction of processing of your personal data.

  • The right to request the transfer of your personal data to you or to a third party.

If you wish to exercise any of these rights, please contact us using the contact details provided in this privacy policy.

​

Changes to This Privacy Policy

We may update this privacy policy from time to time in response to changing legal, technical, or business developments. When we update our privacy policy, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We encourage you to periodically review this page for the latest information on our privacy practices.

Contact Us

Get in touch for any query or concerns

Thanks for submitting!

bottom of page