Privacy Policy

BaliDeals.deals ("BaliDeals", "we", "us", "our") is an independent Australian travel information and comparison website. We are not an airline, hotel, tour operator or travel agent. We do not sell travel, take bookings or process payments.

This policy explains how we handle personal information in accordance with the Privacy Act 1988 (Cth) and the thirteen Australian Privacy Principles (APPs). It also covers our obligations under the Spam Act 2003 (Cth) for marketing emails.

By using this website you agree to the collection and use of information as described here. If you do not agree, please stop using the site.

We only collect information that is reasonably necessary for what we do:

• Information you give us. Your name, email address and message content when you use our contact form; your email address when you subscribe to Bali deal alerts; and the travel preferences you enter into the Bali Holiday Planner (dates, traveller numbers, budget range and interests).
• Information collected automatically. Pages viewed, referring page, approximate location derived from IP address, device and browser type, and which outbound partner links were clicked. This is collected in aggregate for analytics.
• Cookies and similar technologies. See our Cookie Policy.

What we never collect. We do not collect credit card or payment details, passport numbers, dates of birth or booking references, because every booking is completed on a partner's own website. We do not knowingly collect sensitive information as defined in the Privacy Act, and we do not collect government identifiers.

Wherever it is lawful and practicable, we collect personal information directly from you — through forms you choose to complete on this website. We do not buy email lists and we do not scrape personal information from third parties.

You may use most of this website anonymously or under a pseudonym. You only need to identify yourself if you want us to reply to an enquiry or send you deal alerts.

We use personal information only for the purpose it was collected, which is to:

• respond to your enquiry or feedback;
• send Bali travel deals and updates you have asked to receive;
• generate your Bali Holiday Planner results;
• understand which pages, destinations and partner links visitors find useful, so we can improve the content and the site;
• detect and prevent spam, fraud and misuse; and
• meet our legal and record-keeping obligations.

We will not use your information for an unrelated secondary purpose unless you would reasonably expect it, you have consented, or we are required or authorised by law.

We only send marketing emails to people who have opted in. Every email we send identifies BaliDeals.deals as the sender and includes a functional unsubscribe link. Unsubscribe requests are actioned within five business days, as required by the Spam Act.

You can also ask us to stop contacting you at any time through the contact page. We never sell or rent your email address.

We do not sell personal information. We disclose it only:

• to service providers who operate the site on our behalf — website hosting, database and email delivery providers — under contracts requiring them to protect it and use it only for our purposes;
• to booking partners, in a limited way. When you click through to a partner such as an accommodation, flight, activity or transfer provider, you leave this site. We may pass a non-identifying tracking reference so the referral can be attributed. Anything you then enter — names, traveller details, payment information — is collected by that partner under their own privacy policy, not ours. We receive anonymised confirmation that a referral converted, never your booking or payment details;
• where required or authorised by law, including to a court, regulator or law enforcement agency; and
• to a purchaser, if our business or assets are sold, subject to the same protections.

Some of our service providers and booking partners store or process data outside Australia, including in the United States, the European Union, Singapore and Indonesia. By using this site and clicking through to partners you acknowledge this.

Before disclosing personal information overseas we take reasonable steps to ensure the recipient handles it consistently with the Australian Privacy Principles, as APP 8 requires. Where a partner operates under a different framework, their own privacy policy governs the information you give them directly.

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. The site is served over HTTPS, data is held in access-controlled databases, and access is limited to people who need it.

No method of transmission or storage is completely secure. If we become aware of an eligible data breach that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

We keep enquiry records for up to two years, subscriber records until you unsubscribe plus a short suppression period, and analytics data in aggregated form. When information is no longer needed and we are not required to keep it, we destroy or de-identify it.

You may request access to the personal information we hold about you, and ask us to correct anything inaccurate, out of date or incomplete. Contact us through the contact page.

We will respond within 30 days. There is no fee to make a request. If we refuse access or correction we will explain why in writing and tell you how to complain. We may need to verify your identity first.

You can also ask us to delete your data. We will do so unless we are required by law to retain it.

This website links to airlines, hotels, booking platforms, activity operators and transfer providers. Once you follow a link you are on their site, governed by their privacy policy and terms. We are not responsible for their content or privacy practices, and we encourage you to read their policies before providing personal information.

This website is intended for adults planning travel. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

If you think we have breached the Australian Privacy Principles, contact us first through the contact page with the details. We will acknowledge your complaint promptly and aim to resolve it within 30 days.

If you are not satisfied with our response, you can refer the matter to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

We may update this policy from time to time to reflect changes in our practices or the law. The current version is always published on this page with the date it was last updated. Material changes will be highlighted on the site.