Privacy Policy
Last updated: 29 October 2026
This Privacy Policy applies to Wayloop Operations Pty Ltd (ACN 697 975 287) and its related entities, all of which are referred to as we, our and us.
About This Privacy Policy
The privacy of your personal information is important to us.
This Privacy Policy sets out how we collect, use, hold, disclose and otherwise manage personal information when you use our website and mobile applications (together, the Platform).
We may change this Privacy Policy from time to time. We will post any changes to this Privacy Policy on our website, which will take effect when it is published. We encourage you to check our website regularly for any updates to our Privacy Policy.
Collection
Types of Information Collected
Personal information is any information or opinion about a person, who is identified or reasonably identifiable, whether or not that information or opinion is true. The personal information that we collect and hold about you depends on your relationship or interaction with us. The kinds of personal information we typically collect includes:
(a)identification information and contact details: name, gender, address, phone number, fax number, email address, billing address, residency status, nationality, emergency contact information and nature of account (for example, traveller or tour operator);
(b)profile information: profile photo, interests, hobbies, languages spoken, travel experience level and preferences, other information that you choose to add to your profile and prior account history;
(c)payment and booking information: third party payment processing customer ID and subscription reference, payment status, purchase history, details about the booked activity and any other information required to facilitate booking requests;
(d)travel and itinerary details: destinations, tags applied by third party operators, entitlement status, booking reference numbers/ID, booking date/time, accessibility needs, flight details, accommodation, insurance details, activities, group booking information (including relationships to others, booking group lists, primary booker name, email, phone, booking reference and booked resources), guardian and parental controls, previous purchases and bookings and other information relating to your travel processed through the Platform;
(e)content and communications: images, videos, recordings, comments, captions, polls, RSVPS and in-app communications uploaded, captured or otherwise communicated through the Platform (including artificial intelligence conversation history);
(f)digital information: IP addresses, browser type, location (if shared), device type, whether you have accessed third party sites, time and date of visits, pages viewed, information about the device and operating system used and sign in method;
(g)forms and survey information: feedback, polling information and responses to surveys;
(h)health and safety information: incident ID, travellers involved, incident messaging, location data (if shared), safety data creation time and resolution time and medical information that you add to an emergency profile or similar fields;
(i)marketing communications: consents and communication preferences, including in relation to offers and other marketing communications sent by us and our related entities; and
(j)other personal information relevant to your use of the Platform and its features or providing you with the products and services you are, or someone else you know is, seeking.
Sensitive information is a type of personal information that includes information about your racial or ethnic origin, political opinions or associations, religious or philosophical beliefs or affiliations, membership of a professional or trade association, membership of a trade union, health information, sexual orientation or practices, criminal record or biometric information.
We may collect and hold sensitive information about you where it is reasonably necessary for our functions and activities, including where a tour operator uses the Platform features to collect sensitive information in connection with their services.
We will not collect your sensitive information without your consent, except in limited circumstances, including when:
(a)the collection is required or authorised under Australian law or a court or tribunal order; or
(b)another exception under the Privacy Act 1988 (Cth) (Privacy Act) applies.
Method of Collection
Personal information will generally be collected directly from you through our website and mobile applications when you register and use the Platform and its features, in person, via email or over the phone. We may also collect personal information about you from third parties acting on your behalf.
There may, however, be some instances where personal information about you will be collected indirectly because it is unreasonable or impractical to collect personal information directly from you. For example, we may be provided with your personal information by a tour operator for the purpose of inviting you to use the Platform. We will usually notify you about these instances in advance, or where that is not possible, as soon as reasonably practicable after the information has been collected.
Purpose of Collection
Generally, we will collect, use and hold your personal information if it is reasonably necessary for or directly related to the performance of our functions and activities, including for the purposes of:
(a)confirming your identity;
(b)providing and administering the Platform (including its communication, trip management, photo sharing, personalised recommendations, payment, safety and location-based features) and related products and services;
(c)facilitating the provision of services and information by tour operators and other third parties in connection with the Platform to you or someone else you know, including enabling tour operators to process payments;
(d)creating, managing and providing you with information and notices about your Platform account;
(e)using your profile, itinerary and Platform activity to create a unique, personalised experience for you, including to make personalised suggestions for activities and experiences at your destination;
(f)enabling guardian and parental control features;
(g)responding to your enquiries, feedback or complaints;
(h)if you have consented to marketing, providing you with information about other products or services that we and other organisations that we have affiliations with, offer that may be of interest to you;
(i)security, fraud prevention and abuse detection;
(j)facilitating our internal business operations, including the fulfilment of any legal requirements and any sale or transfer of our business;
(k)analysing user activity, performance of our services and customer needs with a view to developing a new or improved Platform, features and services; and
(l)contacting you to provide a testimonial or feedback for us.
We may perform statistical analysis of user activity and characteristics to measure interest in and use of the Platform and to inform others of such information, as well as the number of users who have been exposed to or have clicked on any particular areas of or offers within the Platform. This may involve aggregated, anonymised and de-identified versions of information which was originally your personal information.
Failure to provide information
If the personal information you provide to us is incomplete or inaccurate, we may be unable to provide you, or someone else you know, with access to the Platform or the products and services you, or they, are seeking.
Internet Users
Digital information
If you access our Platform, we may collect additional information about you in the form of digital information (as set out above under ‘Types of Information Collected’). This is predominantly used to assist with the diagnosis of problems or support issues with our Platform. This information is gathered in aggregate only and cannot be traced to an individual user.
Links to other websites
Our Platform may contain links to other websites and applications. These linked sites are not under our control, and we are not responsible for the conduct of companies linked to our Platform and linked websites and applications are not subject to our privacy policies and procedures. Before disclosing your personal information on any other website or application, we advise you to read the terms and conditions of using that website or application and any applicable privacy statement.
Cookies and similar technologies
Our Platform uses cookies and similar technologies. The main purpose of these technologies is to identify users and to prepare customised web pages for them. These technologies also allow us to increase your security by storing your session ID and are a way of monitoring single user access and analysing usage of the site. This information is generally held in aggregate and cannot be traced back to an individual user. You can manage your cookie settings, including blocking the use of cookies, through your browser.
Artificial Intelligence
We do not use your personal information for automated decision making.
We use artificial intelligence (AI) technologies to enhance the Platform, including technologies provided by third-party AI service providers such as OpenAI and Anthropic. These technologies assist with the creation of trips in the Platform by capturing itinerary data and travel booking information, such as flight and activity details.
When you use AI features in the Platform, your personal information is shared with relevant third-party AI service providers for the purpose of providing and improving the AI feature. Any personal information generated, inferred or processed by an AI system is handled by us in accordance with this Privacy Policy and applicable laws.
Direct Marketing
We may use or disclose your personal information to let you know about Platform features and our products and services, or products and services from tour operators and other businesses with whom we are associated, or to notify you of promotions or other opportunities, which may be of interest to you.
You can contact us at any time if you no longer wish to receive our direct marketing using the contact details below or the unsubscribe function contained in the direct marketing communication. We will not charge you for giving effect to your request and will take all reasonable steps to meet your request at the earliest possible opportunity.
Use and Disclosure
Disclosure to third parties and other organisations
Generally, we only use or disclose personal information about you for the purposes for which it was collected (as set out above under ‘Purpose of Collection’).
In line with modern business practices, and depending on your specific circumstances, privacy and device settings and use of the Platform, we may disclose your personal information to the organisations described below:
(a)related entities who help us carry out our functions and activities;
(b)tour operators and, subject to your settings, other Platform users;
(c)third parties acting on your behalf (such as a travel booker or organiser) and your guardian or parent (where guardian and parental controls are used);
(d)our agents, contractors, third party service providers and other organisations who assist us in operating our Platform and business, and who provide products and services to you, including resellers, software, AI, analytics, hosting and other IT service providers, payment processing providers, sales, marketing and advertising service providers (including social media, other digital platforms and providers that conduct market research), accounting, audit, legal and compliance advisors, and banks, financial institutions and insurers, and identity verification and fraud detection service providers;
(e)government and law enforcement agencies and regulators, courts and tribunals, dispute resolution bodies, industry bodies, and other third parties where we are required or authorised by law;
(f)prospective investors or purchasers of our business or assets, entities involved in a corporate re-organisation, and their advisors;
(g)other organisations with whom we have affiliations so that those organisations may provide you with information about products, services and various promotions; and
(h)any other third party where you consent.
Disclosure of personal information overseas
We are likely to disclose personal information about you overseas. For instance, our third party service providers or other recipients may be based overseas, including New Zealand, United Kingdom, Europe, the United States of America and Canada.
Security
The security of your personal information is important to us. We take reasonable steps to store your personal information safely and to protect it from interference, misuse, loss, unauthorised access, modification or disclosure, including through technical and organisational security measures.
We store your personal information in electronic form. Personal information is encrypted at rest and in transit. We also use a range of other organisational, physical, electronic and network security controls.
Access and Correction
You may access the personal information we hold about you, upon making a written request. We will respond to your request within a reasonable period. We may charge you a reasonable fee for processing your request (but not for making the request for access).
We may decline a request for access to personal information in circumstances prescribed by the Privacy Act, and if we do, we will give you a written notice that sets out the reasons for the refusal (unless it would be unreasonable to provide those reasons), including details of the mechanisms available to you to make a complaint.
We will endeavour to take all reasonable steps to keep secure any information which we hold about you, and to keep this information accurate and up to date. If, at any time, you discover that information held about you is inaccurate, incomplete or out of date, please contact us immediately to have the information corrected.
If we refuse to correct your personal information, we will give you a written notice that sets out our reasons for our refusal (unless it would be unreasonable to provide those reasons), including details of the mechanisms available to you to make a complaint.
Complaints and Feedback
If you wish to make a complaint about a breach of the Privacy Act, the APPs or a privacy code that applies to us, please contact us using the details below and we will take reasonable steps to investigate the complaint and respond to you.
If after this process you are not satisfied with our response, you can submit a complaint to the Office of the Information Commissioner. To lodge a complaint, visit the ‘Complaints’ section of the Information Commissioner’s website, located at http://www.oaic.gov.au/privacy/privacy-complaints, to obtain the relevant complaint forms, or contact the Information Commissioner’s office.
If you have any queries or concerns about our Privacy Policy or the way we handle your personal information, please contact us at:
Street address: 5A/1 Post Office Road, Mapleton, Qld 4560
Email address: privacy@wayloop.app
Telephone: +61412669069
Website: wayloop.app