Privacy Policy

2. How We Collect Personal Information

We collect personal information in the following ways:

• Directly from you when you create an account, make a booking, or contact us
• Automatically through your use of our website, including cookies and tracking technologies
• From third parties involved in your bookings, such as travel, accommodation, and event providers
• From authentication providers if you sign in using third-party services
• From other users where a booking is made on your behalf

3. Information We Collect

3.1 Information You Provide

• Name, email address, and contact details
• Account credentials (securely hashed)
• Booking details (guest names, travel dates, preferences, contact details)
• Communications (support requests, emails)
• Preferences (currency, language, marketing preferences)

Payment Information: Payment details are processed securely by our third-party payment providers. We do not store full card details.

3.2 Sensitive Information

In some cases, we may collect sensitive information where necessary to facilitate your booking, such as:

• Health or medical-related information (e.g. special assistance requests)
• Dietary requirements that may indicate health or religious preferences

We will only collect and use this information with your consent or where permitted by law.

3.3 Information Collected Automatically

• Device and browser information
• Usage data (pages visited, searches, interactions)
• Approximate location (via IP address)
• Cookies and similar technologies (see Cookie Policy)
• Analytics and advertising data collected through Google Analytics 4 and the Meta (Facebook) Pixel, including device identifiers, IP address, pages viewed, and purchase events (order value and currency) — subject to your cookie consent choices

4. How We Use Your Information

We use your personal information to:

• Process and fulfil bookings
• Communicate with travel, accommodation, and event providers
• Send confirmations, tickets, and vouchers
• Process payments and refunds
• Manage loyalty programs and rewards
• Provide customer support
• Send marketing communications (where you have opted in)
• Detect fraud and maintain platform security
• Improve our services and user experience
• Comply with legal obligations

Important: Event Escapes acts as an intermediary between users and third-party providers. We share relevant personal information with these providers solely to facilitate bookings and service fulfilment.

If you do not provide required personal information, we may be unable to provide our services.

5. Disclosure of Personal Information

We may disclose your personal information to:

• Payment providers
• Cloud infrastructure providers
• Travel, accommodation, and event providers
• Email and communication providers
• Buy-now-pay-later providers
• Hosting providers
• Analytics and advertising platforms: Google LLC (Google Analytics 4) and Meta Platforms, Inc. (Meta Pixel and Conversions API), which receive usage and purchase-event data as described in our Cookie Policy, subject to your consent choices
• Authentication providers
• Regulatory authorities or law enforcement where required by law

If you provide personal information about another person, you confirm that you have obtained their consent.

Third-party providers are responsible for handling your personal information in accordance with their own privacy policies.

We do not sell personal information for money. However, our use of advertising tools such as the Meta Pixel involves disclosing certain identifiers and usage data to advertising platforms for measurement and targeted advertising. Some laws (including California’s) treat this as “sharing” or a “sale” of personal information. You can opt out at any time via Cookie Settings or the “Do Not Sell or Share My Personal Information” link in our website footer.

Aside from the advertising disclosures described above (which you can opt out of), we do not share your personal information for third parties’ own marketing purposes.

6. Storage and Security

We store personal information in secure systems operated by us and trusted third-party providers, which may be located in Australia or overseas.

We implement appropriate security measures, including:

• Encryption in transit (TLS 1.2+)
• Encryption at rest (where applicable)
• Secure payment processing via PCI DSS-compliant providers
• Access controls and authentication safeguards

7. Data Retention

We retain personal information only as long as necessary, including:

• Booking and financial records: up to 7 years
• User accounts: until deletion is requested
• Support records: up to 3 years
• System logs: short-term retention

We may retain de-identified information for analytics and improvement purposes.

8. Overseas Disclosure

Your personal information may be disclosed to recipients located outside Australia.

These countries may include the United States, and other jurisdictions where our service providers and travel partners operate, including the countries in which your travel services are provided.

In particular, data collected through Google Analytics and the Meta Pixel is processed by Google LLC and Meta Platforms, Inc. on servers in the United States. Both providers are certified under the EU–US Data Privacy Framework, and we rely on their standard data-processing terms for these transfers.

We take reasonable steps to ensure overseas recipients do not breach the Australian Privacy Principles.

9. Your Rights

9.1 Australia (Privacy Act 1988)

Under the Privacy Act, you have the right to:

• Access your personal information
• Request corrections
• Request deletion (subject to legal obligations)
• Opt out of marketing communications and targeted advertising at any time

You can unsubscribe from marketing emails using the link provided in our communications, and opt out of tracking-based advertising via Cookie Settings in the website footer.

9.2 European Union and United Kingdom (GDPR / UK GDPR)

If you are in the EU/EEA, UK or Switzerland, we process your personal data on the legal bases of contract performance (bookings), legitimate interests (security, fraud prevention, service improvement) and consent (analytics and advertising cookies/pixels, which do not run until you accept them). You have the right to:

• Access, rectify, erase, or receive a portable copy of your personal data
• Object to or restrict processing
• Withdraw consent at any time (via Cookie Settings in the footer), without affecting prior processing
• Lodge a complaint with your local data protection supervisory authority

9.3 United States State Privacy Rights

If you are a resident of California or another US state with a comprehensive privacy law, you may have the right to know, access, correct and delete personal information, and to opt out of the “sale” or “sharing” of personal information and of targeted advertising. Our use of advertising pixels may constitute “sharing”/“selling” under these laws.

• To opt out, use the “Do Not Sell or Share My Personal Information” link in the website footer (this disables advertising pixels on your device)
• We honour the Global Privacy Control (GPC) browser signal as a valid opt-out of sale/sharing
• We will not discriminate against you for exercising any of these rights
• You may appeal a refusal by replying to our decision or emailing our Privacy Officer

To exercise your rights, contact: privacy@eventescapes.com

We will respond within a reasonable time (generally within 30 days).

10. Complaints

If you have a complaint about how we handle your personal information, please contact us.

We will:

• Acknowledge your complaint
• Investigate the issue
• Respond with the outcome

If you are not satisfied, you may contact:

Office of the Australian Information Commissioner (OAIC)
https://www.oaic.gov.au

11. Cookies and Tracking

We use cookies and similar technologies to improve user experience, analyse website usage, and support platform functionality. Specifically, we use:

• Google Analytics 4 (Google LLC) — website analytics: pages visited, searches, interactions, approximate location, and purchase events
• Meta Pixel and Meta Conversions API (Meta Platforms, Inc.) — advertising measurement and retargeting: page views and purchase events (order value and currency)

These tools run according to your consent choices: in the EU/EEA, UK and Switzerland they do not run until you accept them; elsewhere they run by default but you can switch them off at any time via Cookie Settings in the footer. You can also manage cookies through your browser settings. Disabling cookies may affect website functionality.

For details of each cookie and pixel we use, see our Cookie Policy.

Third-Party Links: Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Children’s Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children.

If you provide information about a child as part of a booking, you confirm that you have the authority to do so.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be published on our website with a revised date.

14. Contact

Privacy Officer
Zeroopay Technologies Pty Ltd
470 St Kilda Road, Melbourne VIC 3004, Australia

Email: privacy@eventescapes.com

You may contact us without identifying yourself or by using a pseudonym. However, if you do not identify yourself, we may not be able to respond to your enquiry or provide assistance.