Explore Dunya (Explore Dunya, “we”, “us” or “our”) operates the online marketplace at exploredunya.com (the “Platform”), through which independent suppliers (“Suppliers”) offer travel experiences, tours and activities (“Experiences”). We respect your privacy and are committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (the “APPs”). This Privacy Policy explains what personal information we collect, how we use and share it, and the choices available to you.

1. Information we collect

• Identity and contact details — such as your name, email address, telephone number and billing details.
• Booking information — the Experiences you book, activity dates, participant details, and any information you provide in connection with a booking.
• Payment information — processed securely by our third-party payment processor. We do not store full card numbers on our servers.
• Supplier information — if you register as a Supplier, your business, identity, banking, insurance and taxation details.
• Account and activity data — your login credentials, preferences, saved listings and reviews.
• Technical data — your IP address, device and browser information, and information collected through cookies (see clause 7).

2. How we collect your information

We collect personal information directly from you (when you create an account, make a booking, register as a Supplier, contact us or submit a review), automatically (through cookies and analytics as you use the Platform), and from third parties such as Suppliers, payment and fraud-prevention providers, and any authentication service you choose to use.

3. How we use your information

We use your personal information to:

• create and manage your account;
• process and fulfil your bookings, including sharing the details necessary with the relevant Supplier so that it can deliver the Experience;
• take payment and process refunds through our payment processor;
• provide customer support and communicate with you about your bookings;
• send you marketing communications where you have consented, from which you may opt out at any time;
• operate, improve and secure the Platform, including analytics and fraud prevention; and
• comply with our legal obligations and enforce our terms.

4. How we share your information

We do not sell your personal information. We share it:

• with Suppliers, to the extent necessary for them to deliver an Experience you book;
• with service providers who help us operate the Platform (including payment processing, email delivery, hosting, analytics, customer support and security), who may use it only to provide those services to us;
• where required or authorised by law, or to protect our rights, our users or the public; and
• in connection with a sale, merger or restructure of our business, under appropriate confidentiality protections.

5. Overseas disclosure

The Platform and some of our service providers are located outside Australia (including our hosting infrastructure), and Suppliers may be located anywhere in the world. Where we disclose your information overseas, we take reasonable steps to ensure it is handled consistently with the APPs. When you book an Experience with a Supplier located in another country, your booking information will be shared with that Supplier in its country so that it can provide the Experience.

6. Security and retention

We take reasonable technical and organisational measures to protect your personal information from misuse, loss and unauthorised access. Payment card details are encrypted in transit and handled by our payment processor. We retain personal information for as long as necessary to provide our services, comply with our legal obligations, resolve disputes and enforce our agreements. If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (the “OAIC”) as required by law.

7. Cookies

We use cookies and similar technologies to operate the Platform, remember your preferences, analyse traffic and, where applicable, support advertising. Most browsers allow you to control or disable cookies through their settings; disabling cookies may affect how the Platform works.

8. Your rights and choices

You may access, correct or update your personal information by logging into your account or contacting us. You may ask us to delete your information or to opt out of marketing at any time, subject to any legal retention requirements. If you have a privacy concern, please contact us first through our Contact Us page. If you are not satisfied with our response, you may lodge a complaint with the OAIC.

9. Children

The Platform is not directed to children under 18 years of age, and we do not knowingly collect their personal information. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time and will post the updated version with a new effective date. Please review it periodically to stay informed about how we handle your personal information.