Ngaro Track Pty Ltd – Privacy & Cookies Policy

Last updated: 13th November 2025

This Privacy & Cookies Policy explains how Ngaro Track Pty Ltd ("Ngaro Track", "we", "our", or "us") handles personal information. We understand that booking a walking experience involves trust, and we take our responsibility to protect your information seriously. This policy outlines what we collect, why we collect it, how we use it, and the steps we take to keep it secure.

What we collect and why

When you book with us or make an enquiry, we ask for only the information we need to provide your trip and meet our safety and compliance obligations. This typically includes your name, email address, date of birth, suburb or town, state or territory, country, and postcode. We may also ask for a contact number, emergency contact information.

If you visit our website, certain technical information may be collected automatically – for example, your IP address, browser type, device information, and general usage statistics. This helps us maintain the site, understand how visitors use it, and improve its performance.

We may receive information from third-party booking systems, service providers, or referral partners where this is necessary to process your booking.

How we use your information

Your information is used primarily to manage your booking, provide essential trip details, coordinate marine transfers, verify eligibility for walking permits, and respond to enquiries. We may also use it for safety and emergency purposes, for internal administration, or for improving our services.

From time to time, we may send you updates or newsletters if you have opted to receive them. You can unsubscribe at any time.

Who we share information with

We do not sell or trade personal information.

We may share your details only with organisations that directly support the delivery and safety of your Ngaro Track booking. This includes:

• Queensland Parks and Wildlife Service, where required for compliance, permit management, reporting, or visitor safety
• the contracted marine operator responsible for transport to and from Whitsunday Island
• related companies and operational service providers within our corporate group who assist with administration, booking management, logistics, customer communication, financial processing, and operational support
• trusted external providers that assist us with secure payment processing, IT systems, cloud hosting, email distribution, and website analytics
• emergency services or government agencies if required by law or necessary for safety

These organisations receive only the information needed to perform their functions and are expected to handle it responsibly.

How your information is stored and protected

We follow a "no public data storage" principle:

No customer personal information is stored on public-facing servers.

All personal data is held in secure, access-controlled systems that are not accessible from the public internet. Information is transmitted using secure methods, protected by multiple layers of security, and accessible only to authorised personnel. We use PCI-compliant payment gateways and do not store full credit card details.

Our systems and processes are regularly reviewed to maintain data security and integrity.

Some of our technology providers may store data on secure servers outside Australia. When this occurs, we take reasonable steps to ensure that your information is handled in accordance with Australian privacy requirements.

How long we keep information

We retain personal information only for as long as it is required for bookings, safety documentation, legal obligations, or operational purposes. When it is no longer needed, it is securely destroyed or de-identified.

Cookies and website tools

Our website uses cookies and similar technologies to help it function properly and to provide a better browsing experience. Cookies may be used to remember your preferences, understand how visitors use the site, and support certain website features. You can adjust your browser settings to refuse cookies, although some parts of the site may not function as intended.

Access, corrections and questions

You may request access to the personal information we hold about you or ask for corrections if you believe the details are inaccurate. We may need to verify your identity before responding.

If you have any concerns about how your information has been handled, we encourage you to contact us directly. We will work with you to resolve any issues. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.

Contact us

Privacy Officer
Ngaro Track Pty Ltd
Level 2 – 55 York Street
Sydney, NSW 2000

We may update this Privacy & Cookies Policy from time to time. The most current version will always be available on our website.