Privacy Policy

THE TAILOR PTY LTD ACN 068 690 700 PRIVACY POLICY
Revised, August 2026.
Your Privacy is Important to Us
The Tailor Pty Ltd (‘TT’) and any related entities (as that term is referred to in the Corporations Act 2001 (Cth)), collectively referred to as ‘we’, ‘us’ and ‘our’, are bound by the Australian Privacy Principles (‘APPs’) contained within the Privacy Act 1988 (Cth) (‘Act’), and, where they apply to us, the General Data Protection Regulation (EU 2016/679) (‘GDPR’) and the UK General Data Protection Regulation. TT is committed to the protection of your Personal Information in accordance with the APPs and, where applicable, the GDPR.
This Privacy Policy describes TT’s personal information handling practices and applies to each and every individual who uses TT website(s) and or our Services. It explains in general terms how we collect, store, use and disclose your personal information, and sets out your right to request access to information that we hold about you.
We welcome guests from many countries. Where the law of your own country gives you rights in addition to those set out below, we will honour those rights to the extent they apply to us.
Scope and Your Consent
This Privacy Policy will apply to any Personal Information you provide to us when making an enquiry, making a travel, accommodation or activity booking, using our Website(s) (ie www.thetailor.com or any other websites operated by us), using The Tailor Concierge, under any agreement or arrangement that we enter into with you, or otherwise in the course of our dealings with you (‘Services’).
When making enquiries and by accepting the terms and conditions when making any booking through our Website(s) or otherwise, or providing us with Personal Information or Sensitive Information, you consent to us collecting, using and disclosing your Information (within and outside Australia) in accordance with this Privacy Policy.
If this Privacy Policy is not acceptable to you, please do not use our Website(s) or use our Services.
This Privacy Policy will also apply to any information that is provided to us by a travel agent or other third party in relation to your travel plans.
Personal Information has the meaning given under the Act but generally includes information or an opinion about an identified individual, or an individual who is reasonably identifiable.
Sensitive Information is information of the kind described in the Act, and the information that we collect about you may include some Sensitive Information (eg health information) which is relevant to your travel and activity plans. Under the Act, we are required to obtain your consent to the collection and use of any Sensitive Information. We will assume that you have consented to the collection, use and disclosure by us of any Sensitive Information which you provide to us for the purposes set out in this Privacy Policy, unless you tell us otherwise.
Our lawful bases for handling your information
Where the GDPR applies to our handling of your Personal Information, we rely on the following lawful bases: performance of a contract with you, or steps taken at your request before entering into a contract, when we arrange and book your travel; your consent, for direct marketing, for the use of Sensitive Information, and for the use of non-essential cookies; our legitimate interests in operating, improving and securing our business, where those interests are not overridden by your rights; and compliance with a legal obligation where one applies.
Where we rely on your consent, you may withdraw it at any time by contacting our Privacy Officer. Withdrawing consent does not affect the lawfulness of anything we did before you withdrew it.
Collection of Personal Information
We only collect Personal Information which is necessary in connection with our business purposes and to provide you with the Services you require.
For travellers, the purposes for which we collect Personal Information include:
• To contact you, answer your queries and provide you with information in relation to travel options, accommodation and adventure activities; and
• When requested to do so, arrange and book travel, accommodation and adventure activities on your behalf, invoice you for confirmed travel arrangements, and to complete related transactions.
For homestead owners and activity providers, the purposes for which we collect Personal Information include:
• To market and promote your homestead and/or the activities and services you provide to travellers; and
• To make bookings for travellers at your facilities and to provide travellers with your contact details.
The specific type of Personal Information collected and used by us varies according to the purpose for collection. However, in general this information includes:
• in relation to travellers: your name, addresses, contact details (eg telephone numbers, home and business address and email address), country of residence, flight and other travel details, payment card details (ie card type, security number, card holder name, expiry date and issuing bank and country, to pay for products and services offered), billing address, dietary requirements (if any), any health issues that may be relevant to your proposed travel or adventure activity arrangements, and information regarding past transactions or dealings that we have had with you, including information about any special requirements that you may have; and
• in relation to homestead owners and activity providers: your name, address, contact details (eg telephone numbers, home and business address and email address), and details about your property and/or the activities and services you provide to travellers, including cost and availability.
How do we collect the Personal Information
We collect most of the Personal Information we require directly from you by way of written forms, by telephone, in person, by our representatives, via our websites, through The Tailor Concierge (our AI assisted chat, described below), or by written correspondence from time to time. We may also collect Personal Information about you from third parties, such as from people making travel bookings on your behalf, or from travel agents, booking agents, travel representatives, or homestead owners whom you have contacted regarding travel or accommodation arrangements.
Before providing us with any details about a guest or accompanying traveller you must ensure that the individual is aware of the disclosure of their information to us and the purposes for which the information is collected and used by us, and of the individual’s ability to request access to the information that we hold about them. Our Privacy Policy applies equally to any guest or accompanying traveller.
It is important that we collect the information we require about you. Without this information, we may not be able to provide you with our travel and accommodation information and booking services.
Before providing us with personal information about another individual, you must first ensure that the other individual is aware of:
• the disclosure of their information to us and the purposes for which the information is collected and used by us; and
• the individual’s ability to request access to the personal information that we hold about them, and to advise us if they think the information is inaccurate, incomplete or out of date.
If at any time you supply Personal Information to us about yourself or any other person (eg another person travelling with you, or a photo you post), you represent (and we accept that information on the basis) that:
• without us taking any further steps as required by the Act or the GDPR, we may collect, use and disclose such Personal Information for the purposes set out in this Privacy Policy; and
• you are authorised to provide us with that Personal Information and the relevant person has consented to the disclosure to us.
For Site visitors
From time to time we may post surveys on our Website(s). Site visitors may wish to participate in a survey, promotion or competition. The personally identifiable information we collect when you participate in a survey, promotion or competition may include your full name, email address, telephone number and street address.
When you submit a review we collect your name or other identifier nominated by you, other personal details as may be provided by you, and your comments. We may publish these details.
If a card payment occurring on our Site is disputed, we may request from the supplier of the booked service a copy of the photo identification and other check-in details provided to them. This information may be used by us in connection with the dispute.
When you visit our Site, we record general information about your visit for statistical purposes. These statistics do not contain any personally identifiable information.
We retain contact and booking details in the My Account section. This provides you with the ability to check on previous purchases and allows your information to be prepopulated, ensuring a faster and easier booking process.
When you contact us for any queries, requests or for any other reason, we will collect contact information from you to suitably handle your request.
We may also use your information to provide you with updates and other information from time to time about travel, accommodation or adventure activities that can be booked through our Site and any other information about the goods, services and activities offered by us or third parties. You may notify us at any time if you do not wish to receive this information by clicking on the unsubscribe link within the email.
The Tailor Concierge (AI assisted chat)
Our Website(s) offer an AI assisted chat service, The Tailor Concierge, which answers questions about travelling with us and connects you with one of our Travel Designers. Use of the Concierge is entirely optional. You may contact us instead by telephone, by email, or through our enquiry form.
What we collect through the chat
The messages you send, any contact details you choose to provide (such as your name, email address, telephone number and country of residence), the details you give us about the journey you are considering, and a record of the date and time on which you consented.
How we use it
Your conversation is processed by an artificial intelligence language model in order to generate replies and to identify the details of your enquiry. A Travel Designer then reviews your enquiry and responds to you personally.
The Concierge does not make any decision producing a legal or similarly significant effect for you, and you are not subject to a decision based solely on automated processing. It does not price, confirm or book any travel arrangement. A member of our team attends to those matters.
Disclosure to our AI provider, including overseas
In order to generate replies, the content of your conversation is disclosed to Anthropic PBC, our artificial intelligence provider, and is processed on servers located outside Australia, including in the United States. This is a cross-border disclosure of your Personal Information for the purposes of Australian Privacy Principle 8, and a transfer to a third country for the purposes of the GDPR, which we make on the basis of appropriate safeguards including standard contractual clauses where these apply.
Anthropic processes this information on our instructions and does not use it to train its models.
Please do not provide Sensitive Information, payment card details or passwords through the chat.
Voice input
If you choose to speak an answer rather than type it, the speech is converted to text by your own web browser’s speech recognition service (for example, that provided by Google in Chrome or by Apple in Safari), subject to that provider’s terms and privacy policy. No audio recording is transmitted to or stored by us. This feature is optional, and typing is always available.
Storage, retention and deletion
Conversations and the contact details you provide through the Concierge are stored securely and retained for 12 months, after which they are deleted automatically. You may ask us at any time to access, correct or delete information collected through a chat, using the contact details set out at the end of this Policy.
Other recipients
Where you ask to be contacted, the details you provide are given to our Travel Designers and recorded in our customer relationship management system so that we can respond to you, in the same way as an enquiry submitted through our Website(s).
Use and Disclosure of Personal Information
We will not disclose your Personal Information for a purpose other than those connected with the primary purpose of collection, as set out in this Privacy Policy. Such purposes may include disclosing your Personal Information to third parties in certain circumstances as follows:
• if you agree to the disclosure;
• for the purpose for which it was collected, eg to provide you with the Services;
• where required or authorised by law;
• where disclosure is necessary to lessen or prevent a serious threat to life, health or safety, to enforce the law, or to investigate a suspected unlawful activity;
• to provide information to agents, contractors and service providers that we engage to provide us with goods and services or to act on our behalf (the identity of which may change from time to time), including our artificial intelligence provider, our email delivery provider and our customer relationship management provider;
• to provide you with updates and other information from time to time about travel options, homestead details and availability, adventure activities that can be booked through our offices, the packages that we offer, and other information about the goods, services and activities offered by us or third parties. You may notify us by written notice addressed to our Privacy Officer at any time if you do not wish to receive this information;
• in conjunction with the sale to a third party of TT or a related entity or a portion of our assets;
• where it is required to be disclosed for audit purposes; and
• where you would reasonably expect us to disclose information of that kind to a third party.
Subject to the preceding paragraph, we will only transfer personal information outside of Australia in accordance with the APPs and, where applicable, the GDPR, including:
• with your consent;
• where we are under a contractual obligation (with you or another party) to do so, or there is some other benefit to you; or
• where we have taken such steps as are reasonable in the circumstances to ensure that the overseas recipient does not breach the APPs in relation to that information.
Your information may be disclosed between TT and any of its related companies for the purposes set out in this Privacy Policy.
General Marketing
Sensitive Information is not used for marketing purposes.
TT may use and disclose Personal Information to provide you with information on offers, products and services offered by TT, and you consent to us doing so. We may also provide you with information on other products and services offered by TT, its partners or affiliates.
You may elect not to receive direct marketing communications from us by following the opt out instructions below. Please note that even if you have requested not to receive further marketing communications, we may still continue to provide you with information about changes to our terms and conditions for the supply of goods or services, questionnaires and other factual information, as permitted under the Act.
Every commercial electronic message we send carries our identity and a functional unsubscribe facility, in accordance with the Spam Act 2003 (Cth).
Tracking Tools and Cookies
We may from time to time use cookies to store your preferences, record session information and collect information on how you visit and access our Site. This information allows us to continually improve our services to provide you with a better overall experience.
Cookies are small files stored on your computer, tablet or other mobile device which allow us to recognise when you return to the Site. The use of cookies is an industry standard and they are generally used to improve the user experience. Cookies in and of themselves do not personally identify you, only your device.
You may from time to time have third party advertisements and promotional content delivered to you to ensure that we are showcasing offers that are relevant to you.
The Tailor Concierge
The Concierge stores four items in your own browser: an identifier for your visit, a record of which of two groups your visit has been assigned to so that we can measure whether the Concierge is useful, a reference to your conversation so that it is not lost if you move between pages, and a note of when you last closed the invitation so that we do not show it again too soon. These are stored in your browser rather than as cookies, and may be cleared at any time using your browser settings.
Necessary Cookies
These cookies are necessary for our website to function and as such are automatically installed. For example:
• helping route the website to your browser efficiently using our IT infrastructure;
• saving your data on multi-page forms and checkouts (if any); and
• letting you share or like our content on social networks if the relevant widgets are present on our pages. If you are logged into a social network, these widgets will automatically let you share content to your account if you choose.
Preference Cookies
These cookies save your preferences for any customisation of the website and are installed if you make a customisation.
Statistical Cookies
These cookies help us determine user behaviour on the website by reporting on your session. These technologies do not cross-reference your browsing with data from other websites. If you are located in the European Economic Area or the United Kingdom, we ask each tool to only use a session cookie, that is, one that instructs the browser to clear it once you have finished your session.
Technologies used:
• Google Analytics, for tracking general and custom behaviour on the website. We use all options that Google Analytics provides for maximising your privacy, including instructing it to anonymise your IP address, transmitting data by an SSL connection only, and manually stripping out any personally identifiable information before transmitting to Google Analytics.
Third Party Tracking and Marketing Cookies
These cookies cross-reference your browsing with data from other websites to provide us with more accurate aggregated reports and to enable us to serve you personalised advertising, including advertising based on your browsing behaviour on this website. This functionality is aggregated: we do not use any provider that allows us to see your specific data or to create an advertisement specifically for you. If you are located in the European Economic Area or the United Kingdom, we do not use these cookies.
Technologies used:
• Google Analytics Doubleclick, for providing us with aggregated reporting of your demographics and interests as determined by Google from any Google accounts you have, as well as allowing us to serve you advertising on third party websites based on your browsing behaviour.
• Google AdWords, as above, but this also allows Google to deduplicate your browsing sessions to this website across multiple browsers and devices for the purposes of tracking conversions.
• Facebook Ads, which allows us to serve you advertising based on your browsing behaviour on our website, as well as to see aggregate reports that deduplicate your browsing sessions to this website across multiple browsers and devices.
A/B Testing and Personalisation Cookies
These cookies allow us to improve our website by consistently showing you the same variation of a website and seeing which variation engages users more. This functionality is aggregated: we do not use any provider that allows us to see your specific data or to create an advertisement specifically for you. If you are located in the European Economic Area or the United Kingdom, we do not use these cookies.
CRM and CRM-Like Cookies and Tracking
These cookies allow us to view some aspects of your website browsing behaviour on an individual basis. No providers we use store any personally identifiable data in the cookie. What is stored instead is a pseudonymous identifier which is then tied to any additional data on the provider’s end, that is, not in your browser or on the website. If you are located in the European Economic Area or the United Kingdom, we do not use these cookies.
Technologies used:
• Hotjar, for generating usage heatmaps and browsing session recordings. Hotjar automatically removes any personally identifiable information from these reports.
• Google Analytics UserID, for combining the standard Google Analytics reports with a pseudonymous or encrypted identifier. This occurs only if you choose to personally identify yourself on this website, for example by creating an account or adding your personal details to a form. Any browsing behaviour you perform while logged out will not be associated with this identifier.
• ActiveCampaign, for combining your browsing behaviour with interactions we may have had with you outside of the website. This occurs only if you choose to personally identify yourself on this website, for example by creating an account or filling out a form that requires your personal details.
Most internet browsers will be set to automatically accept cookies when installed. Cookies can be deleted at any time on your device.
Linked Sites
Our Site may contain links to other websites. We are not responsible for the privacy practices or the content of those other websites. We encourage you to read the privacy statements of any linked sites, as their privacy policy may differ from ours.
Opting out
If at any time you no longer wish to receive any additional marketing or survey material from us, or do not want your information disclosed for direct marketing or survey purposes, contact our Privacy Officer using the details below and we will remove your details from our marketing database.
Storage and Disclosure of Personal Information Off-Shore
Personal Information you provide to us may be stored on TT’s members’ and/or its vendors’ servers in countries other than the jurisdiction in which your Personal Information was collected. The countries in which our current service providers store or process Personal Information include Australia, the United States and member states of the European Union.
If you access another TT website, or a partner or service website (eg accommodation bookings, airline), from our Website(s), you may be transferring to another country and to a website over which we have no control and take no responsibility. If you provide Personal Information using another TT website or a service website, you do so subject to the privacy laws (if any) in that jurisdiction.
Similarly, if you request us to assist you with other goods or services, we may disclose your Personal Information to our agents, contractors, service providers and program partners who are located overseas when arranging or making inquiries in respect of those goods or services.
Before disclosing your Personal Information to an overseas recipient, we take such steps as are reasonable in the circumstances to ensure that the recipient does not breach the APPs in relation to that information, as required by Australian Privacy Principle 8. Even so, an overseas recipient may be subject to a foreign law which could compel disclosure of Personal Information to a third party, for example an overseas authority, and you may not be able to seek redress under the Act in that jurisdiction.
If you have any concerns regarding the transfer of your Personal Information overseas, or if at any time you wish to withdraw your consent, please contact our Privacy Officer.
Please note that if you withdraw your consent we may not be able to provide the Services you have requested in whole or in part, or those Services may be compromised or otherwise not function properly.
Considerations when you send Information to us electronically
While we take such steps as are reasonable in the circumstances to protect your Personal Information from misuse, interference and loss, and from unauthorised access, modification or disclosure, including investing in security software, no data transfer over the internet is completely secure.
The open nature of the internet is such that information exchanged via the internet may be accessed and used by people other than those for whom the data is intended. If you send us any information, including without limitation Personal Information, it is sent at your own risk.
Please be aware that we provide links to third party websites as a service to our users, and that we are not responsible for the content or information collection practices of those pages. Please note that these websites’ privacy policies may differ from our Privacy Policy. We encourage you to review and understand their privacy practices before providing them with information.
Similarly, if you access a partner or service website (eg hotel, airline) from our Website, you do so and provide Personal Information in accordance with the terms and conditions, and the privacy policy, under which the provider of that website operates.
Security
TT endeavours to keep our information systems and files secured from unauthorised access. Our procedures to securely store Personal Information include electronic and physical security measures, staff training and use of password protection software.
In the event of a data breach that is likely to result in serious harm, we will comply with our obligations under the Notifiable Data Breaches scheme in Part IIIC of the Act, including notifying you and the Office of the Australian Information Commissioner where required to do so. Where the GDPR applies, we will also notify the relevant supervisory authority within 72 hours where required.
When the Personal Information we collect is no longer required, we will destroy or de-identify the Personal Information as soon as reasonably possible. TT may, however, retain Personal Information for as long as is necessary to comply with any applicable law, for the prevention of fraud, for insurance and governance purposes, in our IT back-up, for the collection of any monies owed and to resolve disputes.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Your rights regarding your Personal Information
You may:
• withdraw any consents given in relation to the handling by us of your Personal Information;
• request access to your Personal Information;
• request that we correct Personal Information that is inaccurate, out of date, incomplete, irrelevant or misleading; or
• request that we delete certain Personal Information,
by contacting our Privacy Officer using the details below. We will take reasonable steps, consistent with our obligations under the Act and, where relevant, the GDPR, to correct or delete that information if you so request. For security purposes, before we provide you with any Personal Information, we will ask you to provide evidence of your identity.
We will ordinarily respond to a request for access within 30 days.
You may request the source of any Personal Information we collect from a third party. We will provide this unless under the Act or other law there is a reason for this information being withheld.
If the GDPR or the UK GDPR applies to our handling of your Personal Information, you also have the right to object to processing, to request that we restrict processing, and to request that we transfer your Personal Information to another organisation in a structured, commonly used and machine readable format.
If there is a reason under the Act or other law for us not to provide you with any of your Personal Information, we will give you a written notice of refusal setting out the reasons for the refusal (except to the extent it would be unreasonable or unlawful to do so) and advise you of the mechanisms available to you to complain about the refusal.
How to make a complaint
If you believe we have not handled your Personal Information in accordance with this Privacy Policy or the Act, please contact our Privacy Officer using the details below. We will acknowledge your complaint promptly and will ordinarily respond within 30 days.
If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner at www.oaic.gov.au, by telephone on 1300 363 992, or by writing to GPO Box 5288, Sydney NSW 2001.
If you are located in the European Economic Area or the United Kingdom, you may also lodge a complaint with your local data protection supervisory authority.
Changes to Privacy Policy
This Privacy Policy is current as at August 2026. We may review and update this Privacy Policy from time to time to reflect changes in the law, changes in our business practices, procedures and structure, and the community’s changing privacy expectations. While it is not generally feasible to notify you of changes to this Privacy Policy, the latest version of the Privacy Policy will be available on our website at www.thetailor.com.
You can also contact our Privacy Officer to obtain the latest version of the Privacy Policy at any time.
Contact Information
You can contact us to:
• withdraw any consents given in relation to the handling by us of your Personal Information;
• request access to your Personal Information;
• request that we correct Personal Information that is inaccurate or out of date; or
• request that we delete certain Personal Information.
You should also contact us immediately if you believe:
• someone has gained unauthorised access to your Personal Information;
• you have a complaint in respect of the way we are dealing with your Personal Information; or
• we have breached our privacy obligations or your privacy rights in any way.
Contact Details
To request access to any Personal Information held about you in our records, to make a privacy related complaint, to obtain more information about this Privacy Policy or to enquire about privacy matters generally, please contact our Privacy Officer as follows:
The Privacy Officer, The Tailor Pty Ltd
Level 1A, 262 Marion Road, Netley, South Australia 5037, Australia
Telephone: +61 (0)8 8354 4405
Email: info