Privacy Policy

Effective Date: May 26, 2025

INTRODUCTION

At Travel Timor-Leste Pty Ltd (“travel.tl”, “we”, “us”, “our”), we are committed to protecting your privacy and maintaining the security of your personal information. This Privacy Statement explains how we collect, use, disclose, and safeguard your information when you visit our website (travel.tl) or use our services.

We adhere to the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) and are committed to ensuring that all our practices regarding personal information comply with these principles.

Please read this Privacy Statement carefully to understand our policies and practices regarding your information. By accessing or using our Service, you agree to this Privacy Statement. If you do not agree with our policies and practices, please do not use our Service.

1. INFORMATION WE COLLECT

We collect several types of information from and about users of our Service, including:

1.1 Information You Provide to Us

• Account Information: When you create an account, we collect your name, email address, password, phone number, and other registration information.
• Profile Information: Information you provide in your user profile, such as your photograph, preferences, and interests.
• Booking Information: When you make a booking, we collect details such as travel dates, selected accommodations, activities, car hire details, passenger information, and special requests or preferences.
• Payment Information: We collect payment details, including credit card numbers, cardholder names, expiry dates, and billing addresses. Note that we use secure payment processors and do not store complete credit card information on our servers.
• Communications: When you contact us, we record and maintain records of your communications, including emails, phone calls, and online chat sessions.
• Reviews and Content: Information you provide when you submit reviews, ratings, photos, or other content to our Service.
• Information About Others: If you provide information about other people (such as when booking on behalf of others), you confirm that you have their consent to provide their personal information to us.

1.2 Information We Collect Automatically

• Usage Information: Details of your visits to our Service, including traffic data, location data, logs, and other communication data and the resources that you access and use on the Service.
• Device Information: Information about your computer, mobile device, or other device that you use to access our Service, including IP address, device type, operating system, browser type, and language settings.
• Location Information: With your consent, we may collect precise location information from your device to provide location-based services.
• Cookies and Similar Technologies: We use cookies, web beacons, and similar technologies to collect information about your browsing behavior and preferences. For more information, please see the “Cookies and Similar Technologies” section below.

1.3 Information from Third Parties

• Social Media: If you choose to link your social media accounts to our Service, we may collect information from those accounts, such as your profile information and friends list.
• Business Partners: We may receive information about you from our business partners, such as airlines, hotels, car rental companies, and other travel service providers.
• Service Providers: We may receive information from service providers who help us with fraud prevention, credit risk reduction, and other business operations.

2. HOW WE USE YOUR INFORMATION

We use the information we collect for various purposes, including:

2.1 To Provide Our Services

• Processing and confirming your bookings with Service Providers
• Managing your account and providing customer support
• Processing payments and refunds
• Sending booking confirmations, updates, security alerts, and support messages
• Facilitating communication between you and Service Providers

2.2 To Improve Our Services

• Analyzing usage patterns and trends
• Conducting research and analysis to improve our Service and customer experience
• Testing and developing new features and functionality
• Troubleshooting issues with our Service

2.3 For Marketing and Advertising

• Sending promotional communications about new services, special offers, and other information we think you may find interesting
• Personalizing your experience by presenting products and offers tailored to you
• Administering contests, promotions, surveys, or other site features
• Measuring the effectiveness of our marketing campaigns

2.4 For Security and Compliance

• Verifying your identity and preventing fraud
• Monitoring and preventing unauthorized or illegal activities
• Enforcing our terms and conditions
• Complying with legal obligations

3. LEGAL BASIS FOR PROCESSING

We process your personal information based on one or more of the following legal grounds:

• Performance of a Contract: When we need to process your information to perform our obligations under a contract with you (such as our Terms and Conditions) or to take steps at your request before entering into such a contract.
• Legitimate Interests: When processing is necessary for our legitimate interests or those of a third party, provided your fundamental rights and freedoms do not override those interests.
• Consent: When you have given us specific consent to process your information for one or more specific purposes.
• Legal Obligation: When we need to comply with a legal or regulatory obligation.

4. DISCLOSURE OF YOUR INFORMATION

We may disclose your personal information to the following categories of recipients:

4.1 Service Providers

We share your information with Service Providers (such as accommodation providers, tour operators, car hire companies, and dive providers) to fulfill your bookings and provide the requested Travel Services.

4.2 Business Partners and Service Providers

We may share your information with business partners and third-party service providers who perform services on our behalf, such as:

• Payment processors and financial institutions
• Customer support providers
• IT and system administration services
• Marketing and advertising partners
• Analytics providers
• Professional advisors, such as lawyers, auditors, and insurers

4.3 Legal and Regulatory Authorities

We may disclose your information when required by law, regulation, or legal process, such as in response to a court order or a subpoena, or to comply with a regulatory investigation.

4.4 Business Transfers

If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Service of any change in ownership or uses of your personal information.

4.5 With Your Consent

We may share your information with other third parties when we have your consent to do so.

5. INTERNATIONAL DATA TRANSFERS

We may transfer your personal information to countries other than the country in which you are resident. Our servers and those of our third-party service providers may be located outside of Australia, including in countries that may not provide the same level of data protection as your home country.

When we transfer your personal information internationally, we take steps to ensure that appropriate safeguards are in place to protect your information and to ensure that it is treated in accordance with this Privacy Statement. These safeguards include:

• Transferring to countries that have been deemed to provide an adequate level of protection for personal information
• Implementing appropriate contractual measures, such as standard contractual clauses approved by relevant authorities
• Obtaining your explicit consent for certain transfers

By using our Service, you consent to the transfer of your information to these countries for the purposes described in this Privacy Statement.

6. DATA RETENTION

We retain your personal information for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal information, we consider:

• The amount, nature, and sensitivity of the personal information
• The potential risk of harm from unauthorized use or disclosure of your personal information
• The purposes for which we process your personal information and whether we can achieve those purposes through other means
• The applicable legal requirements

In some circumstances, we may anonymize your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you.

7. YOUR PRIVACY RIGHTS

Under the Australian Privacy Principles, you have certain rights regarding your personal information, including:

7.1 Right to Access

You have the right to request access to the personal information we hold about you. We will provide this information to you within a reasonable timeframe.

7.2 Right to Correction

You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.

7.3 Right to Deletion

In certain circumstances, you have the right to request that we delete your personal information. However, we may not always be able to comply with your request due to legal or legitimate business reasons.

7.4 Right to Object to Processing

You have the right to object to our processing of your personal information in certain circumstances, particularly for direct marketing purposes.

7.5 Right to Withdraw Consent

Where we rely on your consent to process your personal information, you have the right to withdraw that consent at any time.

7.6 Right to Lodge a Complaint

You have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe that we have violated your privacy rights.

To exercise any of these rights, please contact us using the details provided in the “Contact Us” section below.

8. COOKIES AND SIMILAR TECHNOLOGIES

8.1 What Are Cookies

Cookies are small text files that are placed on your device when you visit a website. They are widely used to make websites work more efficiently and provide information to the website owners.

8.2 How We Use Cookies

We use cookies and similar technologies for various purposes, including:

• Essential Cookies: These are necessary for the operation of our Service. They enable core functionality such as security, network management, and account access.
• Analytical/Performance Cookies: These allow us to recognize and count the number of visitors and see how visitors move around our Service. This helps us improve the way our Service works.
• Functionality Cookies: These are used to recognize you when you return to our Service. This enables us to personalize our content for you and remember your preferences.
• Targeting Cookies: These record your visit to our Service, the pages you have visited, and the links you have followed. We use this information to make our Service and the advertising displayed on it more relevant to your interests.

8.3 Managing Cookies

Most web browsers allow you to manage your cookie preferences. You can set your browser to refuse cookies or delete certain cookies. However, if you disable or refuse cookies, please note that some parts of our Service may become inaccessible or not function properly.

9. DATA SECURITY

We have implemented appropriate technical and organizational measures to protect the personal information we collect and process. The measures we use are designed to provide a level of security appropriate to the risk of processing your personal information.

However, please be aware that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

10. CHILDREN’S PRIVACY

Our Service is not directed to children under the age of 18, and we do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18 without verification of parental consent, we will take steps to delete that information as quickly as possible.

11. THIRD-PARTY LINKS AND SERVICES

Our Service may contain links to third-party websites, services, or applications that are not operated by us. If you click on a third-party link, you will be directed to that third party’s site. We strongly advise you to review the privacy policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

12. CHANGES TO THIS PRIVACY STATEMENT

We may update this Privacy Statement from time to time to reflect changes to our information practices. If we make material changes to this Privacy Statement, we will notify you by email or by posting a notice on our Service prior to the change becoming effective. We encourage you to periodically review this page for the latest information on our privacy practices.

13. CONTACT US

If you have any questions about this Privacy Statement or our privacy practices, please contact us at:

Travel Timor-Leste Pty Ltd Email: [INSERT EMAIL] Phone: 03 9002 0902 Address: 133 Toorak Road, South Yarra, Vic 3141

Privacy Officer: Sana Hosseini

If you are not satisfied with our response to your privacy concern, you may wish to contact the Office of the Australian Information Commissioner (OAIC) at:

Website: www.oaic.gov.au Phone: 1300 363 992 Email: enquiries@oaic.gov.au

Last Updated: May 26, 2025