Privacy Policy

Discover Life Travel (ABN: 62 004 927 830) ("we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy outlines our practices regarding the collection, use, disclosure, and management of personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). We also incorporate international best practices, including the European Union's General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), where applicable.

1. Kinds of Personal Information We Collect

We collect and hold personal information that is reasonably necessary to provide our travel services and to fulfill our legal obligations.

1.1 General Personal Information

• Contact Details: Full name, residential address, email address, and telephone number.
• Identification: Date of birth, gender, and nationality.
• Travel Documents: Passport numbers, visa details, and photographs for identity verification.
• Financial Information: Payment details are collected via our secure partner, WeTravel. We do not store sensitive financial data like full credit card numbers on our own servers.

1.2 Sensitive Information

We only collect sensitive information with your express consent and when it is necessary for your travel arrangements. This includes:

• Health Information: Medical conditions, physical disabilities, or allergies that may affect your travel or require accommodation.
• Dietary Requirements: Information that may indirectly reveal your religious or philosophical beliefs.

1.3 Technical and Usage Data

• Log Data: IP addresses, browser types, and device information.
• Interaction Data: Information regarding how you use our website and AI chatbot, including conversation history and preferences.

2. Methods of Collection

We collect personal information through lawful and fair means, primarily directly from you.

2.1 Direct Collection

• Web Forms: Information you provide when booking a trip via our WeTravel-powered checkout.
• AI Chatbot: Data you communicate during a chat session on our website.
• Communications: Information provided via email, telephone, or in-person correspondence.

2.2 Indirect Collection

We may receive information from third parties, such as travel agents, authorized representatives, or from our technology partners (WeTravel and Chatbotbuilder.ai), to ensure the accuracy of your booking.

3. Purpose of Collection and Use

We collect, hold, and use your personal information for the following purposes:

• Travel Management: To process bookings, issue itineraries, and manage travel logistics.
• Communication: To send service-related notifications and respond to your inquiries.
• Identity Verification: To comply with international travel regulations and anti-money laundering (KYC/KYB) policies.
• Marketing: To provide you with updates, special offers, and newsletters, provided you have opted-in to receive such communications.
• AI Service Improvement: To train and enhance our chatbot's ability to provide accurate travel advice.

4. Disclosure of Personal Information

We may disclose your personal information to third parties in the following circumstances:

4.1 Service Providers and Partners

• Technology Platforms: WeTravel, Inc. (and its sub-processors such as Stripe, Airwallex, and Amazon Web Services) and Chatbotbuilder.ai.
• Travel Vendors: Airlines, hotels, tour operators, and local transport providers essential for your trip.

4.2 Regulatory and Legal Disclosure

• Law Enforcement: To comply with subpoenas, warrants, or other government requests.
• Border Authorities: To facilitate international travel and comply with immigration laws.

4.3 Overseas Disclosure

As we operate in the global travel market, your personal information is likely to be disclosed to recipients outside of Australia. These recipients are primarily located in the United States, the European Union, and the specific destination countries of your tour. We take reasonable steps to ensure that these overseas recipients provide a comparable level of privacy protection as required by the APPs.

5. Automated Decision-Making (ADM)

We utilize AI-enabled technologies, including rule-based tools and machine learning via Chatbotbuilder.ai, to assist in responding to inquiries and personalizing travel recommendations.

• Kinds of Decisions: These systems may make decisions regarding the prioritization of inquiries or the offering of specific promotions.
• Transparency: In accordance with APP 1 obligations effective December 2026, we will provide further information on any automated decision that could significantly affect your rights or interests. You have the right to request a human review of any such automated decision.

6. Data Security and Retention

We take all reasonable steps to protect your personal information from misuse, loss, and unauthorized access.

• Technical Measures: Data is encrypted during transmission (SSL/TLS) and at rest. Our systems are monitored for errors and irregular request patterns.
• Retention: We retain your data only for as long as it is needed for the purpose for which it was collected or as required by law (typically 7 years for financial records). When no longer needed, data is destroyed or de-identified.

7. Cookies and Tracking Technologies

Our website and chatbot use cookies to distinguish you from other users and to analyze traffic.

• Essential Cookies: Required for the operation of the booking engine.
• Analytics Cookies: Provided by partners like Google Analytics and Hotjar to improve our site performance.
• Advertising Cookies: Used to deliver relevant advertisements through platforms like Meta and LinkedIn.

You can manage your cookie preferences through our on-site consent banner or your browser settings.

8. Your Rights and Access

Under the Privacy Act, you have the right to access the personal information we hold about you and to seek its correction.

• Requests: Requests for access or correction should be made in writing to the contact details below.
• Verification: We may require you to verify your identity before processing your request.
• GDPR/CCPA Rights: Residents of the EU and California may have additional rights, including the right to data erasure and data portability.

9. Complaints and Enquiries

If you have a complaint regarding our handling of your privacy, please contact us. We take all complaints seriously and will respond within 30 days.

10. Policy Updates

We may update this policy from time to time to reflect changes in our business practices or legal obligations. The "Effective Date" at the top of this policy indicates when it was last revised.