Privacy Policy
Travelations Pty Ltd t/a Cruise Express

Introduction

Travelations Pty Ltd t/a Cruise Express (referred to in this Privacy Policy as “we”, “us” or “our”) is a travel agency based in New South Wales, Australia, providing travel planning, booking and related services to customers throughout Australia.

We recognise the importance of protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, hold, use, disclose and protect personal information when you interact with us, including through our website, by telephone, by email, in person or through other communication channels.

We are committed to handling personal information in accordance with applicable Australian privacy laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), to the extent those laws apply to our business.

By interacting with us, you acknowledge that you have had the opportunity to read this Privacy Policy. Where consent is required by law, we will seek your consent separately as appropriate.

What personal information do we collect?

The types of personal information we collect depend on the services you request and your interactions with us. This information may include:

• Identity information: your name, date of birth, title and other identifying details.
• Contact information: your residential or postal address, email address and telephone number.
• Travel information: your destination, travel dates, itinerary, booking references, travel preferences, accommodation requirements and details of your travel companions.
• Identification and travel document information: passport details, nationality, visa information and other information required to arrange travel or meet applicable entry requirements.
• Payment and transaction information: payment confirmations, transaction records, invoices, billing details and limited payment information required to process bookings. Payment card details may be handled by third-party payment providers.
• Special requirements and sensitive information: where necessary and permitted by law, information about health conditions, allergies, mobility assistance, dietary requirements, accessibility needs, religious requirements or other matters relevant to your travel arrangements.
• Communication records: enquiries, correspondence, feedback, reviews, complaints and records of communications with our staff.
• Marketing preferences: your subscription status, communication preferences and responses to promotional communications.
• Website and technical information: your IP address, browser type, device information, website usage data, approximate location derived from technical data and information collected through cookies or similar technologies.
• Other relevant information: information you voluntarily provide or that is reasonably necessary to arrange, administer or support your travel services.

We do not intentionally collect sensitive information unless it is reasonably necessary for our functions or activities and we are permitted to collect it under applicable privacy laws. Where required, we will obtain your consent before collecting sensitive information.

Please only provide personal information about another traveller where you are authorised to do so. Where appropriate, you should make that person aware of this Privacy Policy.

How do we collect personal information?

We may collect personal information directly from you when you:

• Visit or use our website
• Request a quote, make an enquiry or book travel
• Complete a booking form or other document
• Contact us by telephone, email, social media or in person
• Subscribe to our newsletter or marketing communications
• Participate in a promotion, survey or customer feedback activity
• Make a payment, request assistance or submit a complaint

We may also collect personal information from third parties where reasonably necessary and permitted by law. These parties may include:

• A person making a booking on your behalf
• Airlines, accommodation providers, tour operators, cruise companies and other travel suppliers
• Travel booking platforms, consolidators and distribution systems
• Travel insurance providers and other service providers
• Payment processors and fraud prevention services
• Government authorities or other organisations where authorised or required by law

Where we receive unsolicited personal information, we will assess whether we could have collected that information lawfully. If we could not have collected it lawfully, we will take reasonable steps to destroy or de-identify it where lawful and reasonable to do so.

Why do we collect, use and disclose personal information?

We collect, hold, use and disclose personal information for purposes reasonably connected with our business, including to:

• Respond to enquiries and prepare travel quotes
• Arrange, confirm, amend and manage bookings
• Provide flights, accommodation, tours, cruises, transfers, travel packages and other requested services
• Communicate with you about itineraries, booking changes, cancellations, payments and travel disruptions
• Provide information about passport, visa, destination entry and other travel requirements
• Arrange travel insurance or other additional services where requested
• Accommodate special assistance, accessibility, dietary or health-related travel requirements
• Process payments, refunds and booking adjustments
• Provide customer support and handle feedback, disputes and complaints
• Administer our business, maintain financial records and meet legal or regulatory obligations
• Protect against fraud, misuse, security incidents and other unlawful activity
• Improve our website, services and customer experience
• Send marketing communications where permitted by law and consistent with your preferences
• Exercise or defend legal claims and protect our legitimate business interests

We will not use or disclose your personal information for an unrelated purpose unless permitted or required by law, or where you have otherwise consented as required.

Who may we disclose personal information to?

To arrange and deliver your travel services, we may disclose relevant personal information to third parties, including:

• Airlines and other transport operators
• Hotels, resorts and accommodation providers
• Tour operators, cruise companies and destination management companies
• Travel booking systems, wholesalers and travel consolidators
• Travel insurance providers
• Payment processors, banks and financial service providers
• Technology providers, website hosts, cloud storage providers and customer management platforms
• Professional advisers, auditors and insurers
• Government agencies, border authorities, law enforcement agencies and other bodies where required or authorised by law
• Other persons or organisations you have authorised us to deal with on your behalf

We only disclose information that is reasonably necessary for the relevant purpose, subject to applicable legal requirements.

Some third parties may collect or handle your information under their own privacy policies and terms. We encourage you to review those policies where appropriate.

Overseas disclosure of personal information

Travel arrangements may require us to disclose personal information to recipients located outside Australia

Depending on your destination and the services you request, recipients may include overseas airlines, hotels, tour operators, cruise companies, booking platforms, insurers, payment providers and government or immigration authorities.

These recipients may be located in countries relevant to your itinerary, including New Zealand, the United States, the United Kingdom, countries within the European Union and countries throughout Asia, Africa, South America and other regions. The actual countries will depend on the travel services arranged and the providers involved.

We cannot identify every country in advance because international travel arrangements and service providers vary between bookings.

Where the Australian Privacy Principles apply, we will take the steps required by applicable law before disclosing personal information to overseas recipients, including taking reasonable steps in relevant circumstances to ensure that overseas recipients handle the information appropriately.

Overseas recipients may also be subject to the laws of their own countries. Those laws may differ from Australian privacy laws.

Sensitive information and special travel requirements

Some travel arrangements require us to collect sensitive information, such as health information, disability-related requirements, allergies or dietary needs.

We will collect this information only where reasonably necessary for the relevant service and where permitted by law. Where required, we will obtain your consent.

We may disclose relevant information to airlines, accommodation providers, tour operators, cruise companies, insurers or other service providers so they can accommodate your requirements or provide appropriate assistance.

Please tell us only what is necessary to arrange your travel safely and appropriately. You should inform us if your requirements change or if information previously provided is no longer accurate.

Website cookies and analytics

Our website may use cookies, analytics tools and similar technologies to operate effectively, understand website usage, improve performance and, where applicable, support advertising activities.

These technologies may collect information such as your IP address, browser type, device information, pages visited and interactions with our website.

You may be able to manage cookies through your browser settings or through any cookie preference tool provided on our website. Disabling certain cookies may affect website functionality.

Where we use third-party analytics or advertising services, those providers may handle information in accordance with their own privacy policies and applicable law.

We will provide additional notices or obtain consent where required for particular tracking technologies or uses of information.

Direct marketing

We may use your contact details to send you travel offers, promotions, destination information, newsletters and other marketing communications where permitted by law.

You can opt out of marketing communications at any time by using the unsubscribe facility in the communication or by contacting us using the details provided in this Privacy Policy.

We will action opt-out requests within the time required by applicable law.

Even if you opt out of marketing, we may continue to send communications necessary to manage your bookings, provide requested services, meet legal obligations or address important travel matters.

We will not sell your personal information to third parties for their own marketing purposes.

How do we store and protect personal information?

We take reasonable steps to protect personal information against misuse, interference, loss, unauthorised access, modification and disclosure.

Depending on the nature of the information and the systems we use, these measures may include:

• Restricting access to personal information to authorised personnel
• Using password protection, access controls and appropriate authentication measures
• Using reputable service providers and secure systems for storing and transmitting information
• Maintaining appropriate physical security for paper records and business premises
• Training relevant personnel in privacy and information-handling responsibilities
• Reviewing our information-handling practices and security measures periodically
• Taking reasonable steps to securely destroy or de-identify information when it is no longer required and retention is not required or authorised by law

We may store information electronically, in paper records, or through third-party systems and service providers.

While we take reasonable precautions, no method of electronic transmission or storage can be guaranteed to be completely secure.

How long do we retain personal information?

We retain personal information for as long as reasonably necessary to fulfil the purposes for which it was collected, including providing travel services, managing bookings, handling disputes, maintaining business records and meeting legal obligations.

Certain records may need to be retained for periods prescribed by applicable laws, including tax, accounting or other regulatory requirements.

When personal information is no longer needed and we are not required or authorised to retain it, we will take reasonable steps to destroy or de-identify it.

Retention periods may vary depending on the type of information, the services provided and our legal obligations.

Accessing and correcting your personal information

You may request access to personal information we hold about you and request that inaccurate, incomplete, out-of-date or misleading information be corrected.

To make a request, contact us using the details in Section 16 of this Privacy Policy. Please describe the information you wish to access or correct and provide enough information for us to identify the relevant records.

We may need to verify your identity before responding to your request. Where appropriate, we may ask you to provide further information to help us locate the relevant records.

We will respond within a reasonable period and in accordance with applicable law. In certain circumstances, we may be legally permitted to refuse access or correction. If we refuse a request, we will provide reasons where required by law and explain any available complaint options.

We do not charge for making an access or correction request, although an administration charge may apply to providing access in circumstances permitted by law. We will advise you of any applicable charge before proceeding.

Data breaches

If we become aware of a data breach involving personal information, we will assess and respond to the incident in accordance with our legal obligations.

Where the Notifiable Data Breaches scheme applies, we will investigate whether the incident is likely to result in serious harm and, where required, notify affected individuals and the OAIC as soon as practicable.

We will also take reasonable steps to contain the incident, reduce potential harm, and prevent similar incidents where appropriate.

Your choices and providing information

You may choose not to provide certain personal information. However, if the information is necessary to arrange or deliver your requested travel services, we may be unable to complete a booking or provide some services.

Where it is lawful and practicable, you may deal with us anonymously or using a pseudonym for general enquiries. However, anonymity may not be possible when making bookings, verifying identity, processing payments or meeting travel, safety or legal requirements.

You may also update your communication preferences or withdraw consent where consent is the basis for a particular use of your personal information, subject to legal and contractual requirements.

Contact us

If you have questions about this Privacy Policy, wish to access or correct your personal information, or would like to make a privacy complaint, please contact us:

Travelations Pty Ltd t/a Cruise Express
87/24 Buchanan Street Balmain NSW 2041
E: info@cruiseexpress.com.au
T: 1300 766 537
W: cruiseexpress.com.au

Please include “Privacy Request” or “Privacy Complaint” in the subject line of your correspondence, where applicable.

If you are dissatisfied with our response, or if the matter remains unresolved, you may be able to lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

W: https://www.oaic.gov.au
T: 1300 363 992

You may wish to review the OAIC’s current complaint process and eligibility requirements before lodging a complaint.

Third-party websites and services

Our website may contain links to third-party websites, booking platforms or service providers. We are not responsible for the privacy practices, content or security of websites we do not operate.

When you access a third-party website or use a third-party service, that organisation’s privacy policy and terms may apply. We recommend reviewing those documents before providing personal information.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, services, technology, information-handling practices or legal obligations.

The latest version will be published on our website with the updated effective or revision date.

Effective date: 1 October 2026
Last updated: 27 October 2026