This is the Privacy Policy of Shoaly Collective Incorporated (ABN 98 460 321 451) (“Shoaly Collective”, “we”, “us” or “our”). It applies to personal information handled in connection with the website www.visitshoalbay.au (“Site”) and any related newsletters, competitions, or marketing activities we conduct.
The purpose of this policy is to explain how Shoaly Collective intends to meet its obligations under: 1) the Privacy Act 1988 (Cth) and the Australian Privacy Principles (“APPs”); and, to the extent applicable, 2) the EU General Data Protection Regulation (“GDPR”); and 3) the UK Data Protection Act 2018 and UK GDPR (together “UK data protection law”). By accessing or using the Site or otherwise providing personal information to us, you acknowledge that you have read, understood and agree to this Privacy Policy, as updated from time to time.
We collect personal information that you knowingly provide to us when you use the Site or interact with us, as well as certain information collected automatically when you browse the Site. We aim to collect only the personal information that is reasonably necessary for our tourism‑related activities for Shoal Bay and the surrounding region.
The personal information we may collect includes:
Your name and contact details (such as email address and phone number).
Information you submit via:
Contact/enquiry forms.
Newsletter sign‑up forms.
Competition entry forms.
Your preferences and interests relating to events, offers or tourism experiences.
Technical information about your use of the Site (see “Website data and cookies” below).
We do not collect payment details via www.visitshoalbay.au, as all payments and bookings, if applicable, are handled through third‑party platforms or operators.
We collect personal information in several ways, including when you:
Submit an enquiry or feedback via the Site’s contact form.
Subscribe to our email newsletter or marketing updates.
Enter a competition or promotion that we run.
Interact with our digital campaigns, including retargeting ads that link back to the Site.
We also use technologies such as cookies, Google Analytics, Google Tag Manager and Meta Pixel to automatically collect information about how you use the Site, as described in the “Website data and cookies” section. In some cases, we may receive personal information from third parties such as email marketing platforms, advertising partners or local tourism partners, and will handle that information in accordance with this policy.
When you visit www.visitshoalbay.au, information collected may include:
Your device’s IP address or unique device identifier.
The date and time of your visit and the pages you viewed.
The referring website and links you click on our Site.
The type of browser and operating system you use.
This information is generally collected and used in aggregated form for analytics and reporting, to help us understand how people use the Site and to improve our content and services.
Shoaly Collective will generally use your personal information to operate and improve the Site and to support tourism‑related services and marketing for Shoal Bay. Typical purposes include:
Responding to your enquiries, feedback and requests.
Sending you newsletters, updates, event information and promotional offers where you have subscribed or where permitted by law.
Running competitions and promotions and contacting you if you enter or win.
Conducting analytics, market research and reporting to understand visitor interests and improve our content and campaigns.
Supporting digital advertising and retargeting activities, including serving more relevant ads based on your interactions with our Site.
Where required, we will seek your consent for particular uses (for example, certain direct marketing to individuals in the EU or UK) and you may withdraw your consent at any time using the unsubscribe or contact details below.
We may disclose your personal information to third parties where reasonably necessary for our operations or as required by law. These third parties may include:
Service providers who assist us with:
Website hosting, development and analytics (such as Google Analytics and Google Tag Manager).
Digital advertising and social media marketing (such as Meta).
Email marketing and newsletter distribution (including Mailchimp).
Data storage, IT support and administrative services.
Tourism partners, government or regional tourism organisations and local businesses where this is necessary to respond to your enquiry, fulfil a promotion, or provide information about relevant experiences.
Professional advisers such as legal, accounting or insurance providers.
We may also disclose personal information if required or authorised by law, such as in response to a court order, subpoena, warrant, or a request from a law enforcement or regulatory agency. In the event of a change in control, restructuring or transfer of some or all of our operations, we may transfer our relevant databases (including personal information) to the new entity, subject to confidentiality obligations and applicable laws.
Personal information collected through the Site may be stored in or accessed from systems located outside Australia where our service providers host or process data. For example:
Mailchimp is headquartered in the United States and stores and processes email marketing data on servers located in the US and via certain sub‑processors.
Other cloud or digital advertising providers we use may store or process data in locations including the United States, the European Union, Japan or other jurisdictions.
Where we transfer personal information outside Australia, we take reasonable steps to ensure that the overseas recipient will handle your information in a way that is consistent with the APPs and, where applicable, GDPR and UK data protection law (for example, through contractual safeguards or reliance on recognised data transfer mechanisms). By using the Site or providing personal information to us, you consent to such transfers, subject to any additional rights you may have under GDPR or UK data protection law.
Our Site uses cookies and similar technologies to recognise your device, enhance your browsing experience, and help us measure and improve the performance of the Site and our marketing activities. Cookies are small data files stored on your device that are not harmful and do not directly run programs or deliver viruses.
We use, or may use, the following:
Google Analytics and Google Tag Manager to analyse traffic, understand user behaviour and improve the Site.
Meta Pixel to help measure the effectiveness of our campaigns and to support retargeting ads that may be shown to you on Meta platforms or other websites.
Most browsers automatically accept cookies, but you can usually modify your browser settings to decline cookies if you prefer; however, this may affect some functionality on the Site. You can also use tools provided by Google and Meta to manage how your data is used for ads and analytics.
For individuals in the EU or UK, Shoaly Collective will process personal data only where a lawful basis under GDPR or UK data protection law applies. These bases may include:
Your consent (for example, to receive marketing communications or for certain cookies/analytics).
Performance of a contract or taking steps at your request before entering into a contract (for example, responding to specific travel‑related enquiries).
Our legitimate interests (such as promoting Shoal Bay tourism experiences, improving our services and preventing misuse of the Site), balanced against your rights and interests.
Compliance with legal obligations.
You are not generally obliged to provide personal information to us, but if you choose not to, we may be unable to provide some services (for example, sending newsletters or responding to certain enquiries).
Shoaly Collective takes reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. These steps include a combination of physical, technical and organisational measures, as appropriate to the nature of the information and our operations.
However, no system can be guaranteed as completely secure, and the transmission of information over the internet is at your own risk. Once we receive personal information, we will take reasonable steps to ensure it is kept accurate, up to date and protected, and that access is limited to people who need it for the purposes described in this policy.
We retain personal information for as long as reasonably necessary to fulfil the purposes for which it was collected, to comply with legal or regulatory requirements, or to resolve disputes and enforce our rights. When personal information is no longer required, we will take reasonable steps to de‑identify or securely destroy it in accordance with our data retention practices and applicable laws.
Under the Privacy Act, you have the right to request access to personal information we hold about you and to request correction if you believe that information is inaccurate, out of date, incomplete, irrelevant or misleading. If you would like to access or correct your personal information, please contact us using the details in the “Contact us” section below and provide sufficient detail to identify the information you seek.
We may need to verify your identity before giving access or making corrections, and in some cases we may charge a reasonable administrative fee to cover the cost of providing access where appropriate. In certain circumstances permitted by law, we may refuse access or correction; if this occurs, we will provide you with a written explanation.
If you are located in the EU or UK, you may have additional rights under GDPR or UK data protection law in relation to your personal data, subject to certain conditions and exemptions. These may include:
The right to be informed about how your personal data is used.
The right to request erasure of your personal data (“right to be forgotten”).
The right to obtain a copy of your personal data in a commonly used format (“data portability”).
The right to object to or restrict certain processing (including certain direct marketing).
The right to withdraw consent at any time where processing is based on consent.
The right to lodge a complaint with a supervisory authority in your country of residence.
To exercise these rights, please contact us using the details below, and we will respond in accordance with applicable law.
We may use your contact details to send you newsletters, event information, tourism news and promotional offers relating to Shoal Bay and the surrounding region, where you have subscribed or where this is otherwise permitted by law. These communications may be delivered via email and may be managed through Mailchimp or a similar email marketing platform.
You may opt out of receiving marketing communications at any time by using the unsubscribe link included in our emails or by contacting us directly. Even if you opt out of marketing, we may still contact you for non‑marketing purposes, such as responding to enquiries that you have submitted.
The Site may contain links to third‑party websites, platforms or services (including tourism operators, booking platforms and social media sites) that are not owned or controlled by Shoaly Collective. These links are provided for your convenience only and do not imply any endorsement or approval of those third parties.
Shoaly Collective is not responsible for the privacy practices or content of any third‑party sites, and any personal information you provide to those sites will be handled in accordance with their own privacy policies. You are encouraged to read the privacy policies of each website you visit that collects personal information.
If you have any questions, concerns or complaints about how Shoaly Collective handles your personal information, or if you believe your privacy has been breached, please contact us using the details below. We will take your complaint seriously, investigate it and endeavour to respond within a reasonable time.
If you are not satisfied with our response, you may lodge a complaint with:
The Office of the Australian Information Commissioner (OAIC), via www.oaic.gov.au or by using the contact details published on that site; or
If you are in the EU or UK, the relevant data protection supervisory authority in your country of residence.
For any privacy‑related queries, requests or complaints, please contact:
Shoaly Collective Incorporated
Shoal Bay NSW 2315
Email: info@shoalycollective.team
Please include enough information for us to identify you and understand your request or concern so we can respond appropriately.
Shoaly Collective may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements or other factors. Any updated version will be posted on www.visitshoalbay.au and will be effective from the date of posting, unless otherwise stated.