Privacy Policy

Wanderwise Holidays is bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains what personal information we collect on this website, why, how we use and disclose it, how you can access or correct it, and how to make a complaint. We collect only what we need to answer your enquiry or run your trip.

1. Information we collect

Enquiries and callback requests

When you use "Talk to a travel expert", the contact form or the AI assistant's contact form we collect your name, phone number (required), email (optional), destination, approximate travel date, number of travellers, approximate budget and any message you write. We record the date and time you agreed to be contacted.

Your account

If you create an account we store your name, email address, phone number (optional) and a securely hashed password, together with your booking and payment history so you can see it in your dashboard.

Bookings

To make a booking we collect the contact person's name, email and phone number, and for each traveller their name, age and (optionally) gender, plus any special requests you enter. We do not ask for passport or other identity numbers on this website; if a trip needs them our team will ask you separately and securely.

Payments

Payments are processed by Razorpay. Your card details are entered on Razorpay's secure checkout and are never seen or stored by us. We keep the booking amount, payment status, method and the Razorpay order and payment identifiers so we can confirm and reconcile your booking.

AI travel assistant

Messages you type into the assistant are sent to our AI service provider (OpenRouter, which passes them on to the AI model provider it routes to) to generate a reply, and are stored with an anonymous conversation ID so the assistant can remember the conversation. They are deleted automatically after 90 days. Please do not type sensitive information (such as card numbers, passwords or identity document numbers) into the chat.

Technical data and cookies

We use essential cookies to keep you signed in and to protect forms against forgery, and browser storage to remember your chat between pages. To limit abuse of the chat we use a one-way hash of your IP address, not the address itself. We do not use advertising or tracking cookies.

2. How we use your information

• To respond to your enquiry, prepare quotations and customised itineraries.
• To process, confirm and manage your booking, and to send confirmations and important trip updates.
• To provide customer support, handle cancellations and refunds, and run your account.
• To prevent fraud, spam and misuse of our website and keep it secure.
• To meet legal, tax and accounting obligations.

We do not sell your personal information and we do not send marketing messages unless you ask for them. If we ever do, you can opt out at any time.

3. Who we disclose information to, including overseas

• Payment provider: Razorpay (India), to process your payment.
• AI provider: OpenRouter and the AI model provider it routes requests to (mainly in the United States), to generate assistant replies from the messages you type.
• Trip suppliers: hotels, tour and transport operators, only the details needed to deliver your trip (for example traveller names).
• Service providers: email delivery and hosting providers, who process data on our behalf.
• Authorities: where required or authorised by law.

Some of these recipients are located outside Australia, in the countries noted above. By submitting your details you consent to that disclosure, and we take reasonable steps to make sure overseas recipients handle your information consistently with the APPs.

4. Consent

We contact you about an enquiry only because you asked us to and ticked the consent box. You can withdraw consent at any time by contacting us, after which we will stop contacting you about that enquiry.

5. How long we keep it

We keep enquiries and booking records only as long as needed for the purposes above and as required by law (for example tax and record-keeping obligations, typically five years). AI chat transcripts are deleted after 90 days. When information is no longer needed we destroy or de-identify it.

6. Security and data breaches

We use HTTPS, encrypted secrets, restricted staff access and server-side payment verification, and we never store payment card details. If a data breach is likely to result in serious harm we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

7. Access, correction and complaints

You may ask to access or correct the personal information we hold about you, or to delete your account, by contacting us at hello@wanderwise.test or +61 2 5550 0100. We will respond within a reasonable time (normally 30 days). If you are not satisfied with how we handle a complaint about privacy you can contact the OAIC at oaic.gov.au.

8. Children

This website is intended for adults. Bookings for minors must be made by a parent or guardian, who provides the child's details.

9. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.

10. Contact

Wanderwise Holidays
Level 5, 100 Sample Street, Sydney NSW 2000, Australia
Email: hello@wanderwise.test
Phone: +61 2 5550 0100