Legal information
Privacy Policy
How we collect, use and protect your personal data – written in plain English and in line with the EU General Data Protection Regulation (GDPR).
Contents
Last updated: 29 October 2026
This Privacy Policy explains how Wonderful Australia (the website wonderful-australia.com) handles personal data when you visit this website or contact us about a tour. We collect as little data as possible: there are no contact forms, accounts or tracking tools on this site, and we only process the information you choose to send us by email or telephone.
1. Who is responsible for your data
The data controller within the meaning of the GDPR is:
Konopnickiej 2C, 11-200 Bartoszyce
Warminsko-Mazurskie, Poland
Email: contact@wonderful-australia.com
Phone: +44 7915 320589
We have not appointed a Data Protection Officer, as we are not legally required to do so. All privacy questions can be sent to the email address above.
2. What personal data we collect
2.1 When you contact us
If you write to us or call us, we process the data you provide, which typically includes:
- your name, email address and telephone number;
- the content of your messages and notes of our calls;
- travel preferences, such as dates, destinations, budget and number of travellers.
2.2 When you book a tour
To arrange a booking we also need the details required by hotels, airlines and tour operators – for example the full names as shown in passports, dates of birth, nationality, passport details, payment records and, where relevant, dietary requirements or mobility needs. Information about health (such as allergies or reduced mobility) is special-category data; we only process it with your explicit consent and only to make the necessary arrangements.
2.3 When you browse the website
Like any website, our hosting server automatically records technical data in log files: IP address, date and time of access, page requested, browser type and referring page. This data is used only to deliver the site and keep it secure, and it is not combined with other sources.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Answering your enquiry and preparing a proposal | Art. 6(1)(b) – steps taken at your request before entering into a contract |
| Booking and delivering your tour, including passing details to suppliers | Art. 6(1)(b) – performance of a contract |
| Handling dietary or health information | Art. 9(2)(a) – your explicit consent |
| Keeping accounting and tax records | Art. 6(1)(c) – legal obligation |
| Server log files and website security | Art. 6(1)(f) – legitimate interest in a secure, working website |
| Establishing or defending legal claims | Art. 6(1)(f) – legitimate interest |
We do not use your data for automated decision-making or profiling, and we do not send marketing newsletters. If we ever offer one, we will ask for your consent first.
4. Cookies and local storage
This website does not use analytics, advertising or social-media cookies. The only thing we store on your device is your cookie-consent preference, saved in your browser's localStorage so that the notice is not shown on every page. This entry is strictly necessary, contains no personal identifiers, is never sent to us and stays on your device until you clear your browser data.
Fonts, icons and scripts are served from our own server, so no third-party services receive your IP address when you load a page. Should we add analytics or other non-essential tools in the future, we will update this policy and ask for your consent before they are activated.
5. Who we share your data with
We never sell your personal data. We share it only where necessary:
- Tour suppliers in Australia – hotels, lodges, airlines, car-rental firms, guides and excursion operators – who need your details to provide the services you booked;
- IT service providers, such as our web hosting and email providers, acting as processors under a data processing agreement;
- banks and payment providers that process your payments;
- accountants, legal advisers and public authorities where required by law.
6. International data transfers
Because our tours take place in Australia, booking a trip necessarily involves transferring data to suppliers outside the European Economic Area. Australia does not currently have an EU adequacy decision. Where a transfer is needed to perform the contract you have asked us to arrange, it is based on Art. 49(1)(b) GDPR. Where appropriate, we use the European Commission's Standard Contractual Clauses (Art. 46 GDPR) with service providers. Australian businesses are also generally subject to the Australian Privacy Act 1988. You can request more information about these safeguards by email.
7. How long we keep your data
- Enquiries that do not lead to a booking: up to 12 months after our last contact, unless you ask us to delete them sooner.
- Booking and contract data: for the duration of the contract and then until the limitation period for claims expires (generally up to 6 years under Polish law).
- Accounting documents: 5 years from the end of the calendar year in which the tax obligation arose, as required by Polish tax law.
- Health and dietary information: deleted once your trip is completed or when you withdraw consent.
- Server log files: kept for a short period by our host, normally no longer than 30 days.
8. Your rights
Under the GDPR you have the right to:
Access
Obtain confirmation of whether we process your data and receive a copy (Art. 15).
Rectification
Have inaccurate or incomplete data corrected (Art. 16).
Erasure
Ask us to delete your data where there is no longer a legal reason to keep it (Art. 17).
Restriction
Limit how we use your data, for example while a correction is checked (Art. 18).
Portability
Receive data you gave us in a structured, machine-readable format (Art. 20).
Objection
Object to processing based on our legitimate interests (Art. 21).
Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal. To exercise any right, email contact@wonderful-australia.com. We reply within one month, which may be extended by two further months for complex requests, and may ask you to confirm your identity.
9. Right to lodge a complaint
If you believe we process your data unlawfully, you have the right to lodge a complaint with a supervisory authority. In Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warszawa. You may also contact the supervisory authority in the EU country where you live or work. We would appreciate the chance to resolve your concern first, so please feel free to contact us.
10. How we protect your data
We use appropriate technical and organisational measures to protect your data, including encrypted HTTPS connections for this website, password-protected and regularly updated devices, access limited to the people who need it, and sharing only the minimum details each supplier requires. No method of transmission over the internet is completely secure, so please avoid sending card numbers or passport scans by unencrypted email unless we have agreed a secure method.
11. Children's privacy
Our services are aimed at adults. We do not knowingly collect data directly from children under 16. When a family books a tour, the details of travelling children are provided by a parent or legal guardian and are used only to make the booking.
12. Changes to this policy
We may update this policy when our services, the law or the tools on this website change. The current version is always published on this page with the date of the last update. Significant changes affecting existing customers will be communicated by email.
13. How to contact us
For any question about this policy or your personal data, contact 100PA Bozena Stopa:
- contact@wonderful-australia.com
- +44 7915 320589
- Konopnickiej 2C, 11-200 Bartoszyce, Warminsko-Mazurskie, Poland
See also our Terms of Use.
Questions about your data or a trip?
Write to us or call – a real person reads and answers every message.
Contact us