Privacy policy

Your name, email address and phone number when you give them to us, and the answers you give in the trip questionnaire.

If you create an account, we hold your sign-in identity. We never see or store your password — our authentication provider hashes it and we only ever receive a yes or no.

Basic, non-identifying usage counts that tell us which part of the questionnaire people stop at, so we can make it easier.

To plan and arrange your trip, to reply to you, and — only if you asked us to — to email you a link back to a questionnaire you had not finished.

We do not sell your data, and we do not use it for advertising.

In an encrypted, managed database hosted in Australia (Sydney region), operated on our behalf by Supabase. Data is encrypted in transit and at rest.

Files we share with you — itineraries, tickets — are held in private storage and are only reachable through short-lived links generated for you. They are never publicly addressable.

An unfinished questionnaire with no email address is deleted after 30 days.

An unfinished questionnaire with an email address is deleted after 12 months.

A submitted trip request is kept while your account exists.

You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Once accounts are live you will also be able to delete yours yourself from your profile page.

When you delete your account we remove your personal details. We keep only anonymous counts that cannot identify you.

We only send reminder emails if you ticked the box asking for them. Every one has a one-click unsubscribe link that works without signing in.

Transactional emails — a receipt, a link to set your password — are sent because you asked for something, and are not marketing.

We use one essential cookie to keep your questionnaire answers attached to your session. We do not use advertising or tracking cookies, and our usage statistics are collected without cookies.