Privacy Policy

1 · What we collect

• Identity and contact details — name, email, phone, and company details for corporate bookings
• Booking and manifest information — guest names and numbers for each sailing (a passenger manifest is a maritime safety requirement)
• Payment information — processed by our booking and payment providers; we receive transaction records but do not store full card numbers
• Dietary, medical and accessibility information you choose to disclose so we can host you safely — this is sensitive information, collected with your consent and used only for safety and service
• Images and CCTV — event photography and video (you may object in writing before departure), and safety CCTV or crew safety cameras aboard and at boarding areas
• Website and marketing data — enquiry form contents, email engagement, and cookies/analytics data about how the site is used

2 · Why we collect it

To provide and personalise sailings, charters and events; to meet maritime safety and licensing obligations (including manifests and responsible service of alcohol); to process payments and administer bookings, credits and refunds; to send service and safety communications; to send marketing with your consent (every message includes an unsubscribe); to maintain safety and security (including CCTV); to handle incidents, claims and insurance; and to comply with law.

3 · Who we share it with

Our booking platform and payment processors; email and SMS service providers; caterers and chefs (dietary requirements only, minimised); our insurers, brokers and professional advisers where relevant to a claim or incident; police, regulators and authorities where required or authorised by law; and IT providers who host our systems. We do not sell personal information.

4 · Overseas disclosure

Some service providers store data on servers located overseas (commonly the United States). We take reasonable steps, consistent with Australian Privacy Principle 8, to ensure overseas recipients handle personal information in accordance with Australian privacy standards.

5 · Security and retention

We use reputable providers, encryption in transit, and access controls limited to staff who need the information. Full payment card numbers are not stored by Voyō. We retain information only as long as needed for the purposes above and for legal, insurance and accounting requirements, then delete or de-identify it. CCTV is retained for a limited period unless required for an incident.

6 · Data breaches

If a data breach occurs that is likely to result in serious harm, we will act in accordance with the Notifiable Data Breaches scheme, including notifying affected individuals and the Office of the Australian Information Commissioner (OAIC) where required.

7 · Cookies and analytics

The site uses cookies and analytics to operate booking functionality, remember preferences, and measure how the site and our advertising perform. You can control cookies in your browser; disabling them may affect booking functionality.

8 · Access, correction and complaints

You may request access to or correction of your personal information, or make a privacy complaint, by contacting info@voyo.com.au. We respond within a reasonable time (usually 30 days). If unresolved, you may complain to the OAIC at oaic.gov.au.

9 · Contact and updates

Privacy Officer, Voyo Pty Ltd — info@voyo.com.au · 1300 902 432. We may update this policy from time to time; the current version is published at voyo.com.au/privacy.