Privacy Policy
This Privacy Policy explains how Discover Croatia AU collects, uses, stores and discloses personal information.
What information do we collect?
The information we collect depends on how you interact with us and may include:
- Name, email address and phone or WhatsApp number.
- City, suburb, state or province, postcode and country.
- Enquiry details, travel preferences, preferred dates, budget and cabin preferences.
- Booking number and information required to arrange and manage a booking.
- Dates of birth for age-related arrangements, applicable discounts, birthdays occurring during travel and aggregated customer demographic analysis.
- Dietary requirements, coeliac disease, food allergies and other relevant health or accessibility information that needs to be communicated to a cruise, tour or accommodation provider.
- Information contained in emails, telephone calls, WhatsApp messages and forms submitted through our website.
- Technical information such as your IP address, browser, device, pages visited and website interactions where collected automatically by our website, security or analytics services.
You can browse most of our website without identifying yourself. However, we need certain information to respond to an enquiry or arrange a booking.
Sensitive and dietary information
Dietary, allergy, medical and accessibility information is collected only where it is relevant to safely arranging or providing your holiday.
By voluntarily providing this information, you consent to us using it and disclosing it to the relevant cruise, tour, accommodation or other travel provider where necessary for your booking.
Please provide only information that is relevant to your travel arrangements. If a traveller has a severe or life-threatening allergy, please also contact us directly so we can confirm that the information has been received.
Credit card information
We do not collect or store your full credit card details through our website.
If you pay by credit card, we provide a secure payment link that allows you to enter your card details directly into the payment provider’s system. We do not see or retain your full credit card number.
What do we use your information for?
We may use personal information to:
- Respond to enquiries: To understand what type of holiday you are seeking, contact you and provide relevant information or recommendations.
- Create and manage bookings: To check availability, make reservations, process payments, prepare travel documents and communicate information about your booking.
- Provide travel services: To communicate relevant passenger, dietary, allergy, medical or accessibility information to the vendors providing your holiday.
- Contact you: To communicate by email, telephone or WhatsApp about an enquiry or booking.
- Improve our services: To understand customer needs, improve our website, develop products and improve customer service.
- Analyse customer demographics: To understand matters such as customer age ranges, locations, travel preferences, budgets and product demand. This information is generally analysed in aggregated form and may be used to guide our website content, SEO and business planning.
- Maintain business records: To maintain booking, payment, accounting and customer-service records where reasonably required.
- Protect our website and business: To detect spam, fraud, security problems or misuse of our systems.
Marketing emails
Submitting an enquiry or making a booking does not automatically subscribe you to promotional emails.
We may send Croatia holiday news or promotional offers where you have opted in or where otherwise permitted by law. Marketing emails include an unsubscribe option.
We do not use dietary, medical or other sensitive information for marketing.
How do we store and protect your information?
We use reasonable technical and organisational measures to protect personal information from misuse, loss and unauthorised access, modification or disclosure. These measures may include:
- HTTPS/SSL encryption for information transmitted through our website.
- Restricted access to WordPress, Microsoft 365, booking systems and business records.
- Authenticated email delivery and multi-factor authentication where available.
- Security, firewall, backup and website-monitoring services.
- Limiting the information collected and deleting unnecessary copies.
Information submitted through our Passenger Information Form and Terms & Conditions Declaration Form is emailed to our Microsoft 365 Outlook account and stored with the relevant booking records.
Entries from those forms are scheduled for permanent deletion from the live WordPress database after 7 days. Temporary copies may remain in normal website backups or technical logs until those backups or logs are automatically replaced or deleted.
General enquiry records may be retained for longer where needed to manage an enquiry, maintain customer-service history, respond to repeat enquiries or undertake aggregated business analysis.
Booking, payment, taxation and accounting records may be retained for the period required by applicable Australian law. Other information is retained only while reasonably required for the purpose for which it was collected.
No internet transmission or storage system can be guaranteed to be completely secure.
Do we use cookies?
Yes. Our website and its service providers may use cookies and similar technologies for:
- Website operation and security.
- Form functionality and spam prevention.
- Remembering preferences.
- Measuring website traffic and page usage.
- Understanding how visitors find and use the website.
You can control or disable cookies through your browser settings. Disabling cookies may affect some website or form functions.
Do we disclose information to outside parties?
We do not sell personal information.
We may disclose personal information to organisations involved in responding to your enquiry or arranging and delivering your holiday, including:
- Cruise, tour and charter vendors.
- Hotels, transfer companies and other travel-service providers.
- Booking, payment and reservation platforms.
- Website hosting, email, security, analytics and information-technology providers.
- Professional advisers, accountants, insurers, regulators or government authorities where reasonably required or legally necessary.
We disclose only the information reasonably required for the relevant purpose. For example, a vendor may need passenger names, contact details, dates of birth, dietary requirements or relevant allergy information, but may not need all information we hold.
Overseas disclosures
Travel bookings require information to be provided to overseas vendors and service providers.
Information may be disclosed to recipients in Croatia and in any other country included in your itinerary, as well as to technology or booking-service providers that process information overseas.
The privacy laws applying to an overseas recipient may differ from Australian privacy laws. We take reasonable steps to limit overseas disclosures to information required to arrange and provide the relevant services.
Accessing, correcting or deleting your information
You may contact us to:
- Ask what personal information we hold about you.
- Request correction of inaccurate or outdated information.
- Ask us to delete information that is no longer required.
- Withdraw a marketing-email subscription.
- Raise a privacy issue.
Email res@discovercroatia.com.au or call or WhatsApp +61 2 9212 1507.
We will action a deletion request where reasonably possible. Some information may need to be retained to complete a booking, resolve an issue, or meet legal, accounting or record-keeping requirements.
Privacy issues
Please contact us first if you believe your personal information has not been handled appropriately. We will review the issue and respond within a reasonable period.
You may also contact the
Office of the Australian Information Commissioner
for information about Australian privacy rights.
Changes to this Privacy Policy
We may update this Privacy Policy when our practices, systems or legal obligations change. The current version will be published on this page.
This policy was last updated in July 2026.
Please also review our
Terms and Conditions.