Sydney Nimble Tours Privacy Policy
Last updated: 2 July 2026
Sydney Nimble Tours ABN: 41 627 142 018
1. Introduction
This Privacy Policy explains how Sydney Nimble Tours ("we", "us", "our") collects, uses, stores and protects your personal information when you visit our website or make a booking. We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using our website, you agree to the practices described in this policy.
2. Information We Collect
We collect personal information you provide directly, including your name, email address, phone number, booking details, tour preferences and information submitted via our contact form or email. Payments are processed securely by Stripe; we do not receive or store full card details. We also collect limited technical information automatically through Google Analytics, Squarespace cookies and Bokun, such as IP address, device and browser type, pages visited and general location (city/country level only). This data is generally used in aggregated and anonymised form.
2a. For Visitors from the UK and European Union
If you are located in the United Kingdom or European Union, the following additional rights and obligations apply under the UK GDPR and EU General Data Protection Regulation (GDPR).
Lawful basis for processing. We process your personal information on the following bases: contract performance (to manage and deliver your booking), legitimate interests (to improve our website and services through analytics), and legal obligation (to maintain business and tax records). Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
Your additional rights. In addition to the access and correction rights described in section 8, you have the right to request erasure of your personal data ("right to be forgotten"), to receive your data in a portable format, to restrict or object to processing, and to lodge a complaint with your national data protection authority. UK visitors may contact the Information Commissioner's Office at ico.org.uk. EU visitors should contact the supervisory authority in their country of residence.
Data transfers. Your information may be transferred to and processed in countries outside the UK and EU, including Australia and the United States. These transfers occur under standard contractual clauses or equivalent safeguards where required.
To exercise any of these rights, contact us using the details in section 13.
3. How We Use Your Information
We use your information to respond to enquiries, manage and confirm bookings, provide private tour services, schedule appointments, process payments, improve website performance, maintain business and tax records and send essential service emails. We do not sell or trade your information.
4. Third-Party Services
We use Bokun for bookings and Stripe for payments, Google Analytics for website analytics and Squarespace as our website host. These providers may process data outside Australia, including in the United States, Singapore and other jurisdictions. Each provider has its own privacy practices.
5. Overseas Disclosure (APP 8)
Because we use global cloud-based services, your information may be processed overseas. We take reasonable steps to ensure our providers comply with Australian privacy requirements.
6. Data Security
We take reasonable steps to protect personal information, including HTTPS encryption, secure cloud hosting, limited internal access, strong authentication and PCI-DSS compliant payment systems.
7. Data Retention
We retain personal information only for as long as necessary to provide services, meet legal and tax obligations and maintain accurate records. Data is then securely deleted or anonymised.
8. Access and Correction
You may request access to, or correction of, the personal information we hold about you.
9. Cookies & Tracking
Our website uses cookies for core functionality, analytics and site performance. You can disable cookies in your browser settings, though some features may not function correctly.
10. Email & Contact Forms
If you contact us, we may retain your message for customer service and record-keeping. We do not send promotional marketing emails and do not operate a mailing list.
11. External Links
Our website may contain links to external sites (for example, TripAdvisor). We are not responsible for their privacy practices.
12. Policy Updates
We may update this Privacy Policy from time to time. The most recent version will always be available on this page.
13. Contact Us
Email: greg@sydneynimbletours.com.au
Mobile / WhatsApp: +61 447 146 741
14. Privacy Complaints
If you believe we have breached the Australian Privacy Principles, please contact us using the details above. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by phone on 1300 363 992.