Privacy & Security Policy

1. Introduction & Scope

OSOS Tours Pty Ltd (ABN 70 693 929 618) ("we", "us", "our") is committed to protecting your personal information and respecting your privacy. This Privacy & Security Policy outlines how we collect, use, store, and disclose your personal information in accordance with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth).

2. Information We Collect

We collect personal information necessary to deliver our tour experiences, process bookings, and deliver post-tour media packages. This includes:

• Contact Information: Name, email address, phone number, and residential/billing address.
• Booking & Payment Details: Credit card information, transaction history, and special assistance requests (processed securely via encrypted payment gateways like Stripe).
• Emergency & Health Data: Pre-existing medical disclosures, severe allergies, and emergency contact details supplied prior to departure.
• Media & Visual Data: Photographs and digital video footage captured during tours (in accordance with our Terms & Conditions).

3. How We Collect Personal Information

We collect information directly from you when you:

• Complete a booking or inquiry form on our website (osos.com.au);
• Communicate with us via live chat, WhatsApp, VoIP calls, or email;
• Participate in an OSOS Tours itinerary where photography or video filming occurs;
• Subscribe to our newsletter or marketing communications.

4. Use of Personal Information

Your information is strictly used to:

• Process tour bookings, confirm reservations, and facilitate customer support;
• Customize tour itineraries and ensure passenger safety and medical readiness;
• Capture, edit, and deliver post-tour digital media galleries;
• Send transactional updates, booking confirmations, and opt-in promotional materials;
• Comply with statutory obligations under Victorian commercial tour operator and bus service licensing.

5. Storage, Security & Data Retention

We take all reasonable steps to safeguard your personal data against loss, unauthorized access, modification, or disclosure:

• Payment Processing: All online financial transactions are processed through PC-DSS compliant payment providers (e.g., Stripe). We do not store raw credit card numbers on our servers.
• Digital Media Storage: Post-tour video footage and photography are stored in secure cloud environments with restricted access. Group tour media galleries are shared via secure, unlisted download links provided to tour participants.
• Technical Security: Our web platforms utilize SSL/TLS encryption, secure server infrastructure, and strict administrative access controls.

6. Disclosure of Personal Information

We do not sell, rent, or trade your personal information to third parties. We may disclose personal data only to:

• Essential Service Providers: Third-party contractors and technology platforms (e.g., payment processors, booking engines, secure media hosting suites) required to operate our services.
• Emergency & Medical Services: First responders or medical personnel in the event of an emergency during a tour.
• Legal & Regulatory Authorities: Government bodies (such as Parks Victoria or Victoria Police) where required or authorized by law.

7. Media Privacy & Direct Marketing

8. Accessing and Correcting Your Information

Under the Privacy Act, you have the right to request access to the personal information we hold about you and to request corrections if it is inaccurate or out of date. To make a request, please contact our Privacy Officer at privacy@osos.com.au.

9. Contact Us & Complaints

If you have questions about this policy or wish to lodge a privacy complaint, please contact us at: