Privacy policy

Last updated: 23 November 2025

This Privacy Policy explains how Banubanu Beach Retreat (“Banubanu”, “we”, “us”, or “our”) collects, uses, and discloses personal information when you visit our website www.banubanu.com (the “Site”), contact us, or stay with us at Banubanu Beach Retreat on Bremer Island, Northern Territory, Australia.

We are committed to protecting your privacy and handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Who we are and how to contact us

Banubanu Beach Retreat is an eco island beach retreat located on Bremer Island, near Nhulunbuy in East Arnhem Land, Northern Territory, Australia.

If you have any questions about this Privacy Policy or how we handle your personal information, you can contact us at:

Banubanu Beach Retreat
PO BOX 1211
Nhulunbuy NT 0881
Australia
Email: hello@banubanu.com

2. What personal information we collect

2.1 Information you provide to us

We may collect the following types of personal information when you interact with us:

Contact details such as your name, email address, phone number and postal address.
Booking details such as dates of stay, number of guests, special requests, and package selections.
Payment-related information (for example, partial card details or payment confirmations) as provided by our booking and payment providers.
Communications you send to us, including emails, enquiry forms, feedback, complaints or testimonials.
Information you provide in relation to events, weddings, corporate groups or special experiences.
Any other information you choose to provide to us (for example dietary requirements, accessibility needs or preferences).

2.2 Information we collect automatically

When you visit our Site, we may automatically collect certain information about your device and how you use the Site, including:

IP address, browser type and version, and device type.
Pages viewed, links clicked, booking searches, and other usage information.
Date and time of visits, and referring websites.

This information is typically collected using cookies and similar technologies. For more information, see the “Cookies and analytics” section below.

2.3 Information from third parties

We may receive personal information about you from third parties, for example:

Online booking platforms and reservation systems we use to manage accommodation and tours.
Payment gateways and banks confirming that your payment has been processed.
Travel agents, tour operators or corporate partners making bookings on your behalf.
Social media platforms if you interact with our pages or content.

3. Why we collect and use your personal information

We collect, hold and use your personal information for purposes including:

Processing and managing your accommodation, tour or event bookings.
Communicating with you about your enquiries, bookings, changes, cancellations and requests.
Providing our services to you during your stay at Banubanu Beach Retreat.
Managing payments, refunds and accounting.
Sending you service-related messages (for example operational notices or safety information).
Responding to reviews, feedback, complaints or other communications.
Running our business, including administration, quality assurance, training and record keeping.
Marketing our accommodation, experiences, packages, events and special offers, where permitted by law and your preferences.
Improving our Site, services and guest experience.
Complying with our legal obligations and assisting law enforcement or regulatory authorities where required.

4. Legal basis for processing (EU/UK visitors)

Our Site is primarily targeted at visitors to Banubanu Beach Retreat in Australia. However, if you are located in the European Economic Area (EEA) or the United Kingdom, our legal bases for processing your personal data will typically include one or more of the following:

It is necessary to perform a contract with you (for example to manage your booking and stay).
It is necessary for our legitimate interests in operating and improving our business, marketing our services and ensuring the security of our Site and operations (balanced against your rights and interests).
It is necessary to comply with legal obligations to which we are subject.
You have given your consent (for example to receive certain marketing communications) which you may withdraw at any time.

5. Cookies and analytics

5.1 What are cookies?

Cookies are small text files that are placed on your device when you visit our Site. They help the Site function properly, remember your preferences, and provide aggregated statistics about usage.

5.2 How we use cookies

We may use cookies and similar technologies to:

Make our Site work as you would expect.
Remember your preferences (such as language or region).
Understand how visitors use our Site so we can improve it.
Measure the effectiveness of our marketing campaigns.

5.3 Third-party analytics and tools

We may use third-party analytics services (such as Google Analytics or similar tools) to collect information about how visitors use our Site. These services use cookies and other technologies to help us analyse usage patterns and improve the Site.

You can usually disable cookies in your browser settings, though some features of the Site may not function properly if you do so. For more information about cookies and how to manage them, visit your browser’s help pages.

6. Direct marketing

We may use your contact details to send you information about our accommodation, experiences, packages, promotions and news that we think may be of interest to you.

You can opt out of receiving marketing communications at any time by following the unsubscribe instructions in the message or by contacting us at hello@banubanu.com. Even if you opt out of marketing, we may still send you service or transactional messages related to your bookings or stay.

7. When we may share your personal information

We may share your personal information with trusted third parties where reasonably necessary for the purposes described in this Privacy Policy, including:

Booking and reservation providers that help us manage accommodation and tours.
Payment processors, banks and financial institutions that process payments and refunds.
IT service providers, website hosting providers, email providers and analytics providers who support our Site and systems.
Professional advisers such as accountants, auditors or lawyers.
Regulators, law enforcement agencies or authorities where required by law or to protect our rights or the safety of guests and staff.

Where we share your personal information with third-party service providers, we seek to ensure that they only use your information to provide services to us and that they handle your information in accordance with applicable privacy laws.

8. Overseas transfers

Our retreat is located in Australia, but some of our service providers and group partners may be located overseas or may store information on servers located outside Australia. This may include providers in countries such as the United States, the United Kingdom or the European Union, depending on the services we use from time to time.

Where we disclose personal information overseas, we will take reasonable steps to ensure that the recipient will handle it in a way that is consistent with the Australian Privacy Principles or otherwise ensure appropriate safeguards are in place.

9. How we protect your personal information

We take reasonable steps to protect the personal information we hold from misuse, interference and loss, and from unauthorised access, modification or disclosure. These steps may include:

Using secure systems and access controls.
Limiting access to personal information to staff and service providers who need it to perform their duties.
Maintaining appropriate physical, technical and administrative security measures.
Regularly reviewing our security practices and systems.

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

10. How long we keep your personal information

We keep personal information for as long as it is reasonably necessary for the purposes for which it was collected, or as required by law. When information is no longer needed, we will take reasonable steps to destroy it or de-identify it.

11. Your rights and choices

11.1 Access and correction (Australia)

You may request access to the personal information we hold about you and ask us to correct any information that you believe is inaccurate, out of date, incomplete, irrelevant or misleading. We will respond to your request within a reasonable time and may ask you to verify your identity.

11.2 Rights for EEA/UK residents

If you are located in the EEA or UK, you may have additional rights under data protection laws, including the rights to:

Request access to your personal data.
Request correction or erasure of your personal data.
Object to or restrict processing of your personal data.
Request data portability in certain circumstances.
Withdraw consent where processing is based on your consent.
Lodge a complaint with a data protection authority in your country.

11.3 How to make a request

To exercise any of the rights described above, please contact us using the details in the “Who we are and how to contact us” section. We may need to verify your identity before processing your request.

12. Third-party sites and services

Our Site may contain links to third-party websites or services, including booking platforms, social media sites and partner sites. We are not responsible for the privacy practices or the content of these third parties.

We encourage you to read the privacy policies of any third-party websites or services you use.

13. Children

Our Site and services are not specifically directed at children. However, family bookings may include information about children (such as names and ages) where reasonably necessary to manage the booking and stay safely and appropriately. We do not knowingly collect more information about children than is reasonably necessary for these purposes.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or the operation of our Site and services. The updated version will be posted on this page with a revised “Last updated” date.

We encourage you to review this page periodically to stay informed about how we handle your personal information.

15. Questions or complaints

If you have any questions about this Privacy Policy or how we handle your personal information, or if you wish to make a complaint, please contact us using the details above.

We will respond to your query or complaint within a reasonable time. If you are not satisfied with our response, you may be able to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) or another appropriate regulator.

16. Important disclaimer

This Privacy Policy is provided as a general description of how Banubanu Beach Retreat handles personal information. It is not legal advice. Because privacy laws and expectations can change, we recommend that you obtain independent legal advice to confirm that this Privacy Policy meets your specific business needs and legal obligations.