개인정보 처리방침

DRAFT — operator to finalise before go-live. Items marked [TBD] must be completed. This policy is written with the Australian Privacy Principles (APPs) in mind.

Last updated: [TBD date]

What we collect

  • Your email address (to send your voucher and order updates).
  • Traveler details the supplier requires for the product you book, which may include name, passport number, date of birth, nationality, gender and phone number.
  • Order details (product, date, quantity, amount). We do not store your card details — Stripe does.
  • If you choose to log in: your login email and Firebase user ID, plus your Google account name if you sign in with Google. We never receive a password.

Why we collect it

To issue your ticket through our supplier, deliver your voucher, provide customer support, and meet legal and accounting obligations.

Who we share it with — including overseas (APP 8)

To issue your ticket we disclose information to:

  • KKday (Taiwan) — our ticket supplier, which receives the traveler details needed to issue your ticket.
  • Stripe (United States and other locations) — payment processing.
  • Firebase Authentication (Google LLC, United States) — customer login (email link and Google sign-in). It processes your login email and user ID only, never traveler details such as passport numbers.
  • Resend (United States) — sending emails.
  • Google Gemini (United States, paid tier; your data is not used to train models) — our customer-support assistant, which only receives redacted messages.
  • Telegram — internal operator alerts containing masked summaries only (never passport numbers).

These recipients are overseas and may not be bound by the APPs. By agreeing at checkout you consent to these disclosures.

How we protect it

Traveler details are stored encrypted (AES-256-GCM). Access is limited to the operator, and every access to raw traveler data is logged.

How long we keep it

  • Raw traveler details: deleted 30 days after your visit date (7 days for cancelled orders).
  • Voucher PDFs and email delivery records: kept at least 120 days after your visit date (for disputes), then deleted.
  • Support chat messages: deleted after 90 days of inactivity.
  • Login account details (email, user ID): kept until you ask us to delete your account. Login sessions last at most 14 days.

Access, correction and complaints

You can ask to access or correct your information, or make a complaint, at [TBD privacy contact email]. We'll respond within [TBD] days. If you're not satisfied, you can contact the Office of the Australian Information Commissioner (OAIC).