This privacy policy applies to The Central Highlands Tourist Railway (operating as Daylesford Railway), 18 Raglan Street Daylesford Victoria 3460. ABN: 76 223 529 75. Daylesford Railway respects the privacy of individuals by treating all personal information as confidential and by handling it in accordance with the Privacy Act 1988 and the National Privacy Principles. We respect your right to privacy and understand the need to protect your personal information.

This Privacy Policy sets out how we manage your personal information that we collect about you. It also describes, in general terms, the types of personal information we hold, for what purposes and also sets out how that information is collected, used, stored and disclosed by Daylesford Railway. Please read this privacy policy before using the website at www.daylesfordrailway.com.au (the “website”) or submitting any personal information.

By using the website, you are accepting the practices described in this privacy policy. You are encouraged to review the privacy policy whenever you visit the website to make sure that you understand how any personal information you provide will be used. Your personal information is not collected if you only browse this website.

Collection of Your Personal Information

As a heritage railway operator, during the course of its activities, Daylesford Railway will collect, use and disclose personal information from:

a. Customers who use the online booking facility;

b. Visitors to and users of our website;

c. Individuals who call the Daylesford Railway volunteer team or otherwise contact us.

This information can be collected:

a. directly from you;

b. when you make a booking via the website;

c. where you access and interact with the website or the volunteer team; or

d. from other sources.

The information collected may include your name, mailing or residential address, telephone number, email address and other transaction details.

If you choose not to provide us with your personal information, we may not be able to provide the information, goods or the service you may require, or to fulfil one or more other purposes of collection of your personal information.

We do not collect your credit card or banking details as online payments are handled by Bendigo Bank and Fareharbor. Please check their websites for privacy policies and security measures.

USE AND DISCLOSURE OF YOUR PERSONAL INFORMATION

Personal information is used by Daylesford Railway for its legitimate business purposes, as disclosed at the time of collection.

Use and Disclosure of Personal Information

You acknowledge and consent that by providing your personal information to us that we may use and disclose your personal information for the purposes for which it was collected or for a related or ancillary purpose such as:

a. to facilitate and process your booking;

b. to carry out or respond to your requests;

c. to our third party service providers to assist us in providing and improving our services to you, and to analyse trends in sales and better understand our customer’s needs or to develop, and improve market our products and services to you;

d. for regulatory reporting and compliance with our legal obligations;

e. to various regulatory bodies and law enforcement officials and agencies to protect against fraud and for related security purposes;

f. to seek your feedback in relation to customer satisfaction and our relationship with you;

Our Use of Cookies

We use cookies to enhance your interaction and convenience with our website and do not use cookies to record any personal information.

Cookies may record information about your visit, including the type of browser and operating system you use, the previous site you visited, your server’s IP address, the pages you access and the information downloaded by you. While this anonymous statistical data may be aggregated and used in broader statistical analysis by us and our web monitoring service provider to improve our services, at no time can we personally identify you as the source of that data. Your browser may allow you to disable cookies.

ACCURACY OF YOUR PERSONAL INFORMATION

Daylesford Railway aims to ensure that all personal information held about you is collected and used in accordance with the National Privacy Principles. If you believe your personal information as held by is not accurate, complete or otherwise requires amendment, please do not hesitate to contact us.

PERSONAL INFORMATION SECURITY

We have implemented appropriate physical, electronic and managerial security procedures in order to protect personal information from loss, misuse, alteration or destruction. Access to your personal information is limited to those who specifically need it to conduct their responsibilities.

DESTRUCTION OF PERSONAL INFORMATION

Daylesford Railway takes reasonable steps to destroy or permanently de-identify your personal information where it is no longer required and to protect your personal information from unauthorised access, disclosure, loss, misuse and alteration.

ACCESS TO YOUR PERSONAL INFORMATION

Daylesford Railway will give you access to your personal information which we hold about you. Your right to access your personal information as held by Daylesford Railway is subject to certain exceptions allowed by law.

Your right to access your personal information may be affected by matters such as:

a. the information being commercially sensitive to Daylesford Railway or one of its service providers or customers;

b. access posing a threat to life or health of any individual;

c. access having an unreasonable impact on the privacy of others;

d. access being unlawful;

e. access prejudicing enforcement activities relating to criminal conduct or other breaches of law;

f. a frivolous or vexatious request by you or some other person on your behalf;

g. the existence of a legal dispute or potential legal dispute; and

h. denial of access being required or authorised by law.

If your access to your personal information is denied, we will provide a reason.

Other than the above, we will not disclose your personal information without your consent unless disclosure is either necessary to prevent a threat to life or health, authorised or required

by law, reasonably necessary to enforce the law or necessary to investigate a suspected unlawful activity.

Any permitted handling of personal information under any exemptions under the Act will take priority over this Privacy Policy to the extent of any inconsistency.

Linked Sites

Our website may contain links to others which are owned or operated by other parties. You should make your own enquiries as to the privacy policies of these parties. We are not responsible for information on, or the privacy practices of, such websites.

Transmission of Your Data

While care is taken to protect your personal information on the website, unfortunately no data transmission over the Internet is guaranteed as 100% secure. Accordingly, we cannot ensure or warrant the security of any information you send to us or receive from us online. This is particularly true for information you send to us via email as we have no way of protecting that information until it reaches us. Once we receive your personal information, we are required to protect it in accordance with the Act.

OBTAINING MORE INFORMATION ABOUT YOUR PRIVACY

More information about your privacy rights, the Act or the National Privacy Principles is available from the Federal Privacy Commissioner’s website at www.privacy.gov.au

RESOLVING YOUR PRIVACY CONCERNS

If you are concerned with the way your personal information has been handled, please contact us. If your personal information has not been handled in an appropriate way, we will take steps to remedy your concerns in a reasonable time. Any privacy complaint will be handled by Daylesford Railway in accordance with this Privacy Policy.