GDPR Compliance Statement

Last Updated: September 2, 2026

1. Applicability

While our operations are based in Australia, we recognize that individuals from European Union countries may submit booking inquiries. This statement outlines our alignment with General Data Protection Regulation (GDPR) principles for EU residents.

2. Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: You provide explicit consent when submitting booking inquiry forms
• Contractual necessity: Processing is required to respond to your inquiry and potentially establish a service agreement
• Legitimate interests: Maintaining records necessary for business operations and safety protocols

3. Data Subject Rights

If you are an EU resident, you have the following rights:

Right to Access

You may request confirmation of whether we process your personal data and obtain a copy of that data.

Right to Rectification

You may request correction of inaccurate or incomplete personal information.

Right to Erasure

You may request deletion of your personal data, subject to legal retention obligations for wilderness guiding operations and liability purposes.

Right to Restrict Processing

You may request limitation of how we process your data under certain circumstances.

Right to Data Portability

You may request transfer of your data to another service provider in a structured, machine-readable format.

Right to Object

You may object to processing of your personal data for specific purposes.

Right to Withdraw Consent

You may withdraw previously given consent at any time without affecting the lawfulness of processing before withdrawal.

4. Data Protection Officer

For GDPR-related inquiries, contact our data privacy coordinator:

Email: [email protected]
Subject line: GDPR Inquiry

5. Data Retention

Personal data is retained for two years following initial inquiry submission. This retention period is necessary for:

• Operational continuity for multi-year expedition planning
• Legal liability requirements under Australian wilderness guiding regulations
• Insurance claim processing timeframes

6. Data Transfers

We do not transfer personal data outside of Australia. All data storage and processing occurs on Australian servers.

7. Automated Decision Making

We do not use automated decision-making or profiling systems. All booking inquiries are reviewed and responded to by human staff.

8. Security Measures

We implement appropriate technical and organizational measures to protect personal data, including:

• Encrypted data transmission
• Access controls limiting staff data access
• Regular security assessments
• Data backup procedures

9. Breach Notification

In the event of a data breach affecting EU residents, we will notify affected individuals within 72 hours of breach discovery, as required by GDPR.

10. Supervisory Authority

EU residents have the right to lodge complaints with their local data protection supervisory authority if they believe their data protection rights have been violated.

11. Contact for Rights Requests

To exercise any of your GDPR rights, contact:

misty-cliff
147 Wilderness Access Road
Blue Mountains, NSW 2787
Australia
Email: [email protected]

We will respond to verified requests within 30 days.