Privacy policy

1. Who we are

Trekoora is a brand of GEC Transport Pty Ltd (ABN 17 672 274 770), based on the Gold Coast, Queensland. In this policy, “we”, “us” and “our” mean GEC Transport Pty Ltd, trading as Trekoora. The same company also operates GEC Transfers.

2. What we collect

We collect only what we need to plan and run your journey and to look after you:

• Contact details — your name, email address and phone number, and whether we may contact you on WhatsApp.
• Booking details — the journey and date, your pickup address, the number of guests, the ages of any children, the occasion, and notes you give us.
• Needs you choose to share — dietary requirements, allergies or mobility needs, so we can make the day work for you.
• Payment details — card payments are processed by Stripe. We never see or store your full card number; we only keep the card type and its last four digits to show you which card is on file.
• Messages — what you write to us by email, WhatsApp, phone or on our website.
• Website information — pages visited, the device and browser used and how you found us, through cookies and Google Analytics (see section 7).
• Photos of the day — your host may take photos of your group and share them with you.

Information about health, such as allergies or mobility needs, is sensitive information under the Privacy Act. We collect it only with your consent, use it only to deliver your journey, and share it only with those who need it for that — for example a restaurant preparing your meal.

You can deal with us without giving your name when you simply ask a question, but we need your details to take a booking.

3. How we collect it

Mostly directly from you: when you book or send an enquiry on our website, email, call or message us, or talk to your host. Sometimes we receive your details from someone else — for example the person who booked for your group, a gift card buyer, a travel advisor or a hotel concierge. When that happens, we take reasonable steps to make sure you know.

4. How we use it

• To plan, confirm and run your journey, including pickups, venue bookings and your host’s introduction.
• To take payments: your deposit, the automatic balance payment on the due date, refunds and gift cards.
• To send you what your booking needs: confirmations, reminders, trip details, changes because of the weather, and a thank-you after your journey.
• To answer your questions and look after any concern.
• To improve our journeys and our website, and to keep records required by law, such as tax records.
• To send news and offers about our journeys to people who asked for them, to guests who have booked with us, and to businesses we work with at their published business address — always with an unsubscribe link (see Marketing below).

We do not sell your personal information.

5. Who we share it with

Only with the people and services that help us deliver your day, and only what they need:

• your host and our team, including our transfer company GEC Transfers when it provides your vehicle;
• venues and operators on your journey — for example a winery, café or attraction — usually just a name, the number of guests and any dietary needs;
• Stripe, which processes card payments;
• the companies that host our website and email, and send our booking emails;
• Google, for website statistics and advertising measurement (see section 7) and for reviews you choose to leave;
• Meta (Facebook and Instagram), for advertising measurement only and only if your browser allows marketing cookies: a scrambled (hashed) form of your email address and phone number, so Meta can tell that an enquiry or a booking came from one of our ads — never the details themselves (see section 7);
• the travel advisor, hotel or company that booked for you, about that booking;
• anyone we must share with by law, or to protect someone’s safety.

6. Information held overseas

Some of the services we use store information outside Australia — mainly Stripe, Google and Meta, which may hold data in the United States, Europe and other countries. We choose well-known providers that protect personal information, and we take reasonable steps so they handle it consistently with the APPs.

7. Cookies and analytics

Our website uses small files called cookies, and your browser’s own storage, to make it work — for example to keep your booking open while you pay. We may also use Google Analytics and Google Tag Manager to understand how the website is used and to measure our advertising. Google receives information such as the pages you visit and your approximate location, not your name. You can block or delete cookies in your browser settings, or opt out of Google Analytics at tools.google.com/dlpage/gaoptout.

If your browser allows marketing cookies, the Meta Pixel and Meta’s Conversions API may also record that you sent us an enquiry or booked, together with a hashed (scrambled) form of your email address and phone number, so we can measure our Facebook and Instagram ads. Visitors in Europe, the United Kingdom and Switzerland, and browsers that ask not to be tracked, start with all of this switched off. You can manage this in your Facebook settings under “Your activity off Meta technologies”.

8. Storage and security

We keep your information in our booking system and email, with access limited to the people who need it and protected by passwords and encrypted connections. Card payments are handled by Stripe, which meets the PCI DSS card security standard. We keep booking and payment records for at least seven years, as tax law requires, and then destroy or de-identify them. If a data breach is likely to cause you serious harm, we will tell you and the OAIC as the law requires.

9. Access and correction

You can ask to see the personal information we hold about you, and ask us to correct it, by emailing travel@trekoora.com. We reply within 30 days. There is no charge for asking; we may need to confirm your identity first, and in rare cases the law allows us to refuse — if so, we tell you why.

10. Marketing

We send news and offers by email only to:

• people who asked to hear from us;
• guests who have booked a journey with us;
• businesses such as hotels and travel agents, at the business address they publish, about their work with travellers.

If you have told us you do not want offers, we do not send them. Every offer has a one-click unsubscribe link, or you can simply tell us; once you unsubscribe, we never send you another offer. Emails about a booking you have made are not marketing and are always sent.

11. Questions and complaints

If you have a question or a complaint about your privacy, please email travel@trekoora.com or call +61 406 212 798. We will look into it and reply within 30 days. If you are not satisfied with our answer, you can contact the Office of the Australian Information Commissioner (OAIC): oaic.gov.au, phone 1300 363 992.

We may update this policy from time to time. The latest version is always on this page.