Last updated: April 2026

1. Introduction Avana Byron operates the website avanabyron.com.au and the retreat venue located at 841 Wilsons Creek Rd, Wilsons Creek, NSW 2482. In this policy, "we", "us", and "our" refer to Avana Byron. We are committed to protecting the privacy of the personal information we collect and handle. This Privacy Policy explains how we collect, use, disclose, and store your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using our website, making a booking, submitting an enquiry, or attending a retreat or event at Avana Byron, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect We may collect the following types of personal information:

Identity and contact information: your name, email address, phone number, and postal address.

Booking and event information: dates of stay, group size, retreat or event type, dietary requirements, and any special requests or accessibility needs you share with us.

Payment information: payment details processed through our third-party payment providers (such as Stripe, Humanitix, or BookingLayer). We do not store your full credit card details on our systems.

Communications: any information you provide when you contact us by email, phone, social media, or through a form on our website.

Website usage data: information collected automatically when you visit our website, including your IP address, browser type, device information, pages visited, referring URL, and the date and time of your visit. This data is collected through cookies and similar technologies (see Section 7).

Marketing preferences: whether you have opted in to receive communications from us, such as email newsletters or event notifications. We do not knowingly collect personal information from children under the age of 16 without parental or guardian consent.

3. How We Collect Your Information We collect personal information in the following ways: Directly from you, when you make a booking or enquiry, subscribe to our mailing list, complete a form on our website, communicate with us by email or phone, attend a retreat or event, or interact with us on social media. From third-party platforms, when you book through services such as Booking.com, Humanitix, Eventbrite, BookingLayer, or Hipcamp. These platforms have their own privacy policies, and we encourage you to review them. Automatically, through cookies and analytics tools when you browse our website (see Section 7).

4. How We Use Your Information We use your personal information for the following purposes: To process and manage bookings, enquiries, and event registrations. To communicate with you about your booking, retreat, or event, including confirmations, logistics, and pre-arrival information. To respond to your questions, feedback, or requests. To send you marketing communications where you have opted in, such as newsletters, event announcements, or special offers. You can unsubscribe at any time. To improve our website, services, and guest experience, including through aggregated and anonymised analytics. To comply with our legal and regulatory obligations, including health and safety requirements. To manage our business operations, including accounting, record-keeping, and insurance. We will not use your personal information for purposes other than those outlined in this policy without your consent, unless required or authorised by law.

5. Who We Share Your Information With We may share your personal information with the following parties, only to the extent necessary for the purposes described in this policy:

Retreat facilitators and event organisers: if you are attending a retreat or event hosted by a third-party facilitator at our venue, we may share relevant booking and contact details with that facilitator so they can manage the retreat experience. We encourage facilitators to handle your information responsibly, but their use of your data is governed by their own privacy practices.

Service providers: third parties who assist us with payment processing, email communications, website hosting, analytics, catering, and other operational services. These providers are contractually required to handle your information securely and only for the purposes we specify.

Booking platforms: where your booking originates from a third-party platform (such as Booking.com, Humanitix, or BookingLayer), information may be shared between us and that platform as necessary to fulfil your booking.

Legal and regulatory authorities: where required by law, regulation, legal process, or enforceable governmental request. We do not sell your personal information to third parties.

6. How We Store and Protect Your Information We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. These measures include secure storage of electronic records, password-protected systems, and limiting access to personal information to authorised personnel. Our website is hosted by Squarespace, and data may be stored on servers located outside of Australia, including in the United States. Where personal information is transferred overseas, we take reasonable steps to ensure that the overseas recipient handles your information in accordance with the APPs. We retain your personal information only for as long as reasonably necessary for the purposes described in this policy, or as required by law. When your information is no longer needed, we will take reasonable steps to destroy or de-identify it.

7. Cookies and Website Analytics Our website uses cookies and similar tracking technologies to improve your browsing experience, analyse website traffic, and understand how visitors use our site.

Essential cookies: necessary for the website to function, such as maintaining your session when browsing.

Analytics cookies: we may use tools such as Google Analytics or Squarespace Analytics to collect anonymised data about website usage, including pages visited, time spent on the site, and traffic sources. This helps us improve our website and understand our audience.

Third-party cookies: some cookies may be set by third-party services embedded in our site, such as social media widgets, embedded booking platforms, or video players. These cookies are governed by the respective third party's privacy policy. You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

8. Your Rights Under the Australian Privacy Act, you have the right to:

Access: request access to the personal information we hold about you.

Correction: request that we correct any personal information that is inaccurate, out of date, incomplete, or misleading.

Opt out of marketing: unsubscribe from marketing communications at any time by clicking the unsubscribe link in any email, or by contacting us directly.

Complaint: make a complaint about how we have handled your personal information (see Section 10). To make a request regarding your personal information, please contact us using the details in Section 11. We will respond to your request within a reasonable timeframe and in accordance with the Privacy Act.

9. Third-Party Websites and Platforms Our website may contain links to third-party websites and platforms, including booking services, ticketing platforms, and social media. These third-party sites have their own privacy policies, and we are not responsible for their content or privacy practices. We encourage you to review the privacy policies of any third-party site you visit.

10. Complaints If you believe we have breached the Australian Privacy Principles or have a concern about how we have handled your personal information, please contact us using the details below. We will investigate your complaint and respond to you in writing within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC): Website: www.oaic.gov.au Phone: 1300 363 992 Email: enquiries@oaic.gov.au

11. Contact Us If you have any questions about this Privacy Policy or wish to make a request regarding your personal information, please contact us: Avana Byron 841 Wilsons Creek Rd, Wilsons Creek, NSW 2482 Email: hello@avanabyron.com.au Phone: 0416 183 699

12. Changes to This Policy We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.