Privacy Policy
This Privacy Policy explains how Galactic Media Services Pty Ltd (ABN 50 125 728 627), trading as ViaResorts (“ViaResorts”, “we”, “us” or “our”), collects, uses, shares and protects your personal information when you visit viaresorts.com or use our services. We take your privacy seriously and aim to explain our practices as clearly as possible.
This policy applies to all information collected through our website, apps and any related services, sales, marketing or events (together, the “Services”). If you do not agree with this policy, please discontinue use of the Services. If you have any questions, contact us at [email protected].
1. What information we collect
Information you give us. We collect personal information you provide voluntarily — for example when you create an account, make a booking, enter a competition, complete a survey, leave a review or contact us. This can include your name, postal and email addresses, phone numbers, login credentials, booking and purchase history, and the content of your communications with us.
Payment information. When you make a payment we collect the details needed to process it. We do not store your full card number or security code. Payments are handled by PCI-DSS compliant payment providers (such as Stripe and Flywire), who process your card details on our behalf. Your statement will show charges as “VIARESORTS”.
Social login data. If you choose to register or sign in using a third-party account (such as Google or Facebook), we receive certain profile information from that provider — see section 7.
Information collected automatically. When you visit or use the Services we automatically collect technical information such as your IP address, device and browser characteristics, operating system, language preferences, referring URLs, approximate location and how you use the Services. This is used mainly to keep the Services secure and running, and for internal analytics. We also collect information through cookies and similar technologies — see section 4.
You must ensure the personal information you give us is true, complete and accurate, and tell us if it changes.
2. How we use your information
We use personal information for legitimate business purposes, to perform our contract with you, to meet our legal obligations, and/or with your consent. Specifically, we use it to:
- create and manage your account and process logins;
- fulfil and manage your bookings, payments, vouchers, credits and refunds;
- send you administrative messages about your account, bookings and changes to our terms or policies;
- send marketing and promotional communications where you have not opted out;
- display content and advertising tailored to your interests or location, and measure its effectiveness;
- run prize draws, competitions and member offers you choose to take part in;
- request and publish testimonials and feedback (with your consent for testimonials that identify you);
- respond to your enquiries and provide support;
- keep the Services safe and prevent fraud and abuse;
- enforce our terms and respond to lawful requests; and
- analyse usage, identify trends and improve the Services, usually in aggregated or anonymised form.
3. When and with whom we share your information
We do not sell your personal information. We share it only where necessary, on one of these bases: with your consent; to perform our contract with you; for our legitimate business interests; to comply with the law; or to protect rights, safety and property.
We share personal information with the following categories of service providers, who may only use it to provide services to us under contract:
- Hosting and infrastructure — e.g. Vercel, Supabase, Amazon Web Services and Cloudflare.
- Payment processing — e.g. Stripe and Flywire.
- Email and SMS delivery — e.g. Amazon SES, ListMonk, Resend and Kudosity.
- Analytics, advertising and tag management — e.g. Google Analytics, Google Ads and Meta (Facebook/Instagram).
- Reviews and customer feedback — e.g. Reviews.io, Trustpilot and Google.
- Maps and location — Google Maps.
- Customer support — our own ViaResorts support desk.
We may also share information with the resorts, hotels, airlines and other travel suppliers needed to fulfil your booking, with our affiliates and business partners (who must honour this policy), and in connection with a merger, financing, acquisition or sale of business assets.
4. Cookies and tracking technologies
We use cookies and similar technologies (such as pixels and web beacons) to operate the Services, remember your preferences, measure performance and deliver relevant advertising. Most browsers accept cookies by default; you can set yours to refuse or remove cookies, although some features may then not work. For more detail see our Cookie Policy. To opt out of interest-based advertising, visit aboutads.info/choices.
5. Google Maps
We use the Google Maps APIs to provide location features. By using those features you agree to be bound by the Google Maps Terms of Service and consent to us obtaining or caching your location. You may withdraw that consent at any time.
6. International transfers
ViaResorts operates from Australia, and our providers may store or process information in other countries, including the United States, Singapore, the United Kingdom and the European Economic Area.
Where we transfer personal information across borders, we take reasonable steps to ensure it is protected to a standard consistent with this policy and applicable law — for example by relying on Standard Contractual Clauses, the UK International Data Transfer Agreement, the EU–U.S. Data Privacy Framework, or an adequacy decision, as appropriate. (Note: the former EU–U.S. Privacy Shield framework was invalidated in 2020 and is no longer relied upon.)
7. Social logins
If you register or sign in using a third-party social account (such as Google or Facebook), we receive profile information from that provider, which may include your name, email address, profile picture and other information you have chosen to make public. We use this only as described in this policy. We do not control how the third-party provider uses your information — please review their own privacy policy.
8. How long we keep your information
We keep personal information only for as long as necessary for the purposes set out in this policy, unless a longer retention period is required or permitted by law (for example for tax, accounting or fraud prevention). When we no longer need it, we delete or anonymise it, or securely isolate it from further processing where deletion is not immediately possible (for example in backups).
9. How we keep your information safe
We use appropriate technical and organisational measures designed to protect your personal information. However, no method of transmission over the internet is completely secure, so we cannot guarantee absolute security. You should only access the Services within a secure environment.
10. Your privacy rights
Australia. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. You may request access to, and correction of, the personal information we hold about you, and you may make a privacy complaint to us. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).
UK and European Economic Area. Where the UK GDPR or EU GDPR applies, you have rights to access, correct, erase, restrict and port your personal information, and to object to certain processing. You may also lodge a complaint with your local data protection authority. Where we rely on consent, you can withdraw it at any time without affecting earlier processing.
California. California residents have specific rights, including the right to request details of personal information disclosed for direct-marketing purposes (the “Shine the Light” law). California residents under 18 may request removal of content they have publicly posted.
To exercise any of these rights, or to review, update or delete your information or close your account, log in to your account settings or email [email protected]. We will respond within 30 days. Note that some information may be retained to prevent fraud, resolve disputes or comply with the law.
Marketing opt-out. You can unsubscribe from marketing emails at any time using the link in any marketing email, or by contacting us. We may still send you service-related messages necessary to manage your account and bookings.
11. Children
The Services are not directed to children under 18, and we do not knowingly collect information from them. By using the Services you confirm you are at least 18, or the parent or guardian of a minor consenting to their use. If you believe we hold information about a child under 18, contact us at [email protected] and we will take reasonable steps to delete it.
12. Data breaches
If we become aware of a data breach that is likely to result in serious harm, we will investigate promptly and notify affected individuals and the relevant regulator as required by law — including under Australia's Notifiable Data Breaches scheme and, where applicable, within 72 hours under the UK/EU GDPR.
13. Do Not Track
No uniform standard for “Do Not Track” browser signals has been adopted. We do not currently respond to such signals. If a standard is adopted that we must follow, we will update this policy.
14. Changes to this policy
We may update this policy from time to time. The updated version takes effect when posted, indicated by the “Last updated” date above. If we make material changes we may notify you more prominently. Please review this policy regularly.
15. How to contact us
If you have questions or comments about this policy, or wish to make a request about your information, you can contact our Data Protection Officer:
ViaResorts — The Data Manager
Galactic Media Services Pty Ltd (ABN 50 125 728 627)
Wyndham Building, 1 Corporate Court
Bundall, Gold Coast, QLD 4217, Australia
Email: [email protected]
For general help with a booking, please use our support centre.
This Privacy Policy is provided for general information and does not constitute legal advice. ViaResorts may update it to remain compliant with applicable laws.