Privacy Policy for Cirrus Tours
At Cirrus Tours, we are committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy describes how we collect, use, process, and disclose your information when you access and use our online platform, engage with our services, or otherwise interact with us. Our services include bespoke weather-optimised travel planning, meteorological guidance for adventure tours, climate data analysis for event management, specialised storm-chasing expeditions, scenic flights with real-time atmospheric insights, and sustainable eco-tourism with weather impact assessments.
1. Information We Collect
We collect various types of information from and about you, including:
- Personal Identification Information: This includes your name, email address, phone number, physical address, passport details (for international travel), and date of birth. We collect this directly when you book a tour, request a quote, subscribe to our newsletters, or create an account on our site.
 - Payment Information: We collect payment details such as credit card numbers or other financial account information to process bookings and payments. This data is handled by secure third-party payment processors, and we do not store sensitive payment card details on our servers.
 - Travel Preferences & Health Information: Details regarding your travel preferences, dietary restrictions, mobility requirements, and any relevant health conditions that may impact your safety or comfort during our tours (e.g., allergies, medical conditions pertinent to high-altitude or physically demanding tours). This is collected to ensure we can provide suitable and safe travel experiences.
 - Communication Data: Records of your correspondence with us, including emails, chat transcripts, and phone call recordings (where permitted by law and with prior notification).
 - Technical Data: Information about your device and how you interact with our site, including IP addresses, browser type, operating system, unique device identifiers, referral URLs, pages viewed, and access times. We collect this using cookies and similar tracking technologies.
 
2. How We Use Your Information
We use the information we collect for various purposes, including:
- To Provide and Manage Our Services: Fulfilling your booking requests, processing payments, arranging tour logistics, providing meteorological updates, and delivering our bespoke travel planning and adventure tours.
 - To Communicate With You: Sending booking confirmations, service announcements, updates about your trip, safety information, and responding to your inquiries and requests.
 - For Safety and Security: Ensuring the safety of our travellers and staff, responding to emergencies, and complying with local and international travel regulations.
 - To Improve Our Services: Analyzing usage trends, conducting research, developing new features, and enhancing the user experience on our online platform.
 - Marketing and Promotional Purposes: With your consent, sending you information about promotions, new tour offerings, or other news that may be of interest to you. You can opt-out of these communications at any time.
 - Compliance with Legal Obligations: Meeting our legal and regulatory requirements, including those related to record-keeping, safety, and taxation.
 
3. How We Share Your Information
We may share your information with:
- Service Providers: Third-party vendors who perform services on our behalf, such as payment processing, ground transportation, accommodation providers, activity operators, meteorological service partners, and IT support. These providers are bound by contractual obligations to keep personal data confidential and use it only for the purposes for which we disclose it to them.
 - Affiliates: Other companies within the Cirrus Tours corporate family, where necessary to provide you with services or for internal administrative purposes.
 - Legal and Regulatory Authorities: When required by law, court order, or governmental regulation, or if we believe such action is necessary to protect and defend the rights, property, or safety of Cirrus Tours, our customers, or others.
 - Business Transfers: In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
 
4. International Data Transfers
As an international tourism company, your personal data may be transferred to, and stored in, countries outside of your own country of residence, including countries that may not offer the same level of data protection as your home country. This occurs when we need to share your information with international airline partners, ground operators, hotels, or other service providers located in the destinations you are travelling to. We take appropriate measures to ensure that your data is treated securely and in accordance with this Privacy Policy and applicable data protection laws. This may include using standard contractual clauses approved by the European Commission, or other legally recognised transfer mechanisms.
5. Data Security
We implement appropriate technical and organisational security measures to protect your personal data from unauthorised access, use, disclosure, alteration, or destruction. These measures include encryption, firewalls, and secure server environments. While we strive to protect your personal data, no system is entirely secure, and we cannot guarantee the absolute security of your information. You also play a role in protecting your data by choosing strong passwords and keeping them confidential.
6. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
7. Your Data Protection Rights
Depending on your location and applicable law, you may have the following rights regarding your personal data:
- Right to Access: You have the right to request copies of your personal data that we hold.
 - Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
 - Right to Erasure (Right to be Forgotten): You have the right to request that we erase your personal data, under certain conditions.
 - Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
 - Right to Object to Processing: You have the right to object to our processing of your personal data, under certain conditions.
 - Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organisation, or directly to you, under certain conditions.
 - Right to Withdraw Consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.
 
To exercise any of these rights, please contact us using the details provided in Section 9. We will respond to your request within a reasonable timeframe and in accordance with applicable laws.
8. Cookies and Tracking Technologies
Our online platform uses cookies and similar tracking technologies to enhance your browsing experience, analyse site traffic, personalise content, and deliver targeted advertisements. Cookies are small data files stored on your device that help our site remember information about you. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of our site may become inaccessible or not function properly.
9. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:
        Cirrus Tours
        789 Flinders Lane, Floor 3
        Melbourne, Victoria, 3000
        Australia
    
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any significant changes by posting the new Privacy Policy on this page and updating the "last updated" date. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.