Privacy Policy

(a) This policy explains how we collect, hold, use and disclose your personal information, in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) and, where they apply to visitors from the European Union or United Kingdom, the GDPR and the UK Data Protection Act 2018.

(b) Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable.

(c) This policy describes our practices. Where we need your consent for a particular use of your personal information — for example, analytics cookies — we ask for it separately; see section 9(c) and our Cookie Policy.

We collect only what we need to operate Airport Expert:

(a) technical and usage data — device type, IP address, approximate location, pages viewed and interactions, collected via the analytics and error-tracking services listed in section 5;

(b) information you submit — via our contact form (name, email address, message) or the suggestion and update forms on airport pages (email address and the details of your suggestion); and

(c) any other information you choose to provide to us.

(a) We collect personal information directly from you, when you use the Service, submit a form or contact us.

(b) We also collect it automatically, through cookies and similar technologies — see our Cookie Policy.

(c) We hold personal information in the cloud infrastructure of our hosting and storage providers (currently Amazon Web Services, located in the United States), in the systems of the service providers listed in section 5, and in our email and business records. Form submissions are stored in our systems and delivered to us by email.

(a) to provide, operate, secure and improve the Service — for visitors to whom the GDPR or UK GDPR applies, our lawful basis is our legitimate interests in running and protecting a free information service;

(b) to respond to your enquiries and provide support (legitimate interests);

(c) to monitor errors, performance and usage of the Service (legitimate interests; analytics cookies are set only with your consent, which you can withdraw at any time — see section 9(c));

(d) to comply with our legal obligations, resolve disputes and enforce our agreements (legal obligation); and

(e) for other purposes you would reasonably expect, or with your consent.

We use the email address you give us in a form only to respond to your enquiry or suggestion. We do not send marketing or promotional emails.

We may disclose personal information to the following categories of recipient:

(a) our personnel, contractors and related entities, on a need-to-know basis;

(b) service providers who help us operate the Website and our services — including hosting and storage, analytics, error tracking, consent management, spam protection, mapping and email delivery;

(c) our professional advisers, such as accountants, auditors, insurers and lawyers;

(d) a purchaser or prospective purchaser, if there is a change of control of our business or a sale or transfer of business assets — disclosed under an obligation of confidentiality;

(e) where required or authorised by law, or to a regulator, law-enforcement body or court; and

(f) any other person with your consent.

The service providers we currently use are: Amazon Web Services (hosting, storage and email delivery — United States), Google (analytics via Google Analytics and Google Tag Manager — United States), Rollbar (error tracking — United States), CookieYes (consent management — United Kingdom), hCaptcha / Intuition Machines (spam protection — United States) and the OpenStreetMap Foundation (map tiles — United Kingdom and European Union). We update this list as our providers change.

We do not sell your personal information, and we do not disclose it to advertisers or data brokers.

We keep personal information only as long as needed for the purposes above, then take reasonable steps to destroy or de-identify it (APP 11.2). Current retention practices:

(a) contact-form and suggestion-form submissions — retained as long as needed to handle the enquiry and for our records; and

(b) analytics events — retained in Google Analytics for 2 months (event-level data) and up to 14 months (user-level data), then deleted; and

(c) error-tracking events — retained by Rollbar for 30 days, then deleted.

You have the following rights in relation to the personal information we hold about you:

(a) Access. You may request access to the personal information we hold about you by contacting legal@airportexpert.com (APP 12). We will respond within a reasonable period. We do not charge for making a request.

(b) Correction. You may ask us to correct personal information that is inaccurate, out of date, incomplete or misleading (APP 13).

(c) Withdraw consent. Where we rely on your consent — including for the analytics cookies described in our Cookie Policy — you may withdraw it at any time, using the cookie settings on the Website or by contacting us. Withdrawing your consent does not affect anything we did on the basis of that consent before you withdrew it.

(d) Complaints. If you believe we have breached the APPs, contact us at legal@airportexpert.com with the details. We will investigate and respond within 30 days. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC): www.oaic.gov.au | 1300 363 992.

(e) EU/UK visitors. Where the GDPR or UK GDPR applies, you also have the rights to erasure, restriction, objection and data portability, and to lodge a complaint with your local supervisory authority. Our lawful basis for each purpose is set out in section 4. We do not use your personal information for automated decision-making that produces legal or similarly significant effects.