PRIVACY POLICY

Last updated: 12 October 2026

1. Who we are

Tawango Pty Ltd (ABN 39 616 347 150), brand name WOFDI, trading as World of Discoveries, 526/368 Sussex St, Sydney NSW 2000, Australia ("we", "us"). We comply with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles, the EU and UK GDPR, the US TCPA and CCPA/CPRA, and Canada's PIPEDA and CASL, where they apply. This policy covers our website, enquiries, bookings, payments and all communications, and forms part of our Terms and Conditions.

2. What we collect

Contact details (name, email, phone, address), booking details (events, tickets, hotels, flights, transfers, invoices), traveller and identity details (dates of birth, nationality, passport and visa details, copies of passports or ID), payment and verification details (transaction reference, last four card digits, billing details, card authorisation forms, masked card copies), information you choose to share (health, dietary, accessibility needs), communication records (emails, SMS, WhatsApp, website chat, calls), and website data (IP address, device, browser, cookies). If you book for others, you confirm you are authorised to give us their information and that they accept this policy. The lead booker is responsible for passing booking information and updates to all travellers in the booking. Without the required details we cannot complete your booking.

3. How we use it

To answer enquiries, make and manage bookings, process payments and refunds, verify payments and prevent fraud and chargebacks, contact you about your trip, meet tax, accounting, immigration and legal obligations, resolve complaints and disputes, improve our services, and, with your consent, send marketing. Under the GDPR our legal bases are contract, legal obligation, legitimate interests and consent. We do not sell your personal information or make automated decisions that significantly affect you.

4. Bookings and payments

We give each supplier only the details needed to provide your service. Card payments are made on secure, PCI DSS-compliant pages of third-party payment processors. We do not receive or store full card numbers, expiry dates or security codes, only payment confirmation (amount, date, reference, card type, last four digits, billing name). For bank transfers we receive the sender's name, bank details and payment reference. Refunds are made to the original payment method where possible. For high-risk or high-value payments we may require a signed card authorisation form, a copy of the cardholder's ID and a copy of the card with all but the last four digits masked, used only to verify the payment and defend against fraud and chargebacks.

5. SMS, WhatsApp, calls and email

By giving us your phone number or email (through website forms, website chat, calls, email, SMS or WhatsApp) or by making a booking, you expressly consent to receive calls, SMS, WhatsApp messages and emails from us and those acting on our behalf, including automated messages, about your enquiry, booking, payments and trip. Marketing is sent only with your consent, which is not a condition of purchase. Message frequency varies, and message and data rates may apply. You confirm the number you give us is yours or that you are authorised to use it. To opt out, reply STOP to any SMS (HELP for help), tell us in WhatsApp, use the unsubscribe link in emails, or email info@wofdi.com. We may send one message confirming your opt-out. While you have an active booking, we may still contact you by email about essential matters. We do not sell or share your mobile number or SMS consent with third parties for their marketing.

6. Who we share it with

Travel suppliers (airlines, hotels, ticketing agencies, event organisers, transport and tour operators), payment processors and banks, communication providers (SMS, WhatsApp/Meta, email, telephony, website chat), IT, hosting, CRM and accounting providers, professional advisers, insurers (if you ask us to arrange insurance), analytics and advertising providers (Google, Meta, Microsoft Clarity) where you accept cookies, and authorities where required by law. Your information may be transferred to other countries, including the USA, UK, EU, Canada and your destinations. Where the GDPR applies, we rely on adequacy decisions, Standard Contractual Clauses or the need to perform your booking. By making an enquiry or booking, you consent to this overseas disclosure and acknowledge that APP 8.1 will not apply to it.

7. Retention and security

We keep personal information only as long as needed for these purposes, legal, tax and accounting obligations and disputes: passport, ID and health information for up to 3 months after your trip, card verification documents for up to 18 months after payment, booking records for 7 years, enquiries without a booking for 2 years, and financial records for 10 years. We then delete or anonymise it. We use reasonable technical and organisational measures, including encryption, access controls and secure payment processors. No system is completely secure, and to the extent permitted by law we are not liable for unauthorised access beyond our reasonable control. We will notify data breaches as required by law.

8. Your rights

You may request access to, correction or deletion of your information, object to or restrict processing, withdraw consent, or opt out of marketing, as allowed by the law where you live. Email team@wofdi.com. We may verify your identity and may refuse a request where the law allows, for example where we must keep records. Bookings must be made by persons aged 18 or over.

9. Complaints

Email team@wofdi.com with the subject "Privacy complaint". We will acknowledge it within 2 business days and aim to resolve it within 30 days. If you are not satisfied, write to team@wofdi.com marked "COMPLAINT" for review by a senior manager. If still unresolved, you may contact the Office of the Australian Information Commissioner (oaic.gov.au) or, in the EEA or UK, your local data protection authority.

10. Cookies

We use essential cookies to run the website, and analytics and advertising cookies only with your consent. See the Cookie Policy below.

11. Changes

We may update this policy at any time by posting the new version on this page. Continued use of our website or services means you accept it.

12. Contact

team@wofdi.com, USA +1 646 759 2860, Australia +61 2 8261 0596, UK +44 204 572 9092, Canada +1 877 713 2716, New Zealand +64 9 888 9298, Spain +34 965 020 862, Argentina +54 11 5235 3765, Mexico +52 559 337 2480, WhatsApp +1 551 210 8623, SMS +1 218 748 8653.