Privacy Policy

Estora (“we”, “us”, “our”) operates Lot 20, a short-stay holiday home on the Murray River at Brenda Park, South Australia, and the website estora.com.au. We respect your privacy and handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. This policy explains what we collect, why, and the choices you have.

1. Information we collect

We only collect information we need to take your booking, look after your stay and answer your questions:

• Booking details — your name, email address, phone number, stay dates, number of guests and any requests you share with us.
• Payment information — payments are processed securely by Stripe. We never see or store your full card number; we only receive confirmation of payment, the amount, and limited reference details needed for refunds (such as returning your security bond).
• Enquiries — whatever you include when you use our contact or booking enquiry forms, email us, or chat with our website concierge assistant.
• Website usage — information collected automatically through cookies and similar technologies, such as pages visited, device and browser type, approximate location and how you arrived at our site.

2. How we use your information

• To confirm and manage your booking, and send your booking confirmation and Guest Handbook.
• To process payments and refunds, including automatic return of your security bond after check-out.
• To communicate with you before, during and after your stay, and respond to enquiries.
• To keep the property and our guests safe, and to meet our legal, tax and accounting obligations.
• To understand how our website is used and improve it, and to measure and show relevant advertising.
• To send you occasional news or offers, only where you have agreed or where the law allows. You can unsubscribe at any time.

We do not sell your personal information.

3. Service providers we use

We share information only with trusted providers who help us run the website and our bookings, and only as needed for them to provide their service:

We may also disclose information where required by law, or to protect the safety of guests, the property or others.

4. Overseas disclosure

Some of the providers above store or process data outside Australia, mainly in the United States, the European Union and other countries where they operate. We choose reputable providers that maintain appropriate security and privacy protections.

5. Cookies & tracking

Our website uses cookies and similar technologies from Google Analytics and the Meta Pixel to understand site traffic and the performance of our advertising. You can block or delete cookies through your browser settings, opt out of Google Analytics using the Google Analytics opt-out add-on, and manage ad preferences in your Meta ad settings. Some features of the site, such as booking, may not work properly if all cookies are blocked.

6. Storage, security & retention

We take reasonable steps to protect your personal information from misuse, loss and unauthorised access, including using secure (HTTPS) connections and established, security-focused providers. We keep booking records for as long as needed to provide our services and meet legal, tax and accounting requirements, then delete or de-identify them.

7. Accessing or correcting your information

You can ask to access the personal information we hold about you, or ask us to correct or delete it, by emailing us using the details below. We will respond within a reasonable time, usually within 30 days.

8. Complaints

If you have a concern about how we have handled your personal information, please contact us first and we will do our best to resolve it. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

9. Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page, with the date it was last updated.

10. Contact us