Data Protection Policy

Effective Date: 01/03/2025

"Escape with Kira" ("we," "us," "our") is committed to protecting the personal information of our clients, users, and partners. This policy outlines how we securely collect, store, process, and protect data in compliance with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs).

​

1. Data Collection & Use

We collect personal data to provide our services, process bookings, and communicate with clients. The types of personal information we collect may include:

• Contact details (e.g., name, email, phone number).

• Booking information (e.g., date, time, requested services).

• Payment information (processed securely via third-party payment providers; we do not store credit card details).

• Website usage data (e.g., IP address, cookies, analytics data).

We do not sell, rent, or share personal data with third parties unless required by law or with the user’s explicit consent.

​

2. Data Storage & Security Measures

We implement industry-standard security measures to protect personal data from unauthorized access, misuse, or disclosure.

• Encryption: All stored data is encrypted using AES-256 encryption.

• Data in Transit: All data transmitted between users and our website is secured using SSL/TLS encryption (HTTPS).

• Access Controls: Data is restricted to authorized personnel only using role-based access controls (RBAC).

• Firewalls & Monitoring: We use firewalls, intrusion detection systems (IDS), and anti-malware protectionto monitor and prevent threats.

• Secure Hosting: Our website and databases are hosted on secure, industry-compliant servers with data redundancy and regular security audits.

​

3. User Authentication & Account Security

• We enforce strong password policies and require passwords to meet security complexity standards.

• Multi-Factor Authentication (MFA) is required for administrative access to protect against unauthorized logins.

• Automatic session timeouts and account lockouts are in place to prevent unauthorised access.

• ​

4. Data Retention & Deletion

We retain personal information only for as long as necessary to fulfill legal and business requirements. When data is no longer needed:

• It is securely deleted or anonymized to prevent identification.

• Clients can request data deletion by contacting us at hello@escapewithkira.com.au

​

5. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance user experience and analyze site performance. Users can manage cookie preferences through browser settings. For more details, refer to our Privacy Policy.

​

6. Third-Party Services & Data Sharing

We work with third-party providers for payment processing, analytics, and security. These providers are required to maintain strict data protection standards. Personal data may only be shared when:

• It is required to deliver our services.

• There is a legal obligation to disclose information.

• Users have provided explicit consent.

We do not store credit card details— payments are made directly via OSKO, Beem It, or utilising a ATM Cash deposit or Cash in person.

​

7. Data Breach Response Plan

In the event of a data breach:

1. Immediate containment and investigation of the breach.

2. Assessment of risks associated with the breach.

3. Notification to affected users and regulatory bodies (if required under the Notifiable Data Breaches (NDB) scheme).

4. Implementation of corrective actions to strengthen security.

​

8. User Rights & Contact Information

Users have the right to:

• Access, correct, or delete their personal data upon request.

• Withdraw consent for data processing (where applicable).

• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if they believe their data rights have been violated.

​

For inquiries, requests, or concerns, please contact us:

Business Name: Escape with Kira
Email: hello@escapewithkira.com.au
Phone: +61 435 177 444
Website: www.escapewithkira.com.au

By using our website and services, you acknowledge that you have read, understood, and agree to this Data Protection Policy.