Privacy Policy — SuperbSuite
Who we are: Expanded Equity Group Pty Ltd T/A SuperbSuite (77 656 818 236), a short-term rental accommodation provider based in Western Australia. Our website is https://www.superbsuite.com.au/ and our contact email is bookings@superbsuite.com.au.
SuperbSuite is committed to handling personal information in accordance with Australia’s Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) administered by the Office of the Australian Information Commissioner (OAIC). (OAIC)
This Policy explains what we collect, why we collect it (including identity verification for compliance and guest safety), how we use and disclose it, and your rights.
1) Scope
This Policy applies to personal information we handle in Australia in connection with our website, booking channels, digital check-in, guest communications and on-site operations. It covers online and offline collection related to our accommodation services. We may update this Policy from time to time; the latest version will appear on our website.
2) The information we collect
We only collect personal information that is reasonably necessary for our functions and activities (APP 3). This may include: (OAIC)
• Identity & contact: full name, date of birth, residential address, email, phone.
• Government ID details (for verification): e.g., driver licence or passport number, issuing country, expiry, and scanned images where you supply them via our secure digital check-in.
• Booking & stay details: reservation identifiers, property address, dates, number of guests, special requests, communications with us.
• Payment & transaction info: booking amounts, status and method (note: card processing is via our payment providers; we do not store full card numbers).
• Compliance & safety: records needed to satisfy legal and insurance obligations, incident logs, and where relevant, consents or restrictions relating to your stay.
• Technical data: IP address, device/browser type, pages visited, and basic analytics/cookie data (see Cookies below).
Where practicable, you may interact with us anonymously or use a pseudonym (APP 2), but we will usually need your identity to accept a booking or host your stay. (OAIC)
3) How and why we collect your information
We collect information directly from you when you make an enquiry or booking, complete our online check-in, communicate with us, or use our website. We may also receive limited information via booking platforms or authorised agents you use.
We collect and use personal information to:
• Provide and manage accommodation: process bookings, check-in/out, housekeeping, maintenance, support.
• Verify identity and prevent fraud: confirm that the person staying is the person booked, reduce chargebacks, protect guests, neighbours and our properties, and meet record-keeping requirements in the WA short-term rental framework. (AustLII)
• Communicate: booking confirmations, arrival instructions, urgent notices and service updates.
• Meet legal obligations: respond to lawful requests and comply with applicable laws and reporting duties (including the Notifiable Data Breaches scheme where required). (OAIC)
• Improve our services and website: analytics, quality assurance and product development.
• Photo ID collection and government identifiers (APP 9).
We collect a copy of your government-issued photo identification (e.g., driver licence or passport) during digital check-in to verify identity, prevent fraud, meet compliance obligations and help ensure the person staying matches the booking. We may also collect the associated government-related identifiers (such as a licence or passport number). We do not adopt any government identifier as our own, and we only use or disclose the ID image and related identifiers as permitted by the Australian Privacy Principles—for the purposes above, where required or authorised by law, or with your consent. We restrict access, apply reasonable security controls, and retain the ID copy only for as long as necessary for these purposes or as required by law, after which we securely delete or de-identify it.
4) Legal basis and consent (Australia)
Under the APPs we collect personal information when it is reasonably necessary for our functions/activities (APP 3). We will seek your consent where required (for example, for certain marketing or when collecting sensitive information), and will otherwise rely on the APPs’ permitted uses and disclosures (APP 6). (OAIC)
5) Disclosure of your information
We may disclose personal information to:
• Service providers we use to run our business (e.g., ID verification tools, reservation and property-management software, payment processors, email/SMS services, cloud hosting and IT support).
• Platform partners if you book through an online travel agency or channel manager.
• Regulators and law enforcement when legally required.
• Professional advisers and insurers for risk and claims management.
Some providers may be overseas. Where we disclose personal information outside Australia, we take reasonable steps to ensure recipients comply with the APPs or comparable safeguards (APP 8). (OAIC)
6) Cookies, analytics and third-party tools
We use cookies and similar technologies for essential site functionality and basic analytics (e.g., remembering preferences, measuring site usage). You can manage cookies through your browser settings. Australian privacy requirements focus on transparency and APP compliance; if we use tracking that reasonably identifies you, we treat it as personal information and handle it under this Policy. (OAIC)
7) Storage, security and retention
We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure (APP 11), including encryption in transit where appropriate, access controls, staff training and vendor due diligence aligned with OAIC guidance on securing personal information. We retain information only as long as needed for the purposes above or as required by law, and then de-identify or securely destroy it. (OAIC)
8) Access and correction
You may request access to the personal information we hold about you (APP 12) and request corrections if it is inaccurate, out-of-date, incomplete, irrelevant or misleading (APP 13). We will respond within a reasonable time. To make a request, email bookings@superbsuite.com.au. (OAIC)
9) Direct marketing
We may send you service messages and, with consent where required, limited marketing about our properties and offers. You can opt out at any time using the unsubscribe link or by contacting us (APP 7). (OAIC)
10) Children
Our accommodation is intended for adults (18+) and supervised minors. We do not knowingly collect personal information from children without consent from a parent or legal guardian.
11) Data breaches
If a data breach is likely to result in serious harm, we will assess promptly and, where it is an eligible data breach, notify affected individuals and the OAIC in accordance with the Notifiable Data Breaches (NDB) scheme. (OAIC)
12) Your choices
• Declining to provide certain information may mean we cannot accept or fulfil a booking.
• Managing cookies via your browser or device settings may affect site functionality.
• Marketing opt-out at any time.
13) How to contact us or make a privacy complaint
• Email: bookings@superbsuite.com.au
• If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC). See the OAIC website for current contact options and guidance. (OAIC)
14) Western Australia short-term rental context
SuperbSuite operates within Western Australia’s short-term rental framework, including the Short-Term Rental Accommodation Act 2024 (WA) and associated regulations and planning reforms. These frameworks concern registration and planning and may require us to maintain certain records relevant to your stay. Nothing in this Policy limits your rights under the Privacy Act and APPs. (AustLII)