What we ask you for, why we need it, who else gets to see it, and how to have it removed. In plain English, without the legal fog.
Last updated: 19 August 2026GuestTours is the registered business name of Amber Janbroers, a sole trader based in Cairns, Queensland, ABN 51 726 603 464. We review tours across Far North Queensland and book them for travellers. This page explains what happens to the details you hand over along the way.
The site is run day to day by Amber, who reads the booking requests and answers the messages, usually the same day.
A business this size is not always required to follow the Privacy Act 1988 (Cth). We follow it anyway, and we handle your details in line with the Australian Privacy Principles, because you are handing over your name, your phone number and sometimes your medical history to book a day on the water.
Everything below describes what this website does today. If something changes, the date at the top of this page changes with it. The booking terms cover the commercial side: prices, cancellations and who is responsible for what.
We only collect what you type into a form. There is no hidden sign-up, no profile built in the background, and no list you get added to without asking.
The booking form asks for the details an operator needs to put you on the boat or bus:
The contact form asks for your first and last name, email address, phone number and the message itself. Some of our forms also record which page you were on when you wrote to us, so we know what you were looking at. The phone number is there in case a reply by email bounces.
Messages sent through the contact and partner forms reach us by email, and our form software also keeps a copy in the administration area of this website. You can ask us to delete that copy at any time.
The host form asks for your name, contact details and information about your property or business, so we can work out whether a partnership makes sense.
We never ask for card numbers on this website. The forms here send a booking request, not a payment. There is no checkout, no card field and no payment gateway on this site, so no card data ever reaches us through it. Payment is arranged separately once your booking is confirmed.
Some tours need to know about allergies, medical conditions, mobility or pregnancy before they can take you out. That is why the booking form has a notes box for it.
Australian privacy law treats health information as sensitive, and we treat it that way too. When you type it into the form, you are giving us permission to pass it to the operator running your tour, and that is the only thing we do with it. It is never used for marketing, never shared with anyone who is not involved in running your trip, and if you would rather not put it in writing, leave the box empty and raise it with us when we confirm your booking.
We do not sell your details. We do not rent them out, trade them, or hand them to a data broker. There is no scenario in which your email address ends up on someone else's marketing list because of us.
Booking requests reach us as email, and a copy is kept in this website's own administration area so we can track which trips are confirmed. Messages from the contact and partner forms are kept in both places too. The website runs on rented servers located in Australia.
Email is the exception. Our email provider stores and backs up messages on servers outside Australia, mainly in the United States and the European Union, which is how almost every email service works. Listing every country a message might pass through is not practical, so those two are the ones worth knowing about. By sending a form on this site, you agree to your details being handled that way.
When information is no longer needed for any of those reasons, we delete it. You can also ask us to delete it sooner.
The site runs over an encrypted HTTPS connection, so anything you type into a form is protected on its way to us. Booking requests land in one inbox, and we keep access to it with the people who need it to arrange your trip.
No system is beyond reach, and we would rather say that plainly than promise otherwise. If a breach ever affected your information in a way likely to cause you serious harm, we would notify you and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.
You can ask us at any time to show you what we hold about you, correct something that is wrong, or delete it altogether. Email us and we will handle it within 30 days, usually much sooner. There is no charge.
The one limit worth flagging: if your tour has already been passed to an operator, we can remove our copy, but the operator holds their own passenger record under their own privacy policy.
We email you about your own booking: the confirmation, the pickup time, a change to the weather plan. That is part of arranging your trip, not marketing.
We will not add you to a mailing list because you booked once. If we ever start sending trip ideas or seasonal advice, it will be because you asked for it, and every one of those emails will have a working unsubscribe link.
No decision about you on this website is made automatically. There is no algorithm scoring you, ranking you or deciding what you are offered. A person reads your booking request and answers it.
Plenty of the tours we book are family trips, so children's names and ages often appear on a booking. Those details should be supplied by the parent or guardian making the booking, and we use them purely to get the family on the right tour at the right fare.
This website is not aimed at children, and we do not knowingly collect information directly from anyone under 16.
The GDPR gives you a few extra rights, and we apply them to anyone who asks, wherever they live. Our lawful bases for handling your details are straightforward: performing the booking you asked us to arrange, your consent for anything sensitive such as medical notes, and our legitimate interest in running a travel agency and answering your questions.
You can request access, correction, deletion, a copy of your data in a portable format, or restriction of how we use it. Email us and we will sort it out.
Tell us first. Email us with what went wrong and we will look into it and reply within 30 days. Most things are a misunderstanding that gets fixed in a single message.
If our answer does not satisfy you, you can take it to the Office of the Australian Information Commissioner at oaic.gov.au. If you are in the UK or the EU, your national data protection authority can take the complaint instead.
Any request about your information lands with a named person in Cairns, not a ticket queue. Access, correction and deletion requests are handled within 30 days, and usually the same week.
We update this policy when the way we work changes, for example if we add website statistics or start using a new booking system. The date at the top always reflects the current version, so it is worth a glance if you are booking again after a long gap.
If a change materially affects how we handle information you have already given us, we will tell you by email rather than quietly editing this page.