Privacy Policy

Discovery Pass Pty Ltd

Effective Date: 5 March 2025
Last Updated: 28 February 2026

1. Introduction

Discovery Pass (“we,” “us,” or “our”) is committed to protecting the privacy of individuals who interact with our platform and services. We operate an experience discovery platform that connects people seeking memorable experiences with partner venues across Australia. This Privacy Policy explains how we collect, hold, use, and disclose personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By using our website, mobile applications, or services, you consent to the practices described in this Privacy Policy. We encourage you to read this policy carefully and contact us if you have any questions.

2. What Personal Information We Collect

We may collect the following types of personal information depending on how you interact with us:

Account and Identity Information

  • Full name

  • Email address

  • Phone number

  • Date of birth

  • Residential or postal address

  • Profile photo (if provided)

Payment and Transaction Information

  • Credit card or debit card details (processed securely via third-party payment processors)

  • Billing address

  • Purchase history and transaction records

  • Redemption history for experiences and venue visits

Technical and Usage Information

  • IP address and device identifiers

  • Browser type and version

  • Operating system

  • Pages viewed, links clicked, and time spent on our website or app

  • Referring website or source

  • Location data (with your consent)

  • Cookies and similar tracking technologies (see Section 8)

Partner Venue Information

If you are a partner venue joining the Discovery Pass network, we may also collect:​

  • Business name and ABN

  • Contact details of business representatives

  • Business address and venue details

  • Banking and payment details for revenue disbursements

  • Booking system integration information

We only collect personal information that is reasonably necessary for our functions and activities, in line with APP 3.

3. How We Collect Personal Information

We collect personal information in the following ways:

  • Directly from you — when you create an account, purchase a Discovery Pass, make a booking, contact us, subscribe to our newsletter, or interact with our website or app.​

  • From partner venues — when you redeem an experience or interact with one of our partner venues.

  • From third parties — including payment processors, analytics providers, marketing platforms, and social media services.

  • Automatically — through cookies, web beacons, and similar technologies when you visit our website or use our app.

Where it is reasonable and practicable to do so, we collect personal information directly from you. If we receive unsolicited personal information that we did not request and could not have collected under the APPs, we will destroy or de-identify it as required by APP 4.​

4. Why We Collect, Use, and Disclose Personal Information

We collect, use, and disclose your personal information for the following purposes:

  • To provide, manage, and improve our platform and services

  • To process transactions and issue Discovery Passes

  • To facilitate bookings and experience redemptions at partner venues

  • To communicate with you about your account, bookings, and experiences

  • To send marketing and promotional communications (with your consent or where otherwise permitted)

  • To personalise your experience and recommend relevant venues and activities

  • To respond to inquiries, feedback, and complaints

  • To comply with legal obligations, including tax, consumer protection, and anti-fraud laws

  • To analyse usage trends and improve our website, app, and services

  • To manage our partner venue relationships and onboarding​

  • To protect our rights, property, and safety and that of our users and partners

We will not use or disclose your personal information for a purpose other than the purpose for which it was collected, unless you consent, would reasonably expect it, or an exception under APP 6 applies.​

5. Disclosure of Personal Information

We may disclose your personal information to the following parties:

  • Partner venues — to facilitate your bookings and experience redemptions

  • Payment processors — to securely process transactions

  • Cloud hosting and IT service providers — to store and manage data

  • Marketing and analytics providers — to help us understand usage patterns and improve our services

  • Professional advisors — including legal, accounting, and auditing professionals

  • Government and regulatory bodies — where required or authorised by law

  • Related entities — any parent, subsidiary, or affiliated companies

We take reasonable steps to ensure that third parties to whom we disclose your personal information are bound by obligations consistent with the APPs.​

6. Overseas Disclosure

Some of our service providers (such as cloud hosting, payment processing, or analytics platforms) may be located outside Australia. Where we disclose personal information to overseas recipients, we take reasonable steps to ensure that the overseas recipient does not breach the APPs, in accordance with APP 8.

Countries to which personal information may be transferred include [insert countries, e.g., United States, Singapore, Ireland, or other applicable jurisdictions]. We will update this section as our service provider arrangements change.

7. Security of Personal Information

We take the security of your personal information seriously and implement reasonable technical and organisational measures to protect it from misuse, interference, loss, unauthorised access, modification, or disclosure. These measures include:​

  • Encryption of data in transit and at rest

  • Secure access controls and authentication mechanisms

  • Regular security assessments and monitoring

  • Restricting access to personal information to authorised personnel only

When personal information is no longer needed for the purposes for which it was collected, and we are not required by law to retain it, we will take reasonable steps to destroy or de-identify it, in accordance with APP 11.​

8. Cookies and Tracking Technologies

Our website and app use cookies and similar technologies to enhance your experience, analyse site traffic, and assist with marketing. Cookies are small text files stored on your device that help us recognise you and remember your preferences.

Types of cookies we may use include:

  • Essential cookies — required for the basic functionality of our website

  • Analytics cookies — help us understand how visitors interact with our website

  • Marketing cookies — used to deliver relevant advertisements and track campaign effectiveness

  • Preference cookies — remember your settings and preferences

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

9. Direct Marketing

We may use your personal information to send you marketing communications about our services, promotions, partner venue offers, and new experiences. We will only do so where you have consented, or where you would reasonably expect to receive such communications.​

Every marketing communication we send will include a clear and easy way to opt out. If you opt out, we will stop sending you marketing communications promptly. You can also contact us at any time to opt out (see Section 13).

10. Access and Correction

You have the right to request access to the personal information we hold about you and to request corrections if the information is inaccurate, out of date, incomplete, irrelevant, or misleading.

To make a request, please contact us using the details in Section 13. We will respond to your request within a reasonable timeframe. We may need to verify your identity before providing access. In certain circumstances permitted by law, we may refuse a request for access or correction, and we will provide you with written reasons and information about how to make a complaint.

11. Complaints

If you believe we have breached the APPs or handled your personal information inappropriately, you are entitled to make a complaint. To lodge a complaint:​

  1. Contact us using the details in Section 13 with a description of your concern.

  2. We will acknowledge your complaint and investigate it promptly.

  3. We will respond to you in writing within 30 days, outlining the outcome and any steps we have taken or propose to take.

If you are not satisfied with our response, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC):

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by updating the “Last Updated” date at the top of this policy and, where appropriate, by providing notice through our website, app, or email.

We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy, wish to make an access or correction request, or want to lodge a complaint, please contact us:

Discovery Pass Pty Ltd