Last updated: 7 November 2026

1. Introduction

IBOOKED.ONLINE PTY LTD (“Company”, “we”, “us” or “our”) respects your privacy and is committed to responsible and transparent information handling.

This Privacy Policy explains how we collect, hold, use, disclose, process, protect and manage personal information across our businesses, brands, websites, digital platforms, products, services, professional communities and events.

We are an Australian company operating internationally. We aim to follow recognised privacy best practices, including the principles reflected in the Australian Privacy Principles under the Privacy Act 1988 (Cth), and comply with privacy and data protection laws applicable to our activities.

This Policy describes our information-handling practices. Where consent is required by law, we will seek it as appropriate.

2. Company Structure, Brands and Data Ownership

IBOOKED.ONLINE PTY LTD is the legal entity responsible for the business activities covered by this Privacy Policy.

The Company operates multiple brands, trading names, businesses, websites, events and professional communities, including but not limited to:

• iBooked.Online
• STRIVE, including conferences, awards and related events
• The Accommodation Show
• Accommodation Professionals Network
• Other brands, trading names, services and initiatives operated by IBOOKED.ONLINE PTY LTD.

Unless otherwise stated, these activities operate under the same legal entity and are collectively referred to as our “Services”.

Business Data and Ownership

Business records, customer relationship databases, marketing databases, operational records, proprietary datasets, systems, processes and intellectual property developed, compiled or maintained by the Company are owned or licensed by IBOOKED.ONLINE PTY LTD to the extent permitted by law and applicable contractual arrangements.

This does not override individuals’ rights relating to their personal information, nor does it transfer ownership of client-owned materials, guest records or other information governed by separate agreements.

Information collected through our brands may be managed centrally and used across Company operations for appropriate administrative, commercial, operational and marketing purposes, subject to applicable laws, agreements and individual preferences.

3. Information We Collect

Depending on your relationship with us and the Services you use, we may collect and process the following information.

Personal and Contact Information

Names, email addresses, telephone numbers, business addresses, job titles, organisation names and related contact information.

Business and Customer Information

Business details, property information, service requirements, customer accounts, subscriptions, enquiries, support requests, business correspondence, website information and other information relevant to our commercial relationships.

Financial and Transaction Information

Billing information, invoices, transaction records, payment history and information received from payment service providers.

Payment card information may be processed by third-party payment providers under their own security and privacy arrangements.

Event and Community Information

Conference and event registrations, ticketing details, professional profiles, attendance information, networking preferences, survey responses, competition entries, photographs, recordings and other information provided in connection with our events or communities.

Accommodation and Guest Information

Where relevant to the services we provide to accommodation operators, information may include guest names, contact details, reservation information, booking enquiries, stay details, communication records and other information accessed through websites, booking platforms, property management systems or authorised integrations.

Technical and Website Information

IP addresses, device and browser details, website usage information, cookies, tracking identifiers, approximate location information, referral sources and analytics data.

Communications

Emails, messages, meeting records, support correspondence, feedback, chatbot conversations and other communications with our staff, contractors or automated systems.

Recruitment and Contractor Information

Professional experience, qualifications, employment and contractor information and other details relevant to establishing or managing professional relationships.

We do not generally seek to collect sensitive personal information unless reasonably necessary for a particular activity or service. Where required, we will obtain appropriate consent or rely on another legally permitted basis.

4. How We Collect Information

We may collect information:

• Directly from individuals who contact us, complete forms, purchase services, register for events or otherwise interact with our businesses.
• Through meetings, emails, phone calls, messaging services, social media and other communications.
• From customers, accommodation operators and other organisations providing information to us in connection with our services.
• Through websites, booking platforms, CRM systems, marketing systems, integrations and automated technologies.
• From event organisers, partners, sponsors, professional networks and service providers where information is lawfully shared with us.
• Through analytics, cookies, advertising technologies and other tracking tools.
• From publicly available business information, professional directories and other lawful sources.

Where practicable and appropriate, individuals can interact with us anonymously or using a pseudonym. However, certain services require identifying or business information.

If information necessary for a particular service is not supplied, we may be unable to provide that service or respond fully to an enquiry.

5. How We Use Information

We use information for purposes including:

• Providing, managing and improving our products and services.
• Managing customer relationships, accounts, contracts and subscriptions.
• Delivering website development, hosting, marketing, SEO, technology and related services.
• Communicating with customers, suppliers, partners and other business contacts.
• Organising events, conferences, awards, educational activities and professional communities.
• Providing support and responding to enquiries.
• Processing payments and maintaining business records.
• Conducting research, reporting, analytics and performance analysis.
• Managing internal operations, projects, staff and contractors.
• Supporting artificial intelligence and automated technologies.
• Developing and improving business systems and operational processes.
• Marketing our products, brands, services and events where legally permitted.
• Protecting our systems, preventing fraud and maintaining security.
• Meeting applicable contractual, regulatory and legal obligations.

We may use aggregated or appropriately de-identified information for business intelligence, research, reporting and service improvements.

Where a proposed use of personal information falls outside the original purpose of collection, we will assess whether the additional use is permitted under applicable law and obtain consent where required.

6. Information Sharing Across Our Brands

Our brands, services and business activities operate under IBOOKED.ONLINE PTY LTD.

Information collected through one Company brand may be maintained in shared business systems and used in connection with other Company brands where relevant, appropriate and legally permitted.

This may include communications relating to:

• Our products and services.
• Accommodation industry developments.
• Conferences, awards and professional events.
• Educational resources and industry content.
• Technology, marketing and business solutions.
• Professional communities and networking opportunities.
• Other related activities operated by the Company.

We may use existing business relationships and communication preferences to determine the relevance of these communications.

Commercial electronic marketing will be conducted in accordance with applicable privacy and marketing laws, including consent and unsubscribe requirements.

Individuals may unsubscribe from marketing communications at any time.

Opting out of marketing does not necessarily prevent essential account, billing, contractual or operational communications.

7. Artificial Intelligence and Automated Technologies

We use artificial intelligence (AI), machine learning, automation and other digital technologies to support our business operations and Services.

These technologies may be used for:

• Customer service, support and communications.
• Responding to enquiries and processing information.
• Content creation, editing, research and marketing.
• Business analysis, reporting and performance insights.
• Website development, software development and technical support.
• Customer relationship management and workflow automation.
• Booking-related communications and authorised guest assistance.
• Event management, education and professional community activities.
• Internal operational efficiency and service improvements.

Processing Information Using AI

Depending on the activity, AI systems may process personal information, including names, contact details, communications, business records, enquiries, booking-related information and other information relevant to delivering our Services.

We aim to limit personal information submitted to AI systems to information reasonably necessary and appropriate for the intended purpose.

Where information is processed on behalf of a client, its use remains subject to applicable laws, contractual arrangements, authorised purposes and confidentiality obligations.

Third-Party AI Providers

We may use external AI technology providers and platforms to support our Services.

These providers may process information using their own technical infrastructure and in accordance with their applicable terms, contractual commitments, privacy policies and data-handling arrangements.

Where supported by the relevant provider’s terms, settings or contractual arrangements, and where reasonably practicable, we take steps to restrict the use of personal information submitted to AI services for unrelated training of general-purpose AI models.

The availability of these controls and the handling of data may differ between providers and services. We do not guarantee that all AI providers have identical retention, security or model-training arrangements.

We seek to assess the appropriateness of using third-party technologies in light of the information involved and applicable legal and contractual requirements.

AI-Generated Information

AI-generated responses and outputs can contain inaccuracies or incomplete information.

We apply human review and verification where appropriate, having regard to the nature and consequences of the activity.

AI Chatbots and Automated Communications

Some of our websites, platforms and services may include AI-powered assistants, chatbots or automated messaging systems.

Where appropriate, we will make it clear when individuals are interacting with an automated service.

Information submitted through these systems may be processed to respond to enquiries, provide assistance, deliver services and improve relevant operational processes, subject to applicable legal requirements.

Individuals can contact us if they have questions or concerns about the handling of their information through AI-powered systems.

8. Client and Accommodation Guest Information

We provide digital, marketing, website, technology and related services to accommodation providers and other organisations.

In doing so, we may access, receive, store or process information relating to those organisations, their customers and accommodation guests.

Depending on the services and contractual arrangements, our clients may determine the purposes for which guest information is collected and used, while we process that information to deliver authorised services.

We may also independently collect and manage information necessary for our own customer relationships, business administration and legal obligations.

We do not automatically acquire unrestricted ownership or independent marketing rights over guest personal information simply because that information is processed through systems or services we manage.

Personal information handled on behalf of clients will be used consistently with the relevant services, authorised purposes, contractual arrangements and applicable privacy requirements.

Accommodation guests should also refer to the privacy policy of the accommodation operator with whom they are dealing.

Where a privacy enquiry relates primarily to information controlled by an accommodation operator, we may direct the request to that operator or assist with the request where appropriate.

9. Third-Party Technology and Service Providers

We use third-party service providers, contractors, business partners and technology platforms to support our operations and deliver our Services.

These may include providers of:

• Website hosting, cloud infrastructure, domains and storage.
• Customer relationship management and business administration.
• Email, messaging, telecommunications and communications.
• Project management, collaboration and automation.
• Payment processing, accounting and financial services.
• Event registration, ticketing and conference applications.
• Booking systems and property management integrations.
• Marketing, advertising, analytics and customer engagement.
• Artificial intelligence and machine learning technologies.
• Appointment scheduling and online meeting platforms.
• Technical support, cybersecurity and professional services.

We may provide or make available personal information to these providers where reasonably necessary to operate our business, provide our Services or fulfil other lawful purposes.

We seek to apply appropriate privacy, confidentiality and security safeguards, having regard to the information involved and the nature of the provider’s services.

We may also share information with relevant clients, business partners, event participants or other recipients where this is necessary for an authorised service, properly disclosed activity or other lawful purpose.

For example, certain professional profile information may be visible to other participants through an event networking platform, depending on its functionality and privacy settings.

We do not sell personal information to third parties for their independent marketing purposes.

We may disclose information where required or authorised by law, including in response to lawful requests from regulators, government authorities or courts.

10. International Processing and Overseas Contractors

IBOOKED.ONLINE PTY LTD is based in Australia and operates internationally.

We engage overseas contractors, service providers, technology partners and other personnel to assist with delivering our Services and managing our business operations.

Personal information may be accessed, stored, processed or disclosed outside Australia.

Depending on the activities involved, overseas personnel and providers may have access to a broad range of business and personal information, including:

• Customer and prospect information.
• CRM records and business correspondence.
• Customer support information.
• Website and hosting systems.
• Business and operational records.
• Accommodation guest and booking information.
• Event registration and participant information.
• Information maintained in connected third-party platforms.

Access may be provided for website development, technical support, administration, marketing, customer service, systems management, automation and other authorised business functions.

Overseas recipients and processing locations include or are likely to include the United States and the Philippines. Other countries may be involved depending on the technology providers, infrastructure and services used.

We take reasonable steps appropriate to the circumstances to protect information handled internationally, including through confidentiality arrangements, access management, technical safeguards and contractual protections.

Where applicable privacy laws impose additional requirements for international disclosures or transfers, we seek to comply with those requirements.

International processing does not remove our responsibilities regarding the protection and lawful handling of personal information.

11. Cookies, Analytics and Tracking

Our websites and digital platforms may use cookies, pixels, tags and similar technologies.

These technologies support activities including:

• Essential website functions.
• Website performance and usability.
• Analytics and visitor behaviour measurement.
• Advertising and campaign performance.
• Personalisation and remarketing.
• Customer engagement and conversion measurement.
• Website security and operational improvements.

Some technologies are provided by external analytics, advertising or technology providers and may involve sharing certain identifiers or interaction information with those providers.

Users can manage certain cookies and tracking preferences through browser settings, device controls or available website consent and preference tools.

Where applicable law requires consent for particular tracking technologies, we will obtain that consent.

Disabling certain technologies may affect the functionality or performance of some Services.

12. Marketing Communications

We may use personal information to communicate about our services, products, brands, professional communities, educational resources, industry developments, events and related opportunities.

Marketing communications may be delivered through email, telephone, messaging services, digital advertising and other appropriate channels.

We seek to conduct marketing in accordance with applicable laws, consent requirements and individual communication preferences.

Individuals may opt out of marketing communications through available unsubscribe mechanisms or by contacting us.

We do not sell personal information to third parties for their independent marketing purposes.

13. Data Security

We recognise the importance of protecting personal information, including information processed through cloud services, external technologies and international contractors.

We take reasonable steps appropriate to the nature of the information and our operations to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure.

Security measures may include authentication controls, access management, appropriate encryption, system maintenance, confidentiality arrangements, security monitoring and internal procedures.

Authorised employees, contractors and service providers may be given access to systems and information for legitimate operational purposes. The scope of their access depends on the systems, responsibilities and arrangements involved.

We seek to manage access and security risks appropriately, including where personnel are located overseas.

No internet transmission, digital platform or electronic storage system can be guaranteed to be completely secure.

Where a security incident involving personal information occurs, we will assess and respond to it in accordance with applicable legal, contractual and operational requirements.

We will provide notifications to affected individuals, regulators or other relevant parties where required by law.

14. Data Retention and Deletion

We retain personal information for as long as reasonably necessary for permitted business purposes, including:

• Providing and maintaining our Services.
• Managing current and former customer relationships.
• Maintaining business, accounting and financial records.
• Meeting contractual and regulatory requirements.
• Managing enquiries, complaints and legal claims.
• Protecting our systems and maintaining business continuity.
• Complying with other applicable legal obligations.

Retention periods differ depending on the nature of the information, the purpose for which it is held and relevant legal requirements.

When information is no longer reasonably required for a permitted purpose, we take reasonable steps to securely delete, destroy or de-identify it, subject to applicable legal and contractual obligations.

Information may remain in appropriate backup, archive or third-party systems for limited periods according to relevant retention and deletion arrangements.

The termination of a customer relationship does not automatically require the immediate deletion of all associated records. Certain information may continue to be retained where lawful and reasonably necessary.

15. Access, Correction and Privacy Rights

Individuals may contact us to request access to personal information we hold about them or ask us to correct information that is inaccurate, incomplete or outdated.

Depending on applicable law and the circumstances, individuals may also have rights relating to the deletion of information, withdrawal of consent, restrictions on processing or objections to certain uses.

We will consider requests in accordance with applicable legal requirements.

We may request information to verify identity before disclosing personal information or acting on a request.

In certain circumstances, legal, security, contractual or other permitted reasons may limit our ability to fulfil a request.

Where personal information is handled primarily on behalf of another organisation, such as an accommodation operator, we may need to coordinate with that organisation.

16. Children and Young People

Our professional services, events and business communities are generally intended for adults and business users.

We do not knowingly seek to collect personal information from children where it is unnecessary for our operations.

Where information relating to children is reasonably necessary for a booking, event or other authorised activity, we will seek to handle that information appropriately and obtain parental or guardian consent where required by applicable law.

17. Third-Party Websites and Platforms

Our Services may include links to websites, applications, booking systems, payment providers, social media platforms and other services operated by third parties.

Those third parties may collect and process information under their own privacy policies and terms.

We encourage individuals to review relevant privacy information before supplying personal information directly to external organisations.

18. Privacy Enquiries, Requests and Complaints

If you have questions about this Privacy Policy, wish to access or correct personal information, or would like to raise a privacy concern or complaint, please contact IBOOKED.ONLINE PTY LTD using the details below.

Online contact form:

https://www.ibooked.online/contact/

Telephone:

+61 493 211 925

Please include sufficient information to allow us to understand and respond to your enquiry.

We will review privacy enquiries and complaints, investigate where appropriate and endeavour to respond within a reasonable timeframe.

We may require further information or verification of identity before fulfilling certain requests.

If you are dissatisfied with our response, you may have the right to raise the matter with an applicable privacy or data protection authority, depending on the circumstances and relevant law.

Information about the Office of the Australian Information Commissioner is available at:

https://www.oaic.gov.au/

19. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our business activities, services, brands, technologies, legal requirements or information-handling practices.

Updated versions will be published through our relevant websites with an updated revision date.

Where required by applicable law, we will provide additional notice or obtain consent before implementing materially different uses or disclosures of personal information.

20. Company Information

IBOOKED.ONLINE PTY LTD

Australia

Website: https://www.ibooked.online/

Privacy enquiries and contact form:

https://www.ibooked.online/contact/

Telephone: +61 493 211 925

This Privacy Policy applies to the brands, trading names, websites, events and Services operated by IBOOKED.ONLINE PTY LTD, unless a separate policy expressly applies.