Privacy Policy
Muscat Active Pty Ltd trading as Your Velvet Passport | ABN 15 612 593 129
Working draft | August 2026
This Privacy Policy explains how Muscat Active Pty Ltd trading as Your Velvet Passport (“Your Velvet Passport”, “we”, “us” or “our”) collects, uses, stores and discloses personal information. It applies to our website, www.yourvelvetpassport.com, and to the enquiries, bookings, retreats and experiences we offer.
We are committed to handling personal information respectfully and in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles and other applicable privacy laws. A retreat is a personal experience, and we understand that the information you share with us deserves care.
1. The Information We Collect
The personal information we collect depends on how you interact with us. It may include:
Your name, email address, telephone number and postal address.
Booking details, including your room preferences, accommodation requirements and emergency contact details.
Payment related information, such as billing details and records of payments made. Card payments are processed by secure third party payment providers and we do not store full card numbers.
Dietary requirements and food allergies.
Health information you provide through health questionnaires, screening forms, waivers or correspondence, including physical and mental health conditions, injuries, medications and pregnancy, where relevant to your safe participation.
Information you provide in enquiry forms, emails, telephone calls and messages.
Marketing preferences, including whether you have subscribed to our mailing list.
Website usage information collected through cookies and similar technologies, such as pages visited, device type and general location data.
2. Sensitive Information
Some of the information we collect, particularly health information, is classified as sensitive information under Australian privacy law.
We only collect sensitive information with your consent and only where it is reasonably necessary to assess whether retreat activities are suitable and safe for you, to accommodate your needs during the retreat and to respond appropriately in an emergency.
You may choose not to provide health information. However, if we do not have the information we reasonably need to support your safe participation, we may be unable to confirm your booking or may need to limit your participation in certain activities.
3. How We Collect Information
We collect personal information directly from you when you submit an enquiry or booking through our website or a booking platform, complete a registration, health questionnaire or waiver, subscribe to our mailing list, contact us by email or telephone, or interact with us on social media.
If you book on behalf of another person, we ask that you only provide their information with their permission.
4. How We Use Your Information
We use personal information to:
Respond to your enquiries and manage your booking.
Arrange accommodation, meals, activities and treatments for your retreat.
Assess the suitability and safety of retreat activities for you.
Communicate with you before, during and after your retreat.
Process payments and maintain business records.
Send you marketing communications where you have opted in, which you can unsubscribe from at any time.
Improve our website, retreats and services.
Meet our legal, safety and insurance obligations.
We do not sell personal information.
5. Who We Share Information With
We only share personal information where it is reasonably necessary to deliver our services or where the law requires or permits it. Depending on your booking, we may share relevant information with:
The venue and accommodation provider for your retreat.
Facilitators, practitioners and therapists delivering activities or treatments you will participate in, limited to the information they reasonably need to support your safe participation.
Catering providers, limited to dietary requirements and allergies.
Payment processors, booking platforms and email service providers that support our business operations.
Emergency services or medical professionals, where reasonably necessary to protect your health or safety.
Professional advisers and insurers, where reasonably required.
Service providers who handle information on our behalf are expected to protect it and use it only for the purpose for which it was provided.
6. Overseas Disclosure
Some of the service providers we use, such as our website platform, email marketing service and payment processors, may store or process information on servers located outside Australia, including in the United States.
Where information is transferred overseas, we take reasonable steps to ensure it is handled in accordance with Australian privacy law and the provider’s published privacy and security practices.
7. Cookies and Website Analytics
Our website uses cookies and similar technologies to help the site function properly and to help us understand how visitors use it. This information is generally collected in an aggregated form that does not identify you personally.
You can manage or disable cookies through your browser settings. Doing so may affect how parts of the website work.
8. Storage and Security
We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure. This includes using reputable service providers, password protection and limiting access to personal information to those who need it.
Health information collected for a retreat is treated with particular care, is accessed only by those who reasonably need it and is securely destroyed or de-identified when it is no longer required.
No method of storage or transmission is completely secure, and we cannot guarantee absolute security. If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by law.
9. How Long We Keep Information
We keep personal information only for as long as it is reasonably needed for the purposes described in this policy, or as required for legal, accounting, safety or insurance purposes. When information is no longer required, we take reasonable steps to securely destroy or de-identify it.
10. Access and Correction
You may request access to the personal information we hold about you, and ask us to correct information that is inaccurate, out of date or incomplete. Requests can be made by emailing info@yourvelvetpassport.com.
We will respond within a reasonable timeframe. In limited circumstances permitted by law, we may decline a request, and if we do, we will explain why.
11. Marketing Communications
We only send marketing emails to people who have subscribed or otherwise consented to receive them. Every marketing email includes an unsubscribe link, and you can also opt out at any time by emailing info@yourvelvetpassport.com.
12. Third Party Websites
Our website may contain links to websites operated by third parties. We are not responsible for the privacy practices of those websites, and we encourage you to review their privacy policies.
13. Complaints
If you have a concern about how we have handled your personal information, please contact us at info@yourvelvetpassport.com. We take privacy concerns seriously and will investigate and respond within a reasonable timeframe.
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The current version will always be published on our website, and the date at the top of this policy indicates when it was last updated.
Contact
Muscat Active Pty Ltd trading as Your Velvet Passport
Email: info@yourvelvetpassport.com
Website: www.yourvelvetpassport.com
ABN: 15 612 593 129