Murray River Houseboats Privacy Policy

Moama Houseboats ABN 15 096 547 885, trading as Murray River Houseboats (Murray River Houseboats, us, we, our), takes your privacy seriously and is committed to responsible privacy practices.
We seek to comply with our obligations under the Privacy Act 1988 (Cth) (Privacy Act), including the Australian Privacy Principles. This Privacy Policy describes how we collect, use, disclose, store and handle your personal information.

What is personal information?

In this Privacy Policy, ‘personal information’ has the meaning set out in the Privacy Act. In general terms, it is information or an opinion about an individual who is identified, or can reasonably be identified, from that information.
Some types of personal information are ‘sensitive information’, which has extra protection under the Privacy Act. For example, this includes information about your health.

What types of personal information do we collect?

The personal information we collect depends on how you deal with us. This can include:

  • if you make a booking: your name, address, email address, telephone number, credit card details for your deposit and other payments, and details of your booking such as your dates, the boat you have chosen, the number of people in your group and any requests you make;
  • if you have asked to receive our news and specials: your name and email address;
  • if you contact us with an enquiry, feedback or a complaint: your name, contact details and anything you tell us; and
  • if you are one of our suppliers or contractors: your name and business contact details.

Generally, we do not collect sensitive information about you. The exception is where you choose to tell us something we need to know for your safety on board.
When you visit our website, our website hosting provider also records technical information such as your IP address, browser type, the pages you view, and the date and time of your visit.

How do we collect personal information?

We collect your personal information directly from you, including when you:

  • call or email us to make an enquiry or booking;
  • speak with us in person, including when you arrive for your hire;
  • ask to receive our news and specials; and
  • visit our website.

We do not take bookings or payments through our website, and we do not take bookings through third-party booking sites or travel agents.
Where it is reasonable and practicable, we only collect personal information about you from you. Occasionally someone else may give us your details, for example if they make a booking on your behalf. If you give us personal information about another person, you must make sure they know you are doing so and are aware of this Privacy Policy.

If we receive personal information we did not ask for and do not need, we will destroy it or de-identify it.

Our website uses the following technologies:

  • log files, kept by our website hosting provider, which record visits to the website; and
  • cookies set by Google through the map and YouTube video on our website. Google handles this information under its own privacy policy at policies.google.com/privacy. For more information about cookies and how to disable them, visit allaboutcookies.org.

Can you choose not to disclose your personal information?

If you contact us with a general enquiry about our houseboats, rates or availability, you do not have to identify yourself. You can also tell us you wish to deal with us using a pseudonym.

However, we need your name, contact details and payment details to take a booking. If you do not provide them, we will not be able to accept your booking.
You can set your web browser to block cookies. You can still use our website if you do, but some parts, such as the map and video, may not work properly.

How do we use your personal information?

We use your personal information to:

  • respond to your enquiries;
  • take, confirm and manage your booking;
  • process your deposit and other payments;
  • contact you about your booking, including any changes caused by river conditions or other events;
  • keep you and other river users safe, and deal with any incident or insurance claim;
  • meet our legal, tax and accounting obligations;
  • deal with our suppliers and contractors;
  • respond to any questions or complaints about how we handle your personal information; and
  • send you our news and specials, if you have agreed to receive them (see “Direct marketing communications” below).

We may also use or disclose your personal information for other purposes you have agreed to, or as otherwise required or permitted by law.

The technical information recorded when you visit our website is used only to run and secure the website.

To whom do we disclose personal information?

We do not sell, rent or trade your personal information, and we do not give it to other businesses for their own marketing.
We may disclose your personal information to the following types of third parties, in connection with the purposes described above:

  • our bank, to process your card payments;
  • third-party service providers who help us run our business, such as Mailgun, which we use to send marketing emails, and our IT, email and website hosting providers;
  • our professional advisers (such as our accountant and lawyers) and our insurers;
  • any potential buyer of our business, and that buyer’s advisers, under a confidentiality agreement, and the new owner if our business is sold, so they can look after existing bookings;
  • third parties you have asked us to share your information with; and
  • police, emergency services, government agencies or any other person, as required or permitted by law.

Where we disclose your personal information to a service provider, we take reasonable steps to make sure they only use it for the purpose we provided it and keep it confidential.

Direct marketing communications

We will only send you direct marketing emails, such as news, specials and promotions, where you have agreed for us to do so. We send these emails using Mailgun.
You can opt out at any time by using the unsubscribe link in any of our emails, or by contacting us using the details below. We will action your request within 5 business days. If you opt out, we will still contact you about any booking you have with us.

Does personal information leave Australia?

We store your booking records in Australia. However, Mailgun, which we use to send marketing emails, is based in the United States. If you have agreed to receive our news and specials, your name and email address will be stored there.
We do not otherwise disclose your personal information to anyone overseas. Where we do disclose personal information overseas, we take reasonable steps to make sure the recipient does not breach the Australian Privacy Principles in relation to it.

How do we protect your personal information?

We take reasonable steps to protect your personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. This includes keeping paper records in a locked office, using passwords on our computers and email accounts, and only letting staff who need your information see it.

We use your credit card details only to process your payments. We do not keep your full card number once a payment has been processed, and we never keep the security code from the back of your card. Please do not send us your card details by email. We will take them over the phone.

The Notifiable Data Breaches scheme in Part IIIC of the Privacy Act sets out when affected individuals and the Australian Information Commissioner must be notified about a data breach that is likely to result in serious harm. If a data breach involving your personal information is likely to cause you serious harm, we will notify you, and the Commissioner where required, in line with our legal obligations.

How long do we keep your personal information?

We keep your personal information for as long as we need it for the purposes it was collected for, unless the law requires us to keep it longer, or we reasonably need it to meet our tax, insurance and legal obligations or to resolve a dispute.
When we no longer need your personal information, we take reasonable steps to securely destroy it or de-identify it.

How can you access and correct your personal information?

You can ask for access to the personal information we hold about you at any time by contacting us. There is no charge for making a request. We may need to confirm your identity before we provide it.
If you believe personal information we hold about you is incorrect, incomplete or out of date, you can ask us to correct it.
We will respond to access and correction requests within 30 days. If we refuse a request, we will tell you why in writing and how you can complain about our decision.

What is the process for complaining about a breach of privacy?

If you have any questions, concerns or complaints about how we have collected, used, disclosed or managed your personal information, please contact us in writing using the details below.
We will acknowledge your complaint within 7 days, look into it, and give you our response in writing within 30 days.
If you are not satisfied with the outcome, you may be able to make a complaint to the Office of the Australian Information Commissioner at www.oaic.gov.au or on 1300 363 992.

Changes to this privacy policy

We may change this Privacy Policy from time to time. The current version will always be posted on our website, with the date it was last updated. If we want to use your personal information in a way this Privacy Policy does not cover, we will ask you first.

How to contact us

If you have a question, concern or complaint about how we have collected or handled your personal information, or would like to request access to or correction of the personal information we hold about you, please contact us using the details below:

Attention: Privacy Officer Murray
River Houseboats
PO Box 1040
Echuca VIC 3564
info@mrhboats.com.au
(03) 5480 2343

Last updated: October 2026