Privacy policy.

Medusa Bondi is proudly owned and managed by Hotel Coco Pty Ltd.

Privacy Policy

This Privacy Policy outlines how Hotel Coco Pty Ltd ABN 18 675 694 238 (Medusa Bondi, MB, we, us or our) collects, uses, stores and discloses your personal information when you access or use our website (Website) and services (Services).

Personal Information We Collect

Information Required to Use Our Services

When you use our Services, we may collect:

Contact Information

  • First and last name

  • Phone number

  • Email address

  • Postal address

  • Date of birth

  • Profile photo (where applicable)

Identity Verification & Payment Information

  • Government-issued identification (where permitted by law)

  • Identification numbers or verification details

  • Bank account or payment details

Information You Choose to Provide

You may choose to provide additional information, including:

Additional Details

  • Gender

  • Preferred language

  • City or location

  • Personal descriptions or preferences

Other Information

  • Information submitted through forms, surveys or promotions

  • Communications with our team

  • Reviews, feedback or forum participation

  • Travel-related details (including co-traveller information)

  • Any other information you choose to share (including optional health-related information)

How We Use Your Information

To Provide and Improve Our Services

We use your personal information to:

  • Process enquiries, bookings and payments

  • Communicate with you (including confirmations, updates and support)

  • Provide customer service

  • Improve and optimise our Website and Services

  • Conduct analytics, research and troubleshooting

  • Prevent fraud and enhance security

If you provide information about others (e.g. co-travellers), we may use it to:

  • Facilitate bookings and trip coordination

  • Share relevant reservation details

Marketing and Communications

We may use your information to:

  • Send marketing communications, promotions and offers

  • Personalise advertising and content

  • Administer promotions, competitions or events

  • Invite you to relevant experiences or brand activations

You can opt out of marketing communications at any time.

Sharing and Disclosure

With Your Consent

We may share your information where you have provided consent, including:

  • Third-party integrations or services

  • Promotions or partnerships

We may also share de-identified data (e.g. hashed email addresses) with marketing platforms to improve advertising performance.

Legal and Safety Obligations

We may disclose your information where required or permitted by law, including to:

  • Government authorities, courts or regulators

  • Law enforcement agencies

  • Legal or professional advisors

This may occur where necessary to:

  • Comply with legal obligations

  • Respond to legal requests or disputes

  • Prevent fraud or illegal activity

  • Protect the rights, safety or property of MB, our users or the public

Service Providers

We may share information with trusted third-party providers who assist us in operating our business, including services related to:

  • Identity verification

  • Payment processing

  • Customer support

  • Marketing and analytics

  • IT systems and hosting

These providers are required to protect your information and only use it for authorised purposes.

Business Transfers

If MB undergoes a business transaction (such as a merger, sale or restructuring), your information may be transferred as part of that process. We will notify you where required.

Your Rights

Access and Correction

You may request access to, or correction of, your personal information at any time by contacting us.

You are responsible for ensuring your information is accurate and up to date.

Data Deletion

You may request that we delete your personal information.

Please note:

  • We may retain certain information where required by law (e.g. tax or legal obligations)

  • Some information (such as reviews or public content) may remain visible

  • Backup or archived data may be retained for a limited period

Security

We take reasonable steps to protect your personal information through administrative, technical and physical safeguards.

However, no system is completely secure, and we cannot guarantee absolute security.

Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be published on this page with a revised “Last Updated” date.

If you do not agree with any changes, you may discontinue use of the Website and request account deletion. Continued use of the Website constitutes acceptance of the updated Privacy Policy.