Byron Retreat
Privacy Policy
Last updated 12 November 2026
To be completed by the owner: the legal entity name, the ABN and a postal address for notices. Three values, used in the places marked [LEGAL ENTITY], [ABN] and [POSTAL ADDRESS] below.
This policy explains what Byron Retreat collects when you use retreatatbyron.com, why, and who else sees it. It is written against what the site actually does; if the site changes, this page changes with it.
The site is operated by [LEGAL ENTITY] (ABN [ABN]), a short-term rental accommodation provider in Byron Bay, New South Wales (STRA registration PID-STRA-29639).
What we collect
- When you book: your name, email address, phone number, the dates of your stay and the number of guests.
- When you pay: nothing. Card details are entered directly into Stripe's own payment form and never reach our server. We receive only a payment reference and whether it succeeded.
- When you use the contact form: your name, email, phone number if you give one, and your message.
- When you talk to Sunny, our AI concierge: what you type, so it can answer you.
- Server logs: ordinary web-server records — IP address, time, the page requested. Email addresses in our own application logs are shortened, so a full address is not written there.
We do not use analytics or advertising cookies, and we do not track you across other websites. The only cookie the site sets is for the owners' own sign-in, not for guests.
Why we hold it
To take and honour your booking, to let you into the house, to answer you, to meet our obligations as a registered short-term rental, and to keep accounting records. We do not sell your information, and we do not share it for anyone else's marketing.
Who else sees it
Only the services that make the booking work, and only the part each one needs:
- Stripe — payments. Stripe is the processor; its own privacy policy governs the card data you give it.
- Resend — sends your confirmation and other booking emails.
- Anthropic and OpenAI — power Sunny. What you type to Sunny is sent to them to generate a reply.
- Telegram — carries booking alerts to the owners.
- Render — hosts the site and stores its data.
Some of these operate outside Australia, so your information may be processed overseas, including in the United States and the European Union.
How long we keep it
Booking and payment records are kept for [RETENTION PERIOD — the owner sets this; Australian tax law requires at least five years]. Enquiries that do not become bookings, and conversations with Sunny, are kept only as long as they are useful for answering you.
Your rights
You can ask us what we hold about you, ask us to correct it, and ask us to delete it where we are not required to keep it. Write to stay@retreatatbyron.com and we will answer within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Security
The site is served over HTTPS. Card details never reach our server. The guest guidebook — which carries door and Wi-Fi codes — opens only with a link unique to your booking, and that link stops working after you check out.
Contact
[LEGAL ENTITY], [POSTAL ADDRESS]
stay@retreatatbyron.com