Privacy Policy
This Privacy Policy explains how Nura Lodge collects, uses, stores and protects personal information when you visit nuralodge.com (the "Site"). It is written to meet the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations (PECR) and the Australian Privacy Principles in the Privacy Act 1988 (Cth).
1. Who we are
The Site is operated by:
BLACKFIRE MARKETING LTD
Registered in England and Wales
Registered office: 86-90 Paul Street, London, England, EC2A 4NE, United Kingdom
Email: info@nuralodge.com
BLACKFIRE MARKETING LTD is the "data controller" responsible for your personal information. In this policy, "we", "us" and "our" mean BLACKFIRE MARKETING LTD.
2. The short version
- Nura Lodge is an independent information guide to luxury hotels in Australia. It is not an affiliate or booking website, and we do not take bookings or process payments.
- You don't need to create an account or give us any personal information to use the Site.
- We only collect limited technical information when you browse, and the information you choose to send us by email.
- Analytics and advertising cookies are only used if you accept them.
- We never sell your personal information.
3. Information we collect
3.1 Information you give us
If you email us, we receive your email address, your name if you include it, and anything you write in your message.
3.2 Information collected automatically
When you visit the Site, our hosting provider automatically records standard server log information, which may include:
- your IP address;
- browser type and version, device type and operating system;
- the pages you visit, the date and time of your visit, and the page that referred you to the Site.
3.3 Cookies and similar technologies
We use cookies and similar technologies as described in section 6. Non-essential cookies are only set with your consent.
3.4 Information we do not collect
We do not knowingly collect sensitive information (such as health, racial or ethnic origin, religious or political information), payment card details or identity documents. Please do not send us this type of information.
4. How we use your information and our legal bases
| Purpose | Information used | Legal basis (UK GDPR) |
|---|---|---|
| Operating, maintaining and securing the Site, and preventing misuse | Server log information | Legitimate interests: keeping the Site working and secure |
| Replying to your emails and handling correction requests or complaints | Email address, name, message content | Legitimate interests: responding to enquiries |
| Understanding how visitors use the Site so we can improve it (if analytics is used) | Analytics cookie data | Consent |
| Measuring the performance of our Google Ads campaigns (if conversion tracking is used) | Advertising cookie data | Consent |
| Showing our ads to people who have visited the Site (if remarketing is used) | Advertising cookie data | Consent |
| Meeting legal and regulatory obligations | Any relevant information | Legal obligation |
Where we rely on consent, you can withdraw it at any time using the "Cookie settings" link in the footer of every page. Withdrawing consent does not affect processing that took place before you withdrew it.
We do not use your information for automated decision-making or profiling that produces legal or similarly significant effects.
5. Google services
We advertise the Site using Google Ads and may use other Google services, which involve cookies and similar technologies.
5.1 Google Ads conversion tracking
If you accept advertising cookies, Google Ads conversion tracking records when a visitor who arrived from one of our ads views certain pages of the Site. This helps us understand how effective our ads are. We receive only aggregated reports and cannot identify you personally from them.
5.2 Remarketing
If you accept advertising cookies, we may use Google Ads remarketing to show our ads to people who have previously visited the Site when they visit other websites in the Google Display Network or search on Google. Google, as a third-party vendor, uses cookies to serve these ads based on your past visits to the Site and other websites.
5.3 Google Analytics
If you accept analytics cookies, we use Google Analytics 4 to understand how visitors use the Site (for example, which pages are popular and how long visitors stay). Google Analytics collects information such as pages visited, approximate location (derived from your IP address, which Google Analytics 4 does not store), device and browser information, and how you arrived at the Site.
5.4 Google Consent Mode
We use Google Consent Mode. Until you accept, analytics and advertising storage is set to "denied", and Google tags do not set analytics or advertising cookies on your device.
5.5 Controlling Google advertising
- How Google uses information from sites that use its services: https://policies.google.com/technologies/partner-sites
- Opt out of personalised advertising by Google: https://adssettings.google.com
- Opt out of personalised advertising by many third-party vendors: https://www.aboutads.info/choices and https://www.youronlinechoices.com
- Opt out of Google Analytics across all websites: https://tools.google.com/dlpage/gaoptout
8. International transfers
We are based in the United Kingdom. Our service providers, including Google, may process information in other countries, including the United States, the European Economic Area and Australia.
When personal information is transferred outside the UK, we make sure it is protected by an appropriate safeguard, such as a UK adequacy regulation (including the UK Extension to the EU–US Data Privacy Framework, where the recipient is certified), or the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses.
For visitors in Australia: personal information you provide or that is collected through the Site is likely to be disclosed to and held in the United Kingdom and the United States. We take reasonable steps to ensure overseas recipients handle it in a way that is consistent with the Australian Privacy Principles.
9. How long we keep information
- Emails and correspondence: up to 24 months after our last contact with you, unless we need them longer to deal with a complaint or legal matter.
- Server logs: up to 90 days, unless needed longer to investigate a security issue.
- Analytics data: 14 months in Google Analytics.
- Cookies: as listed in section 6.
When information is no longer needed, we delete or anonymise it securely.
10. How we protect information
We use reasonable technical and organisational measures to protect personal information, including encrypted (HTTPS) connections to the Site, access controls on our accounts and service providers who maintain appropriate security standards. No method of transmission over the internet is completely secure, but we work to protect your information and will act promptly if a security incident occurs, including notifying regulators and affected individuals where the law requires.
11. Your rights
11.1 Under UK data protection law
You have the right to:
- access the personal information we hold about you;
- correct inaccurate or incomplete information;
- erase your information in certain circumstances;
- restrict or object to our processing, including processing based on legitimate interests;
- data portability in certain circumstances;
- withdraw consent at any time where we rely on consent.
11.2 Under the Australian Privacy Principles
You may request access to, and correction of, the personal information we hold about you.
11.3 How to make a request
Email us at info@nuralodge.com. We may need to confirm your identity before acting on your request. We will respond within one month (UK) or within 30 days (Australia). There is normally no charge.
12. Complaints
If you have a concern about how we handle your personal information, please contact us first at info@nuralodge.com and we will try to resolve it.
You also have the right to complain to a regulator:
- United Kingdom: Information Commissioner's Office (ICO): https://ico.org.uk, telephone 0303 123 1113.
- Australia: Office of the Australian Information Commissioner (OAIC): https://www.oaic.gov.au, telephone 1300 363 992. The OAIC generally asks that you contact us first and allow 30 days for a response.
- European Economic Area: the data protection authority in your country of residence.
13. Children
The Site is intended for adults and is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has sent us personal information, please contact us and we will delete it.
14. Links to other websites
The Site may link to other websites, such as hotels' official websites or government travel information. We are not responsible for the privacy practices of those websites, and we encourage you to read their privacy policies.
15. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top shows when it was last changed. Significant changes will be highlighted on the Site.
16. Contact us
BLACKFIRE MARKETING LTD
86-90 Paul Street, London, England, EC2A 4NE, United Kingdom
Email: info@nuralodge.com