Privacy Policy
Last updated: 22 August 2026
This privacy policy explains how PORT PRESTIGE PTY LTD, ABN 58 609 696 406, trading as Shantara Resort Port Douglas (“we”, “us”, “our”), collects, uses, stores and discloses your personal information. It applies to this website (www.shantara.com.au), to our booking and enquiry process, and to the guest services we provide at the resort.
We handle personal information in line with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). By using our website, making a booking or contacting us, you agree to your personal information being handled as set out in this policy.
What personal information we collect
We collect personal information that you give us directly. Depending on how you deal with us, this may include:
- your name
- your email address
- your phone number
- your postal or home address
- your booking details, such as dates of stay, room type, the number of guests and any special requests or preferences you tell us
- payment information, such as credit or debit card details, when you make a booking or pay an account (see “Bookings and payments” below for how this is handled)
- the details you enter in our website forms, including contact enquiries, guest feedback and reviews, airport transfer requests and breakfast hamper orders
- messages you send us through our website live chat, by email or by phone
- your marketing preferences, if you subscribe to our newsletter
When you use our website we also collect some technical information automatically, such as your IP address, browser and device type, the pages you visit, and how you arrived at the site. This is collected through cookies and similar technologies and through analytics tools. See “Cookies and analytics” below.
We do not usually collect sensitive information (such as health information). If you choose to give us health, dietary, accessibility or similar details so we can look after you during your stay, we collect it only with your consent and only to provide that service. Please do not send us sensitive information we do not need.
How we collect it
We collect personal information:
- directly from you, when you make a booking, complete a form on our website, use our live chat, email us, phone us, or speak with our team at the resort
- through our online booking system when you book a stay
- automatically, through cookies and analytics, when you browse our website
- occasionally from third parties you have booked through, such as an online travel agent or a travel agent acting for you
Why we collect, hold and use it
We use your personal information to:
- take and manage your booking and provide the accommodation and services you have asked for
- process payments, deposits and account charges
- arrange extras you request, such as airport transfers or a breakfast hamper
- respond to your enquiries, feedback and reviews
- contact you about your stay, including confirmations and important information before you arrive
- send you our newsletter and offers, where you have agreed to receive them
- improve our website, our services and your guest experience
- keep proper business records and meet our legal, tax and safety obligations
We will only send you marketing messages where you have consented, and you can opt out at any time (see “Direct marketing” below).
Bookings and payments
Online bookings are taken through our booking system, Resly (onlinebooking.direct). When you book online, your booking and payment card details are collected and processed through Resly and its payment provider. We do not store your full card number on our website.
When you pay a deposit, settle an account, or provide a card as security at check-in, your card is processed through a secure payment facility. We keep only what we need to manage your booking and our records, and we handle card data in line with our payment provider’s security requirements.
Website forms and live chat
Our website forms (contact enquiries, guest feedback and reviews, airport transfer requests and breakfast hamper orders) send the details you submit to our reception team by email. Our email is provided through Google Workspace (Gmail). To reduce spam, our forms use Cloudflare Turnstile, which checks that a submission is from a real person.
If you use the live chat on our website, we collect the messages you send and any contact details you provide so we can answer you.
If you request an airport transfer, we pass the details needed to arrange it (such as your name, flight details and pick-up information) to our transfer operator.
Cookies and analytics
Our website uses cookies and similar technologies to make the site work, remember your preferences, and understand how the site is used. We use Google Analytics 4 and Google Tag Manager to collect information about how visitors use the site, such as pages viewed and time on site, so we can improve it. This information is mostly aggregated and does not usually identify you.
You can control or refuse cookies through your browser settings. If you block cookies, some parts of the site may not work as well. You can opt out of Google Analytics across all websites by installing the Google Analytics Opt-out Browser Add-on (tools.google.com/dlpage/gaoptout).
Who we share it with
We do not sell your personal information. We share it only where it is needed to run the resort and provide our services, including with:
- our booking system provider, Resly, and its payment provider, to take and process bookings
- our website hosting and infrastructure providers, including Cloudways (hosting) and Cloudflare (content delivery and website security)
- Google, for our business email (Google Workspace) and website analytics
- our airport transfer operator when you request a transfer
- our newsletter and marketing email provider, when you subscribe
- our payment provider, to process payments
- professional advisers, and government agencies or others where we are required or authorised to do so by law
We ask these providers to protect your information and to use it only for the purposes we engage them for.
Overseas disclosure
Some of the providers we use store or process information on servers outside Australia. In particular, Google (Google Workspace and Google Analytics) and Cloudflare operate globally and may handle information in the United States and other countries. Where we disclose information overseas, we take reasonable steps to make sure it is handled consistently with the Australian Privacy Principles. By using our website and services, you consent to your information being handled in this way.
How we store and protect it
We take reasonable steps to protect your personal information from misuse, loss, and unauthorised access, modification or disclosure. This includes secure hosting, encrypted connections (HTTPS), spam and bot protection on our forms, and limiting access to staff and providers who need it. No method of transmission or storage over the internet is completely secure, so we cannot guarantee absolute security.
We keep personal information only for as long as we need it for the purposes described in this policy, or for as long as the law requires, and then take reasonable steps to delete or de-identify it.
Accessing and correcting your information
You can ask us for a copy of the personal information we hold about you, and ask us to correct it if it is wrong, incomplete or out of date. Please contact us using the details below. We will respond within a reasonable time. There is normally no charge, although we may charge a reasonable fee for larger requests, and we will tell you before any fee applies. If we cannot give you access or make a correction, we will explain why in writing.
Direct marketing
If you have subscribed, we may send you our newsletter and offers by email. You can opt out at any time by using the unsubscribe link in any marketing email, or by contacting us using the details below. We will action your request promptly. Opting out of marketing does not stop service messages about a booking you have made.
Children’s privacy
Shantara Resort Port Douglas is an adults-oriented couples resort, and our website is intended for adults. We do not knowingly collect personal information from children. If you believe a child has given us personal information, please contact us and we will delete it.
How to make a privacy complaint
If you think we have mishandled your personal information or breached the Australian Privacy Principles, please contact us first using the details below. We will look into your complaint and respond within a reasonable time.
If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC):
- Website: www.oaic.gov.au
- Phone: 1300 363 992
Changes to this policy
We may update this policy from time to time. The current version will always be available on this page, with the effective date and the last updated date shown at the top.
Contact us
For any privacy question, request or complaint:
Shantara Resort Port Douglas operated by PORT PRESTIGE PTY LTD, ABN 58 609 696 406
Email: [email protected]
Phone: +61 7 4084 1400
Post: 27-31 Davidson Street, Port Douglas QLD 4877