Privacy Policy
Last Updated: June 2025
Important: This Privacy Policy complies with the Australian Privacy Principles under the Privacy Act 1988 (Cth) and the Privacy and Other Legislation Amendment Act 2024.
1. Introduction
Rhosis (“we,” “our,” or “us”) is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website and use our services.
2. Information We Collect
2.1 Personal Information
We collect the following personal information when you interact with our website and services:
- Contact Form Submissions: Your name, email address, and any messages you provide through our contact form
- Booking Inquiries: Information you provide when inquiring about our properties, including travel dates, group size, and special requirements
- Guest Information: When you book through Airbnb or contact us directly, we may receive your booking details and guest information
- Website Analytics: IP address, browser type, device information, pages visited, and time spent on our website
- Property Management: Information related to our property management services for property owners
- Cookies and Tracking: Information collected through cookies and similar technologies
2.2 Information We Do Not Directly Collect
While payment processing is handled through Airbnb, we may receive booking confirmations and guest details as part of our property management services.
3. How We Use Your Information
We use your personal information for the following purposes:
- Managing and operating our short-term rental properties
- Responding to your inquiries and providing customer service
- Processing booking requests and managing reservations
- Coordinating guest check-ins, check-outs, and accommodation services
- Communicating with guests before, during, and after their stay
- Managing our property portfolio and services for property owners
- Improving our website, properties, and services
- Analyzing website traffic and user behavior
- Marketing our properties and services (only with your consent)
- Complying with legal obligations and industry regulations
- Ensuring the safety and security of our properties and guests
4. Information Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- Service Providers: With trusted third-party service providers who assist us in operating our business, including web hosting, analytics, email services, cleaning services, maintenance providers, and property management tools
- Property Owners: With property owners in our portfolio when necessary for property management purposes, subject to confidentiality agreements
- Booking Platforms: With Airbnb and other booking platforms where our properties are listed, as required for reservation management
- Emergency Services: With emergency services or authorities when necessary for guest safety or security
- Legal Requirements: When required by law, court order, or government regulation
- Business Operations: With professional advisors, insurers, and other parties necessary for our business operations
4.1 Airbnb Integration
As we list our properties on Airbnb, guest information and booking details are shared with Airbnb in accordance with their privacy policy. When you book through Airbnb, both our privacy policy and Airbnb’s privacy policy apply to your information.
5. Data Security
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Secure data transmission using SSL encryption
- Regular security assessments and updates
- Limited access to personal information on a need-to-know basis
- Secure storage of personal information
6. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by Australian law. Our retention periods are based on legal requirements and business needs:
- Guest booking and financial records: 7 years (required by Corporations Act 2001 for financial records and business compliance)
- Employee records: 7 years (required by Fair Work Act 2009)
- Tax-related records: 5 years minimum (required by Australian Taxation Office)
- Contact form submissions: 2 years or until the inquiry is resolved
- Website analytics data: 2 years for business improvement purposes
- Marketing communications: Until you unsubscribe or withdraw consent
- Safety and security records: 3 years or as required by law for guest safety purposes
When personal information is no longer required for these purposes and there is no legal obligation to retain it, we will take reasonable steps to destroy or de-identify the information in accordance with Australian Privacy Principle 11.2.
7. Your Privacy Rights
Under Australian privacy law, you have the following rights regarding your personal information:
- Access: Request access to the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete personal information
- Deletion: Request deletion of your personal information (subject to legal requirements)
- Complaint: Lodge a complaint about our handling of your personal information
- Withdrawal of Consent: Withdraw consent for processing where consent is the legal basis
8. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your browsing experience. For detailed information about our use of cookies, please refer to our Cookie Policy.
9. Third-Party Links
Our website contains links to third-party websites, including Airbnb. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.
10. International Data Transfers
Your personal information may be transferred to and processed in countries other than Australia. When we transfer your information internationally, we ensure appropriate safeguards are in place to protect your privacy rights.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of any material changes by posting the updated policy on our website and updating the “Last Updated” date.
12. Children’s Privacy
Our services are not intended for children under 18 years of age. Under Australian privacy law, individuals under 18 are considered children, and special care must be taken when handling their personal information.
12.1 Consent and Capacity
We assess the capacity of individuals under 18 to consent to the collection and use of their personal information on a case-by-case basis. Generally:
- Individuals 15 years and older are presumed to have capacity to consent, unless circumstances suggest otherwise
- For individuals under 15, we may require parental or guardian consent
- All individuals under 18 must have the maturity to understand what is being proposed
12.2 Additional Protections
We do not knowingly collect personal information from children under 13 through our contact forms without appropriate parental consent. If you believe we have collected information from a child inappropriately, please contact us immediately.
12.3 Compliance with Children’s Online Privacy Code
We are committed to complying with Australia’s developing Children’s Online Privacy Code, which will provide additional protections for children’s online privacy by December 2026.
13. Contact Us
If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or want to lodge a complaint, please contact us:
Email: contact@rhosis.com.au
Office of the Australian Information Commissioner (OAIC):
If you are not satisfied with our response to your privacy complaint, you may lodge a complaint with the OAIC at www.oaic.gov.au or call 1300 363 992.