Privacy Policy

The Ocean Park Group – Last updated: 22nd October 2026

Who we are

This Privacy Policy applies to The Ocean Park Group and each of its businesses:

Ocean Park
Shark Bay Eco Tours
Shoreline Cafe
Oceans Restaurant
The White House Denham

In this policy, “we”, “us” and “our” means The Ocean Park Group and any of the businesses above.

We are committed to protecting the privacy of everyone who deals with us. We handle personal information in line with the Privacy Act 1988 (Cth), the Australian Privacy Principles and the Spam Act 2003 (Cth). This policy explains what information we collect, why we collect it, how we use and protect it, and the choices you have.

What information we collect

Depending on how you deal with us, we may collect:

Contact details, such as your name, email address, phone number and postcode or country.
Booking and purchase details, such as tour, accommodation and dining bookings, dates, number of guests, special requests (including dietary or accessibility needs you choose to tell us about) and purchase history.
Payment information, handled as described under “Payments and card details” below.
Marketing preferences, such as which mailing lists you have joined, the topics you are interested in and which of our businesses you have booked with.
Website and email information, such as pages visited, the site you came from, your browser and device type, and whether you open or click our emails.
Enquiries and feedback you send us by email, phone, our website forms or social media.

How we collect it

We collect personal information:

directly from you, when you book, buy, make an enquiry, join a mailing list or speak with our team;
through our booking and payment systems when you book or pay; and
from third-party booking channels (for example online travel agents) when you book through them. Those channels pass us the details we need to deliver your booking.

How we use it

We use your personal information to:

take, confirm and manage your bookings and purchases;
process payments and refunds;
contact you about your booking, including confirmations, pre-arrival information and changes;
respond to your enquiries and feedback;
send you marketing emails, only if you have opted in (see “Mailing lists and marketing”);
improve our services, website and guest experience; and
meet our legal, tax and accounting obligations.

Payments and card details

We do not store full credit or debit card numbers on our own systems. Card payments are processed by secure third-party payment providers:

In-person retail and food and beverage payments are processed through Lightspeed (using Lightspeed Payments) and ImPos (using Tyro). Some outlets may also use Square, which we are phasing out.
Tour bookings are made through FareHarbor, which records and processes payment information securely at the time of booking.
Direct accommodation bookings are made through Little Hotelier, which records and processes payment information securely at the time of booking.
Accommodation booked through a third-party channel (such as an online travel agent): your card and payment details are collected and held by that channel, not by us. Their own privacy policy applies to that information.

Our websites use encrypted (HTTPS) connections.

Mailing lists and marketing

You can join the Ocean Park Family mailing list, for example through the link in your booking confirmation email or on our website. One list covers news and offers from all of The Ocean Park Group businesses.

Double opt-in: after you sign up, we send you an email asking you to confirm your subscription. You will not receive marketing emails until you confirm.
Your preferences: when you sign up you can choose the topics and businesses you want to hear about. We use these choices to send you only relevant emails.
Change or unsubscribe at any time: every marketing email includes a link to update your preferences or unsubscribe. Unsubscribing does not affect emails about a booking you have made with us.
Email platform: we use Klaviyo to manage our mailing lists and send emails. Klaviyo stores subscriber details on our behalf and records whether our emails are opened or clicked.

We will never sell, rent or trade your personal information.

Limestone Coast mailing lists

When you sign up, you may also be offered the option to join mailing lists run by Limestone Coast Brewery. This is entirely optional and is a separate choice from joining our list. If you tick that option, we will pass your name, email address and the preferences you selected to Limestone Coast Brewery so they can send you their emails. From then on, Limestone Coast Brewery handles your information under its own privacy policy. You can unsubscribe from their emails at any time using the link in those emails.

Who we share it with

We only share personal information with:

service providers who help us run our businesses, including booking, point-of-sale, payment, email and website providers (such as FareHarbor, Little Hotelier, Lightspeed, ImPos, Tyro, Square and Klaviyo), and only so they can provide those services to us;
booking channels you have booked through, so your booking can be fulfilled;
Limestone Coast Brewery, only if you have chosen to join their mailing lists; and
government or law enforcement bodies, where we are required or permitted to by law.

Information stored overseas

Some of our service providers store data outside Australia, including in the United States. Where this happens, we take reasonable steps to ensure those providers protect your information in a way consistent with the Australian Privacy Principles.

Cookies and website analytics

Our websites use cookies and similar technologies to make the site work, remember your preferences and understand how visitors use the site. You can block or delete cookies in your browser settings, although some parts of the site may not work properly if you do.

Links to other websites

Our websites may link to other websites, including booking platforms and partner organisations. This policy does not cover those websites. Please read their privacy policies.

How we protect your information

We take reasonable steps to protect personal information from misuse, loss and unauthorised access, modification or disclosure. These steps include secure, access-controlled systems and encrypted connections. When we no longer need personal information, we take reasonable steps to delete or de-identify it, subject to our legal record-keeping obligations.

Accessing and correcting your information

You can ask to see the personal information we hold about you, or ask us to correct it, by contacting us using the details below. We will respond within a reasonable time, usually 30 days.

Questions and complaints

If you have a question about this policy, or believe we have not handled your personal information properly, please contact us:

The Ocean Park Group
Email: management@oceanpark.com.au
Phone: 08 9948 1765
Post: 1 Ocean Park Road, Denham, 6537, WA
Or use our e nquiry form.

We will investigate and respond within 30 days. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.

Changes to this policy

We may update this policy from time to time. The current version will always be available on our websites, with the date it was last updated shown at the top.