Blue Mountains Adventure Company Privacy & Cookies Policy

Part of the World Expeditions Travel Group | Last updated: October 2026

At Blue Mountains Adventure Company, we help people explore the world through active, human-powered adventures. Whether your journey is close to home or on the other side of the world, every great adventure starts with good planning, and that means you trust us with some personal details along the way.

We take that trust as seriously as we take your safety on the trail. This policy explains, in plain language, what we collect, why we need it and how we look after it.

The short version

• We collect what we need to plan, book and run your trip safely, and to tell you about trips you might like.
• We share it only with the people who make your trip happen: local operators, airlines, hotels, permit authorities and insurers.
• We never sell your personal information. Ever.
• You can unsubscribe, see your data, correct it or ask us to delete it at any time. It is free.
• Questions? Email [email protected]

1. Who we are

Blue Mountains Adventure Company is part of the World Expeditions Travel Group (WETG), a family of adventure and active travel companies. In this policy, "we", "us" and "our" means Blue Mountains Adventure Company and the other WETG companies. The full list is at worldexpeditionstravelgroup.com. The same policy applies whichever of our companies or websites you deal with.

2. What we collect

• Contact details: name, email, phone, postal address.
• Booking details: date of birth, gender, passport and visa details, emergency contacts, travel insurance, trips you have enquired about or taken.
• Health and dietary information: only what you tell us so we can run your trip safely. We treat this as sensitive and only collect it with your consent (your explicit consent if you are in the UK or EU).
• Experience and preferences: fitness level, outdoor experience, trip interests, survey and review responses.
• Online activity: pages and trips you view, trips you save as favourites, device and browser type, IP address and how you use our websites, emails and social pages.
• Payment information: processed by our secure payment providers. We do not store your full card details.

3. How we collect it

Mostly from you: when you enquire, book, call, email, chat with us, join a webinar, enter a competition or fill in a survey. We also receive information from travel agents and booking partners you book through, and from cookies on our websites. If we receive your details from someone else (for example a travel agent or the person who booked for your group) we will let you know.

4. Why we use it

• To answer your enquiries and send trip information.
• To book and run your trip, including passing details to local operators, airlines, hotels and permit authorities.
• To keep you safe, including sharing medical or dietary needs with your guides and contacting insurers or emergency contacts if something goes wrong.
• To send you news and offers by email, SMS or post, if you have agreed. You can stop these at any time.
• To show you relevant ads online and improve our websites.
• To meet legal, tax and accounting obligations.

5. Who we share it with

• Trip partners: local operators, guides, accommodation, transport and airlines, only what they need for your trip.
• Government and permit authorities: where a permit or entry requirement needs it.
• Service providers: IT, cloud hosting, AI, email, payment, security and research companies working for us under contract and confidentiality obligations.
• Other WETG brands: so we can provide the services you ask for.
• Competition partners: only if you clearly agree at the time, and they will be named.

We never sell, rent or trade your personal information, including your mobile number.

6. Moving between our websites

We recognise visitors who move between our own brand websites. This helps us remember your preferences, such as trips you have viewed. This information stays with us and is not sent to third parties.

Trips you choose to save as favourites always work, because you asked us to keep them. Remembering trips you have viewed and recognising you across our websites are optional: if you are in the UK, EU or Quebec, we only do this if you accept optional cookies. You can clear your favourites at any time or ask us to stop.

7. Sending data overseas

Adventure travel is international, so your information will go to the countries you travel to and to the places our providers store data. Common destinations include New Zealand, the UK and Europe, Canada, the USA (including our cloud and AI providers), Nepal, India, Bhutan, Japan, South America and Africa. We take reasonable steps to make sure overseas partners protect your information, and for UK and EU travellers we use approved safeguards such as standard contractual clauses.

8. AI and automated tools

We use AI tools to help us check our trip information for accuracy and to run our internal operations more efficiently. These tools are provided by service providers under contract, and some are based in the USA.

AI does not make decisions about you. Decisions about your enquiry, booking or trip are always made by our team. If that ever changes, we will update this policy and explain what the system does.

9. Keeping it safe and how long we keep it

We protect your information with secure systems, encryption, access controls, website security monitoring and PCI-compliant payment gateways. We keep as little personal information on our web servers as possible. If a data breach is likely to cause you serious harm, we will tell you and the regulator as the law requires.

We keep booking and financial records for 7 years to meet tax and legal obligations. Marketing data is kept until you unsubscribe or have not engaged with us for 12 months. After that we delete or de-identify it.

10. Your choices and rights

Wherever you live, you can:

• Unsubscribe from emails (link in every email) or SMS (reply STOP).
• Ask for a copy of the information we hold about you.
• Ask us to correct it or delete it.
• Object to marketing or ask us to limit how we use your information.

These requests are free. We will verify your identity first and respond within 20 working days. Email [email protected].

Regional notes

• Australia: we comply with the Privacy Act 1988 and the 13 Australian Privacy Principles.
• New Zealand: we comply with the Privacy Act 2020 and its Information Privacy Principles.
• UK and EU: you also have rights to data portability, to restrict processing, to object to processing based on our legitimate interests, not to be subject to decisions made solely by automated means, and to withdraw consent at any time. Our lawful bases are performing your booking contract, consent (marketing, optional cookies and health information), legitimate interests (running and improving our services) and legal obligations.
• Canada: we comply with PIPEDA and, for Quebec residents, Quebec's privacy law (Law 25). Optional tracking is switched off by default for Quebec visitors. Our Privacy Officer is responsible for protecting your information and can be reached at the contact details in section 16.
• USA: we do not sell your personal information. Our advertising cookies (from partners such as Google and Meta) may count as "sharing" for targeted advertising under some US state laws. You can opt out at any time using the Manage cookies link in our website footer, and we honour Global Privacy Control signals from your browser. Contact us for any other state-law request.

11. Cookies

Cookies are small files that help our websites work and help us understand what you like. We use:

• Essential cookies to keep the site, your saved favourites and bookings working.
• Analytics cookies to see which pages are useful.
• Advertising cookies, including third-party cookies from partners such as Google and Meta, to show you relevant ads elsewhere.

Except for essential cookies, you choose:

• Accept all or Reject all on the cookie banner (shown to visitors in the UK, EU and Quebec).
• Choose cookies to pick which types you allow.
• Manage cookies link in the footer of every one of our websites, so you can change your mind at any time, wherever you are.

You can still browse and book with optional cookies switched off.

12. SMS messages

If you opt in, we may text you about offers, booking confirmations, trip reminders and travel alerts. Each message names the brand it is from. How often depends on your bookings and what you signed up for. Message and data rates (including roaming) may apply. Reply STOP to any message to opt out; we will action it within 5 business days. We never share your mobile number or SMS consent with anyone for their own marketing.

13. Photos on trips

Our guides and fellow travellers sometimes take photos we may use in our marketing. If you would rather not appear, just tell your guide or let us know.

14. Children

Trips for under-18s, including school group programs and family trips, are booked through a school, parent or guardian, who provides consent. We collect only what is needed for the trip and the young person's safety, and we do not market directly to children.

15. Other websites

Our sites link to other websites. Their privacy policies apply once you leave ours.

16. Questions and complaints

Contact our Privacy Officer (Data Protection Officer):

• Email: [email protected]
• Post: The Privacy Officer, Level 2, 55 York St, Sydney NSW 2000, Australia

We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days. If you are not happy with our answer, you can contact the regulator: the Office of the Australian Information Commissioner (oaic.gov.au), the NZ Privacy Commissioner (privacy.org.nz), the UK Information Commissioner's Office (ico.org.uk), your local EU data protection authority, the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, in Quebec, the Commission d'accès à l'information (cai.gouv.qc.ca).

17. Changes to this policy

We update this policy when the law or our practices change. The date at the top shows the latest version. For significant changes we will let you know.