How we collect, use, store and protect your personal information — in line with the Australian Privacy Act 1988 and the Australian Privacy Principles.
Last updated: 22 June 2026
This Privacy Policy explains how Chaddy Mardini (we, us, our), operator of the short-term rental property Glenhaven in Katoomba, New South Wales, handles your personal information. We are committed to protecting your privacy and complying with the Privacy Act 1988 (Cth) (Privacy Act) and the Australian Privacy Principles (APPs).
By using this website or making a booking, you consent to the collection, use and disclosure of your personal information as described in this policy.
We collect personal information that is reasonably necessary to take and manage your booking and to run our accommodation business. This may include:
You do not have to give us your personal information, and you may deal with us anonymously or using a pseudonym where it is lawful and practicable. However, we cannot process a booking without the details needed to confirm and deliver your stay.
We collect personal information:
We use your personal information to:
We do not sell your personal information. We disclose it only as needed to run our business, including to:
| Recipient | Purpose |
|---|---|
| Stripe | Securely processing your payment |
| Email delivery provider (Resend) | Sending booking and service emails |
| Hosting & database providers (Netlify; Supabase) | Running our website and storing booking records |
| Cleaners & service providers | Preparing and maintaining the Property for your stay |
| Booking platforms (e.g. Airbnb) | Where you booked or enquired through them |
| Professional advisers & authorities | Where required or permitted by law |
We only share what is reasonably necessary, and we require our service providers to protect your information.
From time to time we may send you marketing messages (for example, a return-guest offer) by email. We will only do so where permitted under the Spam Act 2003 (Cth). Every marketing email includes an easy way to unsubscribe, and you can also opt out at any time by emailing info@stayops.com.au. We will action your request promptly. Transactional messages about an active booking (such as confirmations and access codes) are not marketing and will still be sent.
Some of our service providers may store or process information outside Australia. For example, our payment, email and hosting providers may process data in the United States or other countries. Our booking database is hosted in Australia (Supabase, Sydney region). Where we disclose your information to an overseas recipient, we take reasonable steps to ensure it is handled consistently with the APPs.
We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. These include access-controlled systems, encryption in transit, and limiting access to those who need it. No system is completely secure, but we work to keep your information safe and to respond appropriately to any data breach in line with the Notifiable Data Breaches scheme.
We keep your personal information only for as long as needed for the purposes above, including to meet legal, tax and regulatory record-keeping obligations. When it is no longer needed, we take reasonable steps to destroy or de-identify it.
You may ask us for access to the personal information we hold about you, and to correct it if it is inaccurate, out of date or incomplete. Contact us using the details in clause 13. We will respond within a reasonable time. There is normally no charge, though we may recover reasonable costs for substantial access requests. If we decline a request, we will explain why.
Our website may use cookies and similar technologies to make the site work, remember your preferences and understand how the site is used. You can set your browser to refuse cookies, although some features may not work as well as a result.
If you think we have mishandled your personal information or breached the APPs, please contact us first (clause 13) so we can investigate and respond — we aim to resolve complaints within a reasonable time. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by calling 1300 363 992.
Chaddy Mardini
Operator of Glenhaven · STRA registration PID-STRA-82540
Email: info@stayops.com.au
We may update this Privacy Policy from time to time. The current version is always the one published on this page, with the "last updated" date shown above.