Have you found injured or orphaned wildlife? Call 0447 264 625 and click here for instructions

Privacy Policy

Website: https://www.bonorong.com.au

Last Updated: Monday 3rd November, 2025

Who we are

Bonorong Wildlife Sanctuary is an ethical tourism enterprise, dedicated to the conservation of native species, through wildlife rescue and rehabilitation, education, and experiences that connect people and wildlife.  This website is our online presence where you can learn about the work that we do, purchase merchandise, make online bookings, contact us and view embedded media.

What data we collect and how we use it

Comments

When visitors leave comments on our site, we collect the data shown in the comments form (such as name, email address, website), along with the visitor’s IP address and browser user-agent string. We use this information to improve security and enhance our spam detection.

If you submit a comment, we may create an anonymised string (hash) from your email address and send it to the Gravatar service to check whether you are using a Gravatar profile. The Gravatar service’s privacy policy applies. After approval of your comment, your profile picture (if any) will be publicly visible in the context of your comment.

Cookies

To provide a smoother experience, our website uses cookies if you leave a comment, you may opt-in to saving your name, email and website in cookies. These are for your convenience when you leave another comment. These cookies last for one year.

Embedded Content

Our pages may include embedded content (e.g. videos, images, articles) from third-party websites such as YouTube and Vimeo. When you visit pages with such embedded content, you may be connecting directly to those third-party servers. They may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content (especially if you have an account and are logged in to that website).

Website analytics

We use Google Analytics (operated by Google LLC, USA) on this website to help analyse the way visitors use our site, so that we can improve the content, structure and functioning of the site.

Google Analytics uses cookies and other identifiers (for example to measure unique visitors, session duration, pages visited) and collects information such as IP address, browser type, device type, location data (e.g. country, region) and other usage data.

The information generated by the cookie about your use of the website is transmitted to Google’s servers in the United States and stored there.

You can disable cookies via your browser settings, and you can prevent Google Analytics from collecting data by installing Google’s opt-out browser add-on. You should consult Google’s “How Google uses cookies” page for details of how Google treats that data.

By using our website you agree that we may process information about you in the manner and for the purposes set out above.

eCommerce purchases

What we collect and store

When you browse our online store, we may track:

  • Products you’ve viewed (to help us show you recently viewed items)
  • Your location, IP address and browser type (to help estimate shipping/taxes)
  • Shipping address (to estimate shipping costs before checkout)

We use cookies to keep track of cart contents while browsing.

When you place an order we collect: your name, billing address, shipping address, email address, phone number, and optionally create a user account (with username and password). We use this data to:

  • Send you information about your order and your account
  • Respond to your requests, refunds and complaints
  • Process payments and prevent fraud
  • Comply with legal obligations (such as tax calculation)
  • Improve our product and service offering
  • Send you marketing messages if you choose to receive them
How long we retain your data

We retain your order and related information (your name, email address, billing and shipping addresses) for as long as required for tax and accounting purposes. For example, we may retain such information for up to seven years. We retain any comments or product reviews you leave indefinitely so that we can recognise you in future comments/reviews.

Who on our team has access

Our Business & Guest Services staff have access to order information (what was purchased, when, where to send), and customer information (name, email address, billing/shipping information). This access enables us to fulfil orders, provide customer support, and process refunds.

What we share with others

We rely on third-party services to process payments, host the store platform, manage shipping and fulfilment, and provide analytics. For example:

  • We accept payments through the Stripe payment gateway as part of the WooCommerce platform. Stripe’s privacy policy explains how they process and share your data with us and with their affiliates.
  • Stripe takes care of the secure processing of your payment details (credit/debit card numbers), so we do not directly store full card numbers on our servers. 
  • We may share your billing and shipping information, transaction amount and payment method details with Stripe so that they can process the payment and manage fraud detection.
  • We may use other fulfilment, shipping or logistics providers who will have access to your shipping address and related information, but only to the extent necessary to deliver your order.

If required by law or for security purposes (for example fraud investigation) we may share data with legal or regulatory authorities.

Online bookings

For visitor bookings, tours and experiences at Bonorong Wildlife Sanctuary we use the external platform provided by Roller (www.roller.software). When you make an online booking through that system we collect and/or the booking platform collects information such as your name, contact details (email, phone), booking date/time, number of guests, special requirements or preferences, and payment information. Payments made through Roller are processed by Adyen N.V., a global payment processor headquartered in the Netherlands. Adyen securely handles all payment details and fraud-prevention checks under their Privacy Policy. Bonorong does not store or have access to your full card details. Adyen may transfer your data internationally under recognised data-protection agreements (such as the EU Standard Contractual Clauses).

Bonorong (and Roller) use this data to:

  • Confirm your booking and send you tickets or confirmation details
  • Manage capacity, schedule and visitor flow
  • Respond to your requests, changes or cancellations
  • Comply with legal obligations (e.g. visitor waivers, safety regulations)
  • Improve our visitor experience and operations

Your booking data may be stored in Roller’s systems and shared with us, in accordance with their privacy and security measures. While you are booking you should review Roller’s privacy policy to understand how they handle your data. We process your booking data in line with this policy and our obligations under the applicable Australian privacy laws.

Enquiries

When you submit an enquiry, volunteer application, or contact request through a form on our website, the information you provide is collected via our website and/or Google Forms.

Information collected may include:

  • Your name, email address, and phone number
  • The subject and content of your message
  • Optional information you choose to include (e.g. organisation, reason for contact, or file attachments)
  • Your IP address and browser details (for spam prevention and troubleshooting)

We use this information solely to respond to your enquiry or request. Submissions are securely stored on our website’s server and may also be delivered to our internal email accounts for follow-up by Bonorong staff.

We do not use data submitted through contact forms for marketing unless you have explicitly opted in (for example by ticking a subscription checkbox).

Form data is retained only for as long as necessary to manage your request or meet any legal or administrative obligations. We do not transmit your information to any third-party service except for the purposes of spam filtering with Cloudflare Turnstile.

Your rights

If you have left comments or made bookings/purchases, you can request:

  • An exported file of the personal data we hold about you (including any data you provided).
  • That we erase any personal data we hold about you (except data we are required to retain for legal, administrative or security reasons)

To make such a request, please contact us. You have the right to refuse or withdraw consent for non-essential processing (for example marketing cookies), subject to technical limitations.

Where your data is stored

Data collected by our site may be transferred to and stored on servers operated by our service providers (e.g. Stripe in the USA, Google in the USA) and may be stored outside Australia.

We ensure our third-party service providers (such as Google Analytics, Stripe, Roller) have appropriate safeguards in place for your personal data and operate under recognised privacy/security frameworks.

For details on Google’s data handling, see Google’s Privacy & Terms page.

For details on Stripe’s data handling, see their Privacy Policy.

Updates to this policy

We may update this privacy policy from time to time to reflect changes in our business, services, legislation or best practice. The updated policy will be posted at the top of this page with a “Last updated” date. Please check back periodically.

How to Contact Us

If you have any questions or concerns about this privacy policy or how your data is handled, please contact us.