← Hilltop Sanctuary

Privacy Policy

Effective date: June 2026 · Hilltop Sanctuary, Bellingen NSW · Operated by White Performance Consultancy Pty Ltd (ACN 622 040 144)

1. Who we are

Hilltop Sanctuary is a short-stay accommodation property located near Bellingen, NSW, Australia. This website is operated by White Performance Consultancy Pty Ltd. We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

2. What personal information we collect

When you make a booking or enquiry through this website or through our Airbnb listings, we may collect:

3. How we use your information

We use your personal information only to:

We do not use your information for marketing, sell it to third parties, or share it beyond what is necessary to fulfil your booking.

4. Third-party processors

We use the following trusted third parties to operate our bookings. Each has its own privacy policy:

5. Cookies and tracking

This website uses Google Analytics, Google Ads and the Meta Pixel to measure advertising performance and may use advertising cookies or similar technologies. Microsoft Clarity may also collect session and interaction data. These services may process information such as your IP address, device and browsing activity in accordance with their own privacy policies. You can manage cookies through your browser settings.

We use Google signals to see anonymous age, gender and interest groups, and optional questions on the site to understand who stays with us. None of this identifies you.

We also use Cloudflare Web Analytics, which counts visits without cookies and does not identify you.

6. Data retention

We retain booking records for 7 years as required for Australian tax and business records, then securely delete them.

7. Your rights

Under the Australian Privacy Act 1988, you have the right to access, correct, or request deletion of your personal information. To make a request, email us at [email protected]. We will respond within 30 days.

8. Security

We take reasonable steps to protect your information from misuse, interference, loss, and unauthorised access. Payment data is handled exclusively by Stripe and Airbnb, which are PCI-DSS compliant.

9. Contact

For privacy-related queries: [email protected]