Version 1.0 — Last Updated: 2026-09-15 · Effective Date: 2026-09-15
This Privacy Policy explains how Sydney Zoo collects, uses and protects personal information when you use sydney-zoo.org (the "Service"). We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
1. Data Controller
The entity responsible for your personal information is Sydney Zoo, 10 Derowie Ave, Homebush NSW 2140, Australia. Email: [email protected].
2. Categories of Data Collected
2.1 Information you provide: your name and email address if you contact us or subscribe to updates. 2.2 Information collected automatically: IP address, browser and device type, referring pages, and general (city-level) location inferred from your IP. 2.3 We do not collect payment information, and we do not knowingly collect sensitive information.
3. Purposes of Processing & Legal Basis
3.1 To respond to your enquiries — on the basis of taking steps at your request. 3.2 To send updates you have subscribed to — on the basis of your consent, which you may withdraw at any time. 3.3 To operate, secure and improve the Service — on the basis of our legitimate interests in running a functional website. 3.4 To comply with legal obligations where applicable.
4. Third-Party Sharing
4.1 We do not sell your personal information. 4.2 We may share limited data with service providers who host the Service and deliver email on our behalf, strictly to provide those services. 4.3 We may disclose information where required by law.
5. International Data Transfers
5.1 Some service providers may store data outside Australia. Where this occurs, we take reasonable steps to ensure your information is handled consistently with the APPs.
6. Retention Periods
6.1 Enquiry correspondence is retained for up to 24 months after the matter is resolved. 6.2 Subscription details are kept until you unsubscribe, after which they are deleted within 30 days. 6.3 Server and security logs are retained for up to 12 months.
7. Your Privacy Rights
7.1 Under the Privacy Act 1988 and the APPs you have the right to request access to the personal information we hold about you and to request its correction. 7.2 You may withdraw consent to marketing at any time. 7.3 To exercise these rights, email [email protected]. 7.4 If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
8. Access and Correction
8.1 In line with APP 12, you may request access to the personal information we hold about you. We will respond within a reasonable period — usually within 30 days — and, where practicable, provide access in the manner you request. 8.2 In line with APP 13, you may ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading, and we will take reasonable steps to correct it. 8.3 There is normally no charge to make a request; if a request is complex, we will tell you of any reasonable cost before proceeding. 8.4 To make an access or correction request, email [email protected]. If we refuse a request, we will explain the reasons in writing and how you may complain.
9. Children's Data
9.1 The Service is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.
10. Security Measures
10.1 We use reasonable technical and organisational measures, including encryption in transit (HTTPS) and access controls, to protect personal information. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.
11. Changes to this Policy
11.1 We may update this Policy from time to time. The "Last Updated" date above reflects the current version.
12. Contact
For privacy questions or requests, email [email protected]. See also our Cookie Policy and Terms of Use.