Privacy Policy

Last updated 4 August 2026

Who we are

Ruwenzori (“Stay in a Train at Ruwenzori”) is operated by Off The Rails Productions Pty Ltd, ABN 38 053 306 899, in New South Wales, Australia. We can be reached at info@stayinatrain.com or on 1300 800 977 during office hours.

This policy explains what personal information we hold, why we hold it, and what you can ask us to do with it. We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth).

What we collect

✦ Your name, email address and phone number when you make a booking or send an enquiry.
✦ The details of your stay - arrival and departure dates, number of guests, and any notes or requests you send us.
✦ A record of the emails we send you about your booking, so we can see what you have and haven’t been told.
✦ Payment confirmations from our payment provider. We never see or store your card number.
✦ Standard server logs (IP address, browser type, pages requested) kept briefly for security and troubleshooting.

What we don’t collect

We do not run any analytics, advertising or tracking on this website. There is no Google Analytics, no advertising pixel, and no third-party profiling of your visit. We do not buy or sell personal information, and we do not send marketing email unless you have specifically asked us to.

How we use it

✦ To take and manage your booking, and to hold the property for your dates.
✦ To send you booking confirmations, payment reminders, pre-arrival information and a follow-up after your stay.
✦ To answer your questions and look after you while you are on the property.
✦ To keep our own business records, including for tax and insurance purposes.

Who else is involved

We use a small number of service providers to run the site and take payments. They only receive what they need to do their job:

✦ Stripe - processes card payments. Your card details go directly to Stripe and never reach our systems.
✦ Amazon Web Services - hosts the website, the booking database and the photographs, and sends our booking emails. Our data is stored on AWS servers in Frankfurt, Germany.
✦ Google - our email is a Google Workspace mailbox, so correspondence with us is stored there.

Pages that embed other services

Our Explore page includes a Google Map, and some pages offer a video hosted on YouTube. If you interact with those, Google may set its own cookies and receive your IP address under its own privacy policy. Nothing is sent to Google until you load or play them.

Cookies

This site sets one cookie, and only for the owner: a login session cookie (“siat_admin”) used by the private administration area. It is strictly necessary, contains no personal information about visitors, and is never set for ordinary visitors browsing or booking.

Because we run no analytics or advertising, there is nothing here to opt out of - which is why you won’t see a cookie banner.

How long we keep it

We keep booking records for as long as we need them for our business and tax obligations - generally seven years, as Australian tax law requires. Enquiries that never became bookings are removed once they are no longer useful. Historic booking records carried over from our previous website are held on the same basis.

Your choices

You can ask us for a copy of the personal information we hold about you, ask us to correct anything that is wrong, or ask us to delete it where we are not required to keep it. Email info@stayinatrain.com and we will respond as quickly as we can.

If you are unhappy with how we have handled your information, you can contact us first, and you may also complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes

If we change this policy we will update the date at the top of this page. Material changes affecting existing bookings will be communicated by email.

Questions about your information? Get in touch.