Castavello

Legal · Discretion

Privacy policy.

A quiet promise: we handle every detail of your journey — including the personal information that makes it possible — with the same care and discretion you'd expect of a private atelier.

Effective from July 16, 2026

Castavello Privacy Policy

Effective Date: 16 July 2025

At Castavello, discretion is part of the craft. This Privacy Policy sets out how we collect, use, safeguard and share the personal information you entrust to us when you use www.castavello.com (the "Site") or engage our bespoke travel-design services.

By using the Site or engaging our concierge team, you agree to this policy. Please read it carefully. This policy applies to the Site only — we do not control third-party websites that may be linked from the Site and are not responsible for their practices.

1. Who we are

Castavello is a private travel studio specialising in bespoke journeys through Asia. We are the "data controller" of the personal information described below.

2. The information we collect

We only collect information that is necessary to design, book and deliver your journey — nothing more.

Information you provide directly

  • When you register or make an enquiry — your name, email address, phone number and country of residence, along with any preferences you choose to share.
  • When you make a travel booking — payment details, travel schedules, trip details, seating and cabin preferences, accommodation choices, and the names and passport details of every traveller (including group party leaders).
  • When you correspond with us — the content of your emails and messages, retained so we may answer your questions thoroughly.

Information we collect automatically

  • Visit data — your IP address, browser type, operating system, referring page, and the date and time of your visit and the pages you view.
  • Cookies and analytics — small data files placed on your device that help us improve the Site and remember your preferences. Some cookies are essential; others are analytical (for example, Google Analytics 4) and help us understand which pages travellers find useful. You may disable cookies in your browser settings, though some features of the Site may not work correctly if you do.
  • Advertising and marketing technologies — We may also use technologies such as Google Ads, Google Analytics 4, Meta Pixel, and similar tools to measure the effectiveness of our advertising, understand how visitors use our Site, improve your browsing experience, and deliver more relevant advertising. These technologies may collect information about your interactions with our Site. You can manage your cookie preferences through your browser settings or opt out of personalised advertising where available.

3. How we use your information

We use your personal information for the following purposes:

  • To design, book, coordinate and deliver your travel itinerary;
  • To arrange payments, invoices and refunds;
  • To communicate with you about your enquiry, booking or upcoming journey;
  • To send occasional editorial updates and journey inspiration, where you have opted in — you may unsubscribe at any time;
  • To improve the Site and our service;
  • To meet our legal, taxation and record-keeping obligations.
  • To measure and improve the effectiveness of our advertising and marketing campaigns.

4. When and with whom we share your information

We never sell your personal information. We share it only when necessary to fulfil your booking, run our business, or comply with the law:

  • Trusted suppliers & DMC partners — accommodation providers, guides, restaurants, private transport operators and destination management companies within Australia and in the countries to which you travel. We provide only the information necessary to deliver your journey. All Castavello partners are asked to comply with the standards set out in this policy.
  • Payment providers & professional advisers — for the secure processing of payments, taxation, insurance and legal advice.
  • Legal authorities & regulators — where required by law, or where we believe disclosure is reasonably necessary to prevent fraud, respond to lawful requests, or protect our rights.
  • In the event of a sale, restructure or acquisition — your personal information may transfer to the new owner, subject to the same obligations.

5. International transfers

Because Castavello arranges journeys across borders, your information will inevitably travel with your itinerary. When we transfer personal information overseas — to hotels, guides or DMC partners — we take reasonable steps to ensure they treat your information consistently with the Australian Privacy Principles (or, where applicable, the GDPR and equivalent laws in your jurisdiction).

6. How long we keep your information

We retain personal information only for as long as necessary to deliver your journey and to meet our legal, accounting and regulatory obligations — typically seven years from your last booking, unless a longer period is required by law. When it is no longer needed, we securely delete or anonymise it.

7. Keeping your information secure

We take the security of your personal information seriously. Our safeguards include:

  • Encrypted transmission (HTTPS) across the Site;
  • Restricted access — only Castavello team members, contractors and partners who need your information to deliver your journey may access it;
  • Regular internal reviews of our data collection, storage and processing practices;
  • Quarterly security reviews conducted by our Data Protection Officer, alongside continuous monitoring for anomalies.

While no online service can guarantee absolute security, we work to protect your information as if it were our own.

8. Your rights

You may, at any time, ask us to:

  • Provide a copy of the personal information we hold about you;
  • Correct any information that is inaccurate or out of date;
  • Delete your personal information, where we no longer have a legal basis to retain it;
  • Restrict, object to, or ask us to stop certain uses;
  • Withdraw consent for marketing communications;
  • Ask us to transfer your data to another service provider, where technically possible.

Requests, subject to proof of identity, will be answered within 28 days. To make a request, please write to us at info@castavello.com. If your request is unusually complex, we may charge a modest administrative fee.

9. Complaints

If you feel that we have not handled your personal information properly, please contact us first at info@castavello.com — we take every complaint seriously and will investigate promptly.

You also have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au, or with your local supervisory authority.

10. Children

The Site is not directed to children under 16, and we do not knowingly collect personal information from them. Where a booking includes minors travelling with a family or group, we ask parents or guardians to provide their details on the child's behalf.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practice or the law. The most recent version will always be published at www.castavello.com/privacy, with the "Effective from" date updated accordingly. Continued use of the Site after any change signifies your acceptance of the revised policy.

Castavello · info@castavello.com · www.castavello.com

Made with Emergent