Privacy Policy

This Privacy Policy explains how the International Centre of Excellence in Tourism and Hospitality Education Limited (“THE-ICE”) collects, uses, discloses, and protects personal information. We are an Australian company operating internationally, including in the European Union (EU) and the United Kingdom (UK), and we comply with applicable privacy laws such as the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and, where relevant, the EU General Data Protection Regulation (GDPR) and the UK General Data Protection Regulation (UK GDPR).

1. Who We Are

International Centre of Excellence in Tourism and Hospitality Education Limited
ABN: 86 131 628 370
Email: accreditation@the-ice.org

We act as the data controller for personal data processed under the GDPR.

2. What Personal Information We Collect

We may collect the following types of personal information:

2.1 Information You Provide

For membership accreditation, management, and support, we may collect:

  • Name of organisation
  • Contact details (email, phone number, address)
  • Details of contact persons
  • Membership type and details
  • Payment and billing information
  • Any information submitted during accreditation processes

For individuals visiting our website, we may collect:

2.2 Information Collected Automatically

  • IP address and device information
  • Browsing activity on our website
  • Cookies and tracking technologies (see section on Cookies)

2.3 Information from Third Parties

  • Payment processors
  • Analytics providers
  • Business partners and service providers

3. Legal Bases for Processing (GDPR)

When we process personal data of individuals located in the EU, we rely on one or more of the following legal bases:

  • Consent
  • Performance of a contract
  • Compliance with legal obligations
  • Legitimate interests

4. How We Use Personal Information

We use personal information to:

  • Create, manage, and maintain your membership with THE-ICE
  • Process membership payments and renewals
  • Provide access to member-only services
  • Communicate updates about your membership, benefits, and important notices
  • Provide information on our website
  • Provide access to our newsletter
  • Comply with legal and financial obligations

5. Disclosure of Personal Information

We may disclose personal information to:

  • Service providers (IT, payment processing, analytics, logistics)
  • Business partners
  • Regulatory bodies, when legally required

When transferring data outside Australia or the EU, we take reasonable steps to ensure appropriate safeguards are in place.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

  • Enable core website functionality
  • Remember your preferences
  • Analyse website traffic and usage
  • Personalise content and improve user experience.

6.1 Types of Cookies We Use

  • Strictly Necessary Cookies – required for website functionality
  • Performance/Analytics Cookies – help us understand how visitors use our site
  • Functional Cookies – store user preferences and enhance usability

6.2 Managing Cookies

You can manage or disable cookies through your browser settings. You will also be presented with a cookie consent banner that allows you to accept or reject non-essential cookies.

7. International Data Transfers

We operate globally and may transfer personal information outside Australia, the EU, and the UK.

When transferring EU or UK personal data, we rely on:

  • Adequacy decisions (EU and UK)
  • Standard Contractual Clauses (SCCs)
  • International Data Transfer Agreements (IDTAs), where applicable
  • Other lawful safeguards

8. Data Security

We take reasonable steps to protect personal information from misuse, loss, unauthorised access, modification, or disclosure. However, no method of transmission or storage is 100% secure.

9. Data Retention

We retain membership-related information for as long as the membership remains active and for a reasonable period thereafter to comply with legal, accounting, and contractual obligations. Payment records are retained for mandatory financial reporting periods.

10. Your Rights

10.1 Under Australian Privacy Law

You may:

  • Request access to your personal information
  • Request correction of inaccurate or outdated information

10.2 Under the GDPR and UK GDPR (for individuals in the EU and UK)

You may also:

  • Request deletion (“right to be forgotten”)
  • Request restriction of processing
  • Object to processing
  • Request data portability
  • Withdraw consent at any time

To exercise your rights, contact us at accreditation@the-ice.org

11. Children’s Privacy

Our services are not directed to children under 16. We do not knowingly collect personal information from children.

12. Third-Party Websites

Our website may contain links to external websites. We are not responsible for their privacy practices.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be posted on our website with the effective date.

14. Contact Us

For privacy questions, complaints, or to exercise your rights, contact THE-ICE Privacy Officer by email at: accreditation@the-ice.org

If you are in the EU, you may also contact your local data protection authority.