Who we are

VCT TRAVEL PTY LTD (ABN 70 632 976 286) trading as Vacatio (“Vacatio”, “we”, “us”, “our”) operates a marketing and referral website that helps consumers learn about travel insurance products. When you choose to get a quote or buy a policy, you are redirected to World2Cover (Tokio Marine & Nichido Fire Insurance Co., Ltd) where the quote, disclosure and payment steps occur. Any personal information for the quote and purchase journey is provided directly to World2Cover, not to Vacatio.

The information we collect and hold

On the Vacatio website, the only information collected is limited technical information to operate and improve the site. The technical information that may be collected includes:

Your server or IP address, the date and time of your visit, pages visited, documents downloaded, the site you visited prior to visiting our website, information about your browser and user preferences and your website interactions. We do not collect names, contact details, payment details, health information, or other customer policy information on the Vacatio site. That information is entered directly into the World2Cover engine.

Note: Depending on context and configuration, technical data (like an IP address or cookie ID) may constitute personal information when it can reasonably identify an individual, we handle such data in accordance with the Privacy Act and the Australian Privacy Principles (APPs).

How we collect and use this information

Technical information is automatically collected when you visit or interact with our site. It may be used to:

• Operate, secure and diagnose the website, for example, load performance or error logging.
• Measure and improve site content and campaigns.
• Present relevant content and offers, including discount codes and, where applicable, interest‑based advertising compliant with APP 7.

We apply data minimisation and configuration controls to avoid capturing sensitive information via tracking technologies. We do not use cookies/pixels to collect health information or other sensitive information.

Disclosures to service providers and overseas recipients

We may disclose or allow access to technical data to website hosting, analytics, content delivery and advertising partners that help us run the site. Some providers may store or process information outside Australia. Where practicable, we take reasonable steps to ensure overseas recipients do not breach the APPs in relation to that information.

Links and redirects to World2Cover

When you choose to get a quote or proceed to purchase, you will be redirected to World2Cover (Tokio Marine). World2Cover is responsible for the collection, use and disclosure of any personal information you provide on its site. We recommend reviewing its privacy policy on the World2Cover website for details.

Access and correction

Because Vacatio only holds technical website data, requests to access or correct personal information provided through the quote or purchase journey or any policy or claims information should be directed to World2Cover. If your request relates to technical data we hold, contact us using the details below and we’ll respond within a reasonable period.

If we refuse to give you access to any of your personal information, we will provide you with reasons for the refusal and the relevant provisions of the Privacy Act that we rely on to refuse access. Where we incur cost providing you with access to personal information, we may charge you a reasonable amount.

Managing cookies and opting out

You can manage cookies through your browser settings. Where we use advertising cookies/pixels, we will honour platform/browser opt‑outs. Please note some site functions may not work properly if you disable certain cookies.

Security and retention

We take reasonable steps to safeguard the technical information collected against misuse, interference and loss, and from unauthorised access, modification or disclosure. Technical data will be retained only for as long as needed and for the purposes described within this policy or to meet legal/regulatory requirements, then deleted.