Privacy Policy.
This Policy explains what personal information Mango Discovery collects, why we use it and how account information is kept separate from public establishment information.
We use personal information to run Mango Discovery, secure accounts, manage organisation access, communicate with representatives and govern establishment records. Your private account information is not treated as public establishment information.
Your account
Login information, account email addresses, security records, private communications, consent evidence and other personal account information are handled as protected information.
The establishment
Business information intended to help couples identify, understand or contact an establishment may be governed under the Mango Discovery Public Data Policy.
1. Purpose of this Policy
This Privacy Policy explains how Mango Discovery collects, uses, stores and protects personal information when people use Mango Discovery.
Mango Discovery forms part of the Mango Getaway ecosystem and is operated by Mango Getaway LLC.
This Policy focuses on personal information associated with Mango Discovery accounts, organisation membership, establishment representation, support and related activity.
Public-facing establishment information is addressed separately in the Mango Discovery Public Data Policy .
2. Who this Policy covers
This Policy may apply to:
- Mango Discovery account holders;
- owners and operators of tourism businesses;
- employees and managers;
- agents and authorised representatives;
- organisation members;
- people contacting Mango Discovery Support;
- people requesting corrections or privacy assistance; and
- other people whose personal information is processed through Mango Discovery.
3. Information we collect
The information collected depends on how you use Mango Discovery.
Account information
This may include:
- name;
- email address;
- password or authentication credentials in protected form;
- account status;
- email verification status;
- security and recovery information;
- preferred language where supported; and
- other account settings.
Organisation and professional information
This may include:
- organisation name;
- job title or role;
- relationship to an establishment;
- membership role;
- authority or representation information;
- business contact information; and
- records associated with organisation invitations or access.
Establishment activity
We may record your activity when you:
- create an establishment record;
- edit establishment information;
- submit a record for review;
- provide verification information;
- respond to a Mango Discovery request;
- submit media;
- request a change;
- accept a legal or consent document; or
- perform another governed action.
Support and communications
We may collect information you provide when contacting support, reporting a problem, disputing information or communicating with Mango Discovery.
Technical information
Depending on the services used, technical information may include:
- IP address;
- browser and device information;
- session information;
- security events;
- login activity;
- request timestamps;
- error information; and
- other technical information required to operate and secure the service.
4. Where personal information comes from
We may receive personal information:
- directly from you;
- from another authorised member of your organisation;
- through an organisation invitation;
- when you represent an establishment;
- through support or correction requests;
- from systems used to authenticate or secure your account;
- from technical operation of Mango Discovery; and
- from lawful public sources where relevant to verifying a business relationship.
We aim to collect only information reasonably required for the relevant purpose.
5. How we use personal information
We may use personal information to:
- create and manage Mango Discovery accounts;
- authenticate users;
- verify email addresses;
- recover accounts;
- manage organisation memberships;
- determine access permissions;
- confirm authority to represent an establishment;
- process establishment submissions;
- conduct review and verification;
- manage duplicate or disputed records;
- record consent and legal acceptance;
- send important service communications;
- respond to support requests;
- protect Mango Discovery from misuse or fraud;
- maintain audit and security records;
- improve reliability and user experience;
- meet legal obligations; and
- protect the rights and safety of Mango Getaway, businesses and users.
6. Why we process personal information
The reason we process personal information depends on the information, the service being used and the law that applies.
Depending on the circumstances, processing may be necessary:
- to provide Mango Discovery services you request;
- to administer an agreement with you or your organisation;
- with your consent;
- to operate and secure Mango Discovery;
- to prevent fraud or misuse;
- to maintain accurate establishment governance;
- to comply with legal obligations; or
- for other legitimate business purposes permitted by applicable law.
Where consent is the appropriate basis, Mango Discovery may keep evidence of that consent and any later withdrawal.
7. Organisation membership and shared access
Mango Discovery allows people to act through organisations.
If you join an organisation, other authorised members of that organisation may be able to see information relevant to your membership, such as:
- your name;
- your role;
- your membership status;
- your organisation permissions;
- actions you take on shared establishment records; and
- other information needed to manage organisation access.
Organisation members do not automatically gain access to private account security information.
8. Personal information and Public Establishment Data
Mango Discovery separates private account information from information intended to describe an establishment publicly.
For example:
- a private login email may remain private;
- a hotel’s general reservations email may be public;
- a representative’s password is private;
- the establishment’s website may be public;
- internal verification notes are restricted;
- the establishment’s physical business location may be public.
More information appears in the Public Data Policy .
9. Communications
Mango Discovery may send service communications required to operate your account or establishment relationship.
These may include:
- email verification;
- password and security notices;
- organisation invitations;
- submission confirmations;
- review updates;
- requests for additional information;
- verification notices;
- policy or legal updates;
- important account changes; and
- support responses.
Operational communications may be necessary to provide the service and may not always be optional while an account remains active.
Promotional or marketing communications, where used, should be handled separately and subject to applicable consent or opt-out requirements.
12. Service providers
Mango Discovery may rely on third-party providers for infrastructure and operational services.
Depending on how Mango Discovery is configured, providers may support:
- website hosting;
- email delivery;
- authentication;
- security;
- data storage;
- analytics;
- support;
- communications; and
- other technical operations.
Service providers should receive only the information reasonably required to perform their role and remain subject to their applicable contractual and legal obligations.
13. International users and data handling
Mango Discovery is intended to support tourism businesses across multiple countries.
Personal information may therefore be processed or stored in a country different from the country where you live or where an establishment operates.
Where applicable law requires specific safeguards for international transfers of personal information, Mango Discovery should use an appropriate lawful mechanism.
Privacy rights may vary depending on your location and the law that applies to the relevant processing.
14. Security
Mango Discovery uses administrative, organisational and technical measures intended to protect personal information from unauthorised access, misuse, alteration or loss.
Measures may include:
- access controls;
- role-based permissions;
- secure authentication;
- password protection;
- session controls;
- audit records;
- server-side validation;
- security monitoring;
- restricted administrative access; and
- other safeguards appropriate to the system.
No online system can guarantee absolute security.
If you believe your account has been compromised, contact Mango Discovery Support promptly.
15. How long we keep information
Mango Discovery may retain personal information for as long as reasonably necessary for the purpose for which it was collected.
Retention may also be necessary to:
- maintain an active account;
- manage an organisation relationship;
- preserve establishment governance history;
- maintain legal acceptance evidence;
- resolve disputes;
- prevent fraud or duplicate records;
- maintain security and audit logs;
- meet tax, legal or regulatory requirements; or
- protect Mango Discovery’s legitimate interests.
Information may be deleted, anonymised, restricted or archived when it is no longer required for active use.
Closing an account does not necessarily require immediate deletion of every audit, legal or historical record.
16. Your privacy rights
Depending on where you live and the law that applies, you may have rights relating to your personal information.
These may include rights to:
- request access to personal information;
- request correction of inaccurate information;
- request deletion in certain circumstances;
- request restriction of processing;
- object to certain processing;
- withdraw consent where processing depends on consent;
- request portability where applicable; and
- raise a complaint with an appropriate privacy authority.
Some rights are subject to exceptions.
For example, Mango Discovery may need to retain certain information to comply with law, preserve security, maintain legal evidence or protect the integrity of establishment records.
Use the Mango Discovery privacy request page for access, correction, deletion or another privacy matter.
Make a Privacy Request →17. Privacy requests and establishment changes are different
A privacy request concerns personal information about a person.
A request to update public information about a hotel, restaurant, activity provider or other establishment may instead be handled as an establishment correction.
To report inaccurate establishment information, use:
18. Children
Mango Discovery is a business-facing service and is not intended for children to create or manage establishment accounts.
If we learn that personal information has been provided by a child in circumstances where it should not have been collected, we may take reasonable steps to remove or restrict that information.
19. Third-party websites and services
Mango Discovery may contain links to external websites, booking systems, map services, payment providers, social networks or other services.
Their privacy practices are governed by their own policies.
Mango Discovery is not responsible for the privacy practices of an independent third-party service merely because we link to it.
20. Changes to this Privacy Policy
We may update this Privacy Policy as Mango Discovery evolves or as legal, technical or operational requirements change.
The current version and effective date will be displayed on this page.
Where a material change affects how an account holder’s personal information is processed, Mango Discovery may provide an additional notice or request renewed acceptance where appropriate.
21. Contact and privacy questions
For general privacy questions, contact Mango Discovery Support.
For a formal privacy request: