Privacy Policy
The Surf Yamba is operated by Mainrow Pty Ltd (ACN 137 867 835), trading as The Surf Yamba ("we", "us"). We respect your privacy and handle your personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).
This policy explains what we collect, why, who we share it with, and how you can access or correct it.
INFORMATION STORED OVERSEAS
Some of our providers store information outside Australia, including in Europe and the United States. We choose providers that protect personal information to a standard comparable to Australian law.
COOKIES AND TRACKING
Our website uses cookies and similar tools, including Google Analytics and the Meta Pixel. These help us understand how people find and use our site, measure our advertising, and show our ads to people who may be interested in staying with us.
You can control this by:
Blocking or clearing cookies in your browser settings.
Using the Google Analytics opt-out browser add-on.
Updating your ad preferences in your Facebook or Instagram settings.
Some parts of the site may not work as well if you block cookies.
MARKETING EMAILS
If you've agreed to hear from us, we'll send the occasional email about offers and news. Every email has an unsubscribe link, or you can email hello@thesurfyamba.com.au.
KEEPING IT SAFE
We take reasonable steps to protect your information from loss, misuse and unauthorised access. When we no longer need it, and aren't required by law to keep it, we delete it or remove anything that identifies you.
If there's a data breach likely to cause you serious harm, we'll let you know and notify the Office of the Australian Information Commissioner, as the law requires.
ACCESSING OR CORRECTING YOUR INFORMATION
You can ask to see the personal information we hold about you, or ask us to correct it, by emailing hello@thesurfyamba.com.au. There's no charge to ask. We may need to confirm your identity first, and we'll respond within 30 days. If we can't give you access, we'll explain why in writing.
COMPLAINTS
If you're unhappy with how we've handled your information, email hello@thesurfyamba.com.au or call (02) 5626 2021. We'll acknowledge your complaint and aim to resolve it within 30 days.
If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner at www.oaic.gov.au.
CHANGES TO THIS POLICY
We may update this policy from time to time. The latest version will always be on our website.
CONTACT US
The Surf Yamba
Mainrow Pty Ltd (ACN 137 867 835)
2 Queen Street Yamba NSW 2464
(02) 5626 2021
Last updated: 5 October 2026
WHAT WE COLLECT
We only collect what we need to look after your booking and your stay. Depending on how you deal with us, this may include:
Your name, email, phone number and address.
Booking details: dates, room, number of guests, extras and any requests.
Names and ages of children staying, provided by their parent or guardian.
Payment details. Card payments are processed by our payment provider, and we don't store full card numbers.
Anything you choose to tell us, such as dietary or accessibility needs, so we can prepare for your stay.
Emails, messages and feedback you send us.
Information about how you use our website (see Cookies and tracking below).
We only collect health information, such as allergies or access needs, if you choose to give it to us, and we only use it to prepare for your stay.
HOW WE COLLECT IT
When you book with us, email or call us, or stay with us.
When you book through a third-party site like Booking.com or Expedia, which passes your booking details to us.
When you buy a gift voucher, sign up to our emails, or enter a competition.
When you visit our website, through cookies and similar tools.
HOW WE USE IT
To take and manage your booking, take payment and send your confirmation.
To prepare for and look after you during your stay.
To answer your questions.
To keep guests, staff and the property safe.
To send you news and offers, if you've agreed or the law allows. You can unsubscribe at any time.
To understand how our website is used and to measure and improve our advertising.
To meet our legal, tax and accounting obligations.
We don't sell your personal information.
WHO WE SHARE IT WITH
We share your information only as needed to run our business, with:
Our booking and payment systems (Mews and its payment partner Adyen).
Booking sites you booked through, such as Booking.com or Expedia.
Our website, email and gift voucher providers (Squarespace, Flodesk and VoucherCart).
Analytics and advertising platforms (Google and Meta). See Cookies and tracking below.
Our accountants, lawyers and insurers.
Local providers you ask us to book for you, such as transfers or tours.
Government or law enforcement bodies, where the law requires it.
We expect everyone we share information with to keep it secure and use it only for the reason we shared it.