Privacy Policy

Last updated 14 Oct 2026

Balmoral Beach House is a short-stay guesthouse at 23 Almora Street, Mosman NSW 2088, operated by Lloyd M.

This policy explains how we handle personal information for stays booked on this website. It is written to meet the spirit of the Australian Privacy Principles in the Privacy Act 1988 (Cth).

What we collect

When you book direct, the form asks for:

your name
your email
your phone
the dates and the room, and parking or EV charging if you add them
any special requests you choose to write

We also keep the booking code, the amount, the payment status, and a private link so you can open your confirmation. After payment, that confirmation shows the house address and the arrival notes for your stay.

Payment and the $300 bond

You pay on Stripe. The card number, expiry, and security code are entered on Stripe’s page. We do not store them. We keep Stripe’s reference for the payment, and the status of the $300 security bond.

The bond is a pre-authorisation (a hold) on the card, not a second charge in the ordinary case. It is placed before check-in and released after checkout if there is no claim. Stripe emails the payment receipt.

Why we use it

We use these details to:

hold the nights and confirm the booking you asked for
take payment and manage the bond
show you the confirmation, and answer a question about that stay
keep a record for accounting and if there is a dispute

We do not sell personal information. This website does not run a mailing list.

Where it is stored

Booking records are stored in Neon Postgres. The website is hosted on Vercel. Both providers process that data on servers in the United States. Sending a booking from Australia to those servers is a disclosure overseas. We use them to run the booking site, and we rely on their security for that role.

Stripe processes the card payment and the bond hold. Stripe is based in the United States.

Calendars

Busy nights are kept in our database so the calendar on this site is accurate. We read iCalendar feeds from Airbnb (for Sleep-in Room, Marguerita Room, Small Room, and Alexis Room) and from Google Calendar (for Patricia Room and for blocked nights). A feed can include the event title Airbnb or Google put on it, which may be a guest name, plus a reservation code. That label is stored for the house manager. The public calendar shows the nights as booked or unavailable, and at most two letters. It does not show an email or a phone number.

When the manager blocks nights, the site can write an all-day “busy” event to that room’s Google Calendar. The event says the nights are blocked. It does not include a card number. Google processes that calendar in the United States.

Email

If we email you about your stay, including an arrival guide, the message comes from balmoralbeachhouse@gmail.com. It is about the booking you made. See the Email Disclaimer.

This website has no bulk-mail tool. Stripe sends the payment receipt itself.

How long we keep it

We keep the booking while we need it for the stay, the bond, accounting, and any dispute. The site does not delete the record on its own after checkout. Email balmoralbeachhouse@gmail.com if you want a copy or a correction, or if you want us to delete details we no longer need.

Access, correction, and complaints

You can ask for the personal information we hold about you, and ask us to correct it, by emailing balmoralbeachhouse@gmail.com.

If you are not satisfied with our reply, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.