Privacy Policy

Privacy Policy DUUXS.com (last updated: Jan 23, 2026)

This Privacy Policy explains how DUUXS collects, uses, stores, and protects personal data when you use our platform, services, website, or mobile application.

This Policy applies to all current features and to any new features or services that may be introduced in the future.

DUUXS acts as the data controller for the personal data processed through the platform. We process personal data in accordance with applicable privacy laws, including the General Data Protection Regulation (GDPR) and the Australian Privacy Act.

This Privacy Policy applies to all personal data processed by DUUXS when you use our website, mobile application, or related services (together, the “Platform”), regardless of how you access or use them.

Personal data means any information that identifies you, either directly (such as your name) or indirectly (such as an IP address or information that can reasonably be combined to identify you).

When you register for an account, act as a Host, make a booking as an Explorer, or contact other users through the Platform, we may collect personal data that can be used to identify or contact you (“Identity Information”). This may include your name, email address, phone number, and home address, but does not include your credit card or banking details.

For the purposes of this Privacy Policy, processing includes collecting, storing, using, disclosing, transferring, modifying, and deleting personal data, including through the use of cookies and similar technologies.

This Privacy Policy applies only to personal data provided to DUUXS through the Platform.

DUUXS processes personal data only for specific, defined purposes, as outlined below.

Providing our services

We process personal data to create and manage accounts, enable bookings, facilitate communication between users, and support reviews and platform functionality.

Data processed may include your name, contact details, address, IP address, and account profile information.

Lawful basis: performance of a contract.

Customer service

We process personal data to respond to enquiries, support requests, and issues raised by users.

Data processed may include your name, contact details, and booking information.

Lawful basis: legitimate interest in providing effective customer support.

Newsletters and platform updates Where you opt in, we process your name and email address to send newsletters and updates about DUUXS.

Lawful basis: consent. You may withdraw consent at any time.

Direct marketing

Where permitted by law and based on your preferences, we may process personal data to send promotional communications related to DUUXS.

Data processed may include contact details, account information, and limited usage data.

Lawful basis: consent and, where applicable, legitimate interest. You may object or withdraw consent at any time.

Third-party authentication services DUUXS offers optional sign-up and login through third-party services such as Google or Facebook. When you choose these options, personal data is processed in accordance with the privacy policies of those providers, in addition to this Privacy Policy.

DUUXS may disclose personal data only to the extent necessary and for legitimate purposes, including the following categories of recipients.

Legal and regulatory authorities We may disclose personal data where required by law, court order, or legal process, or where disclosure is necessary to comply with legal obligations, protect our rights, or address matters relating to public safety or law enforcement.

Hosts

When you request or make a booking, we share limited information with the relevant Host, including your name and access to your DUUXS profile, so the Host can assess and manage the booking.

Service providers

We may share personal data with trusted third-party service providers who support the operation of the Platform, such as hosting, maintenance, analytics, fraud prevention, customer support, and technical services. These providers process personal data only on our instructions and are subject to contractual privacy and confidentiality obligations.

Insurance providers

Where necessary, we may disclose relevant personal data to our insurance providers to protect the rights, property, or safety of DUUXS, our users, or third parties.

DUUXS does not disclose personal data to third parties for purposes unrelated to the operation, security, or legal compliance of the Platform.

DUUXS uses cookies and similar automated technologies to collect limited technical and usage information when you use the Platform. This may include IP address, approximate location, browser type, device type, operating system, language, pages viewed, and interactions with the Platform.

We use this information to:

• operate the Platform effectively and securely
• remember preferences and session information
• understand how the Platform is used so we can improve it

DUUXS may use third-party analytics and service providers, such as Google Analytics, to help us understand usage patterns. These providers process information in accordance with their own privacy policies.

You can configure your browser to block cookies. Please note that doing so may limit certain features or functionality of the Platform. The Platform does not currently respond to browser “Do Not Track” signals.

Personal data collected by DUUXS is stored in Australia.

We apply appropriate administrative, technical, and physical security measures to protect personal data against loss, misuse, unauthorised access, and disclosure.

While we take reasonable steps to safeguard personal data, no online system can be guaranteed to be completely secure, and we cannot guarantee absolute security of information transmitted or stored electronically.

DUUXS processes personal data only where appropriate safeguards are in place.

Personal data may be transferred to, or processed by, third-party service providers located outside the European Economic Area, including in the United States.

Where such transfers occur, DUUXS ensures that suitable safeguards are applied in accordance with applicable privacy laws, such as contractual protections and other legally recognised transfer mechanisms.

The DUUXS Platform may contain links to third-party websites operated by Hosts or other external parties.

These websites are not operated or controlled by DUUXS and are not covered by this Privacy Policy. DUUXS does not endorse and is not responsible for the content, services, products, or privacy practices of third-party websites.

If you visit a third-party website via a link on the Platform, you should review the privacy policy and terms of that website before providing any personal data.

Where DUUXS engages third-party service providers to process personal data on its behalf, we put appropriate Data Processing Agreements in place.

These agreements define the responsibilities of DUUXS and the service provider and require that personal data is processed in accordance with applicable privacy laws and security standards.

DUUXS respects the rights individuals have in relation to their personal data.

If you are located in the European Union, you have the right to:

• access and obtain a copy of your personal data
• request correction or deletion of personal data
• request restriction of processing in certain circumstances
• receive personal data in a portable format
• object to processing, including processing for direct marketing

If you are located outside the European Union, you may request access to a copy of the personal data we hold about you, subject to applicable laws.

To exercise any of these rights, please contact our Privacy team at dpo@duuxs.com

For security reasons, we may need to verify your identity before responding. Your rights may be subject to legal limitations depending on the circumstances.

Account deletion

You can delete your account and associated personal data at any time using the account settings in your profile on the website or in the mobile application. Once your account is deleted, it will be immediately disabled across all devices.

If you need assistance, you can contact us at info@duuxs.com or dpo@duuxs.com

Where you have opted in to receive marketing communications, DUUXS may use your personal data to send newsletters, offers, and promotional messages related to DUUXS services.

You can withdraw your consent at any time by:

• clicking the unsubscribe link in our emails
• updating your preferences in your account settings
• contacting us at dpo@duuxs.com

Withdrawal of consent does not affect the lawfulness of any processing carried out before consent was withdrawn.

DUUXS takes reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration.

We use industry-standard security practices and secure infrastructure to support the operation of the Platform.

In the event of a personal data breach, DUUXS will make any legally required notifications to affected individuals and relevant authorities without undue delay, in accordance with applicable privacy laws.

DUUXS does not knowingly collect personal data from individuals under the age of 18.

If we become aware that personal data relating to a child under 18 has been collected, we will take reasonable steps to delete that data as soon as practicable.

If DUUXS were ever to offer services specifically intended for children, we would obtain verifiable parental consent before collecting or processing any personal data, in accordance with applicable laws.

If you believe that personal data relating to a child has been collected through the Platform, please contact us at dpo@duuxs.com.

DUUXS retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including to provide the Platform, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements.

The retention period depends on the type of data and the purpose for which it is processed. When personal data is no longer required, it is securely deleted or anonymised.

If you have any questions or concerns about how your personal data is processed, you may contact DUUXS at dpo@duuxs.com.

If you are located in the European Union and believe your data protection rights have been infringed, you also have the right to lodge a complaint with the data protection authority in your country of residence.

DUUXS is located in Killiecrankie, Tasmania, Australia.

You can contact DUUXS through the Platform using the available contact and feedback features, or by email at support@duuxs.com.

DUUXS may update this Privacy Policy from time to time to reflect changes to our services or legal requirements.

When we do, we will publish the updated version on the Platform and, where appropriate, notify you by email.

Continued use of the Platform after an updated Privacy Policy has been published constitutes acceptance of the revised policy.