Privacy Policy

1. Data Controller

The entity responsible for your personal information collected through the Site is:

For any questions or concerns about how we handle your personal information, please contact us using the details above.

2. Information We Collect

We collect personal information only to the extent reasonably necessary for the purposes set out in this policy. The categories of information we collect through the Site are described below.

2.1 Contact and Reservation-Request Data

When you submit an enquiry, complete a reservation request form or otherwise contact us through the Site, we collect information you provide directly, which may include:

• Full name
• Email address
• Phone number
• Postal or billing address
• Arrival and departure dates
• Room type preference and number of guests
• Special requests or accessibility requirements you choose to share
• Payment card details (processed securely; see Section 6)
• Any other information you voluntarily include in a message field

2.2 Device and Browsing Data

When you visit the Site our systems automatically collect certain technical information, including:

• IP address and approximate geographic location derived from it
• Browser type, version and language setting
• Operating system and device type
• Referring URL and pages visited on the Site
• Date, time and duration of each visit
• Links clicked and features used

2.3 Cookie and Consent Data

We use cookies and similar tracking technologies on the Site. When you first visit the Site a consent notice is displayed. We record the choices you make (accept, decline or customise) together with a timestamp and an anonymised session identifier so that we can honour your preferences on subsequent visits.

The categories of cookies we deploy are:

You may withdraw or amend your cookie consent at any time by adjusting your browser settings or using the cookie preference controls available on the Site. Withdrawing consent does not affect the lawfulness of any processing that took place before withdrawal.

2.4 Special-Category Personal Data

We do not actively seek to collect special-category personal data through the Site. If you voluntarily include such information in a free-text field (for example, when describing an accessibility requirement), we will use it only to fulfil your request and will handle it with an additional level of care. We will not use it for any other purpose without your explicit consent.

2.5 Casino Age Verification Data

Access to casino facilities at Belmoracrownstay is restricted to persons aged 18 years and over. If you use any age-verification feature or online registration pathway associated with casino access on the Site, we will collect the date of birth or identity verification information you provide solely for the purpose of confirming that you meet the minimum age requirement.

2.6 Information We Do Not Collect

We do not collect:

• Full payment card numbers — card data entered on the Site is transmitted directly to our payment processor using encryption; we retain only a masked reference.
• Government-issued identity document details unless expressly required for a specific verification step and disclosed to you at the point of collection.
• Personal information from persons we know to be under 18 years of age. If we become aware that a person under 18 has submitted personal information without appropriate consent, we will delete it promptly.

3. How We Use Your Information

We use the personal information we collect for the following purposes and on the following grounds:

We will not use your personal information for any purpose that is incompatible with the purposes listed above without first notifying you and, where required, obtaining your consent.

4. Disclosure of Your Information

We do not sell, rent or trade your personal information to third parties for their own marketing purposes. We may disclose your information to the following categories of recipients where necessary to fulfil the purposes described in Section 3:

4.1 Service Providers

We engage trusted third-party service providers who process personal information on our behalf under contractual obligations that require them to protect your information and use it only for the services they provide to us. These include:

• Payment processors — to securely process reservation deposits and payments.
• Reservation and property-management system providers — to manage accommodation bookings and guest records.
• Email delivery providers — to send transactional and, where consented, marketing communications.
• Website hosting and infrastructure providers — to operate and maintain the Site.
• Analytics providers — to analyse Site usage in aggregated or pseudonymised form.

4.2 Regulatory and Law Enforcement Bodies

We may disclose personal information to government agencies, regulators or law enforcement authorities where we are required or permitted to do so by law, or where disclosure is necessary to protect the rights, property or safety of , our guests or the public.

4.3 Business Transfers

In the event of a merger, acquisition, restructure or sale of all or part of our business, personal information held by us may be transferred to the acquiring entity. We will notify affected individuals as required by the Privacy Act 1988 before any such transfer takes effect.

4.4 Professional Advisers

We may share personal information with our legal advisers, accountants and insurers where necessary for the conduct of our business, subject to professional confidentiality obligations.

5. International Transfers of Personal Information

Some of our service providers are located or store data outside Australia. Where we transfer your personal information to an overseas recipient, we take reasonable steps — including contractual protections — to ensure that the overseas recipient handles your information in a manner consistent with the Australian Privacy Principles, as required by APP 8.

By submitting your personal information through the Site, you acknowledge that it may be transferred to, stored and processed in countries other than Australia. We will only make such transfers where we are satisfied that adequate protections are in place.

6. Security of Your Personal Information

We implement reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, misuse, alteration or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your browser and the Site.
• Access controls that restrict who within our organisation can access personal information, based on the minimum level required to perform their role.
• Secure, access-controlled systems for storing reservation and guest records.
• Regular review of our information security practices.

Payment card data entered on the Site is handled by our PCI-DSS-compliant payment processor. We do not store full card numbers on our systems.

No method of transmission over the internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. If you become aware of any security concern relating to our Site, please notify us immediately at privacy@belmoracrownstay.com.

In the event of a data breach that is likely to result in serious harm to affected individuals, we will comply with our notification obligations under the Notifiable Data Breaches scheme established by Part IIIC of the Privacy Act 1988.

7. Retention of Personal Information

We retain personal information only for as long as is reasonably necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulations. The table below provides general guidance on our retention practices:

When personal information is no longer required, we destroy or de-identify it in a secure manner.

8. Your Privacy Rights

Under the Privacy Act 1988 and the Australian Privacy Principles, you have the following rights in relation to personal information we hold about you:

8.1 Right of Access

You may request access to the personal information we hold about you. We will provide access within a reasonable time and, in most cases, at no charge. We may decline access where permitted by the APPs, and if we do, we will explain our reasons in writing.

8.2 Right to Correction

If you believe that personal information we hold about you is inaccurate, out of date, incomplete, irrelevant or misleading, you may ask us to correct it. We will take reasonable steps to correct the information or, if we decline to do so, to note your request alongside the relevant record.

8.3 Right to Withdraw Consent

Where processing is based on your consent (for example, marketing emails or non-essential cookies), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

8.4 Right to Complain

If you are dissatisfied with how we have handled your personal information, you have the right to make a complaint to us in the first instance, and thereafter to the Office of the Australian Information Commissioner (OAIC) if the matter is not resolved to your satisfaction (see Section 10).

8.5 How to Exercise Your Rights

To exercise any of the rights described above, please submit a written request to:

We will acknowledge your request within 5 business days and respond substantively within 30 days. Where a request is complex or numerous, we may extend this period and will notify you accordingly.

We may need to verify your identity before we can action a request. We will ask only for information that is reasonably necessary for this purpose.

9. Responsible Gaming and Relevant Regulatory Resources

Casino facilities at Belmoracrownstay are available only to persons aged 18 years or over. The gaming industry in Western Australia is overseen by the Department of Local Government, Sport and Cultural Industries and the Gaming and Wagering Commission of Western Australia, which publishes public guidance on responsible gambling practices, self-exclusion programmes and avenues for raising concerns about gambling-related harm.

Personal information collected in connection with any self-exclusion request or responsible gaming interaction will be handled with strict confidentiality and used only for the purpose of giving effect to that request and meeting any associated regulatory requirements.

10. Complaints

If you have a concern about how we have handled your personal information, we encourage you to contact us first so that we have the opportunity to address it:

We will acknowledge your complaint within 5 business days and endeavour to resolve it within 30 days.

If you are not satisfied with our response, or if you do not wish to contact us directly, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• GPO Box 5218, Sydney NSW 2001, Australia

The OAIC provides information about your privacy rights, guidance on making a complaint and details of the complaint handling process on its website.

11. Links to Third-Party Websites

The Site may contain links to external websites that are not operated by . We have no control over the content or privacy practices of those sites and are not responsible for their privacy policies. We encourage you to review the privacy policy of any third-party site you visit.

12. Persons Under 18

The Site is not directed at persons under the age of 18. We do not knowingly collect personal information from anyone under 18. If you are a parent or guardian and believe that a person under 18 has provided us with personal information, please contact us at privacy@belmoracrownstay.com and we will take prompt steps to delete that information from our records.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or applicable law. When we make material changes, we will update the effective date at the top of this page. We encourage you to review this policy periodically. Your continued use of the Site after any update constitutes your acknowledgement of the revised policy.

14. Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or our handling of your personal information, please contact our Privacy Officer:

We are committed to working with you to resolve any concerns promptly and fairly.