Privacy Policy

1. Introduction

(ACN 862 947 313 / ABN 52 862 947 313), trading as Lorquaviangrandhotel, operates the website lorquaviangrandhotel.com (the "Website"). Our registered address is .

We are committed to protecting the personal information of everyone who visits our Website. This Privacy Policy explains how we collect, use, disclose and safeguard your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) contained in Schedule 1 of that Act.

Please read this policy carefully before using the Website or submitting any personal information to us. By continuing to use the Website you acknowledge that you have read and understood this policy.

2. Data Controller

For the purposes of applicable privacy legislation, the data controller — the entity that determines the purposes and means of processing your personal information — is:

3. Personal Information We Collect

We collect only the personal information that is reasonably necessary for the purposes set out in this policy. The categories of information we collect through the Website are described below.

3.1 Information You Provide Directly

When you submit an enquiry, complete a reservation request form, subscribe to our newsletter or otherwise contact us through the Website, you may provide:

• Full name
• Email address
• Telephone number
• Postal or billing address
• Accommodation preferences (room type, arrival and departure dates, number of guests)
• Special requests or accessibility requirements (which may constitute special-category personal data — see Section 3.4)
• Payment card details, where you choose to submit a reservation deposit through the Website's secure payment facility
• Content of any message or correspondence you send to us

3.2 Reservation-Request Data

Reservation requests submitted through the Website generate a record that includes all information listed in Section 3.1 together with:

• Date and time of the request
• Confirmation or reference number assigned to the request
• Rate plan or promotional code selected
• Communication history relating to that reservation

3.3 Device, Usage and Technical Data

When you visit the Website our systems automatically collect certain technical information, including:

• Internet Protocol (IP) address
• Browser type and version
• Operating system and device type
• Referring URL and exit pages
• Pages viewed, links clicked and time spent on each page
• Date and time of each visit
• Cookie identifiers and similar tracking identifiers (see Section 5)

This information is collected through server logs and, where applicable, cookies or similar technologies. On its own, most of this data does not directly identify you; however, it may be combined with other information we hold in a way that does.

3.4 Special-Category Personal Data

Certain information you volunteer — for example when making a special request in connection with a reservation — may fall within the definition of sensitive information (or special-category personal data) under applicable privacy law. We collect such information only where you have provided it voluntarily and only to the extent required to fulfil your request. We do not use this information for any secondary purpose without your explicit consent.

3.5 Casino-Related Age Verification

Our casino facilities on-site are restricted to guests and visitors who are 18 years of age or older. Where the Website offers any online pre-registration or expression of interest relating to casino facilities, we may ask you to confirm your date of birth or age for the sole purpose of verifying that you meet this minimum age requirement. We do not use age-verification data for any other purpose.

3.6 Information We Do Not Knowingly Collect from Children

The Website is not directed at persons under 18 years of age and we do not knowingly solicit or collect personal information from anyone under that age. If you believe that a person under 18 has provided personal information to us through the Website, please contact us at privacy@lorquaviangrandhotel.com so that we can take appropriate steps to remove that information.

4. Consent and Preference Data

Where our Website presents you with consent choices — for example when you interact with a cookie preference centre or opt in to marketing communications — we record:

• The consent or preference selected (accepted, rejected or customised)
• The date and time the choice was made
• The version of the consent notice presented at the time
• The identifier associated with your browser session at the time of the choice

These records are retained so that we can demonstrate compliance with our obligations and honour your preferences consistently across Website sessions.

5. Cookies and Similar Technologies

We use cookies and similar technologies (collectively, "cookies") to operate the Website, remember your preferences and, where you have consented, to understand how visitors use the Website. The principal categories of cookies we use are set out below.

You can manage your cookie preferences at any time through your browser settings or, where we provide one, through the cookie preference centre on the Website. Please note that disabling certain cookies may affect the functionality of the Website.

6. How We Use Your Personal Information

We use the personal information we collect for the following purposes. We process your information only where we have a lawful basis to do so under the Privacy Act 1988 (Cth) and the APPs.

We do not use your personal information for purposes that are incompatible with the purposes for which it was collected, except with your consent or as permitted by law.

7. Disclosure of Your Personal Information

We do not sell, rent or trade your personal information to third parties for their own marketing purposes. We may disclose your personal information to the following categories of recipients, and only to the extent necessary for the relevant purpose:

7.1 Service Providers

We engage trusted third-party service providers to assist us in operating the Website and delivering our services. These include:

• Hosting and infrastructure providers — who store and process data on servers used to run the Website;
• Payment processors — who handle payment card transactions securely on our behalf;
• Reservation and property management system providers — who facilitate the processing and management of accommodation bookings;
• Email and communication platform providers — who deliver booking confirmations and, where applicable, marketing messages;
• Analytics providers — who supply us with aggregated reports on Website usage, subject to your cookie consent.

All service providers are engaged under written agreements that require them to protect your personal information and to use it only for the purposes for which it was disclosed.

7.2 Professional Advisers

We may share personal information with our lawyers, accountants, auditors and insurers where necessary in connection with the professional services they provide to us.

7.3 Regulatory and Law Enforcement Authorities

We may disclose personal information to government bodies, regulators, law enforcement agencies or courts where required or authorised to do so by applicable Australian law, or where we have a good-faith belief that disclosure is necessary to protect the rights, property or safety of , our guests or others.

7.4 Business Transfers

In the event of a merger, acquisition, restructure, sale of assets or similar corporate transaction involving , personal information held by us may be transferred to the relevant successor entity, subject to that entity assuming our obligations under this policy or providing you with a new privacy notice.

8. Overseas Disclosure

Some of our service providers may store or process personal information on servers located outside Australia, including in countries such as the United States and member states of the European Union. Before disclosing personal information to an overseas recipient, we take reasonable steps to ensure that the recipient is subject to privacy obligations that are substantially similar to the APPs, or we obtain your consent to the disclosure.

Where personal information is transferred overseas, we seek to protect it through contractual safeguards, data processing agreements, standard contractual clauses or other recognised transfer mechanisms. You should be aware that overseas recipients may be subject to foreign laws that could require them to disclose personal information to foreign government authorities.

If you would like further information about the countries to which we may transfer your personal information, please contact us at privacy@lorquaviangrandhotel.com.

9. Retention of Personal Information

We retain personal information only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulation. The following general retention periods apply:

When personal information is no longer required, we take reasonable steps to destroy or de-identify it securely.

10. Security of Personal Information

We take reasonable steps to protect the personal information we hold from misuse, interference, loss, unauthorised access, modification or disclosure. Our security measures include:

• Encryption of data in transit using industry-standard Transport Layer Security (TLS) protocols;
• Access controls that restrict access to personal information to authorised personnel who need it to perform their duties;
• Password policies and, where appropriate, multi-factor authentication for staff accessing systems that hold personal information;
• Regular review of our information security practices and controls;
• Use of reputable, security-certified service providers for hosting and payment processing.

While we employ these safeguards, no method of transmitting or storing information is completely secure. If you have reason to believe that your personal information has been compromised in connection with your use of the Website, please contact us immediately at privacy@lorquaviangrandhotel.com.

If we become aware of a data breach that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act 1988 (Cth).

11. Your Privacy Rights

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the following rights in relation to the personal information we hold about you:

11.1 Right of Access

You may request access to the personal information we hold about you. We will provide access within a reasonable time and, where required by law, without charge (unless providing access imposes unreasonable cost on us, in which case we may charge a reasonable fee and will inform you in advance).

11.2 Right to Correction

If you believe that any personal information we hold about you is inaccurate, out of date, incomplete, irrelevant or misleading, you may ask us to correct it. We will take reasonable steps to correct the information or, if we do not agree that it requires correction, we will note your objection on our records.

11.3 Right to Withdraw Consent

Where we rely on your consent as the basis for processing your personal information — for example, for marketing communications or non-essential cookies — you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal. To unsubscribe from marketing emails, use the unsubscribe link in any such email or contact us at privacy@lorquaviangrandhotel.com.

11.4 Right to Complain

You have the right to make a complaint about how we handle your personal information. Please see Section 13 for details of how to do so.

11.5 How to Exercise Your Rights

To exercise any of the rights described in this section, please submit a written request to:

We will acknowledge your request promptly and respond within 30 days, or within such other period as is permitted by law. We may ask you to verify your identity before we process your request, to ensure that personal information is disclosed only to the person to whom it relates.

12. Third-Party Websites and Links

The Website may contain links to third-party websites. Once you follow a link to an external website, this Privacy Policy no longer applies. We are not responsible for the privacy practices or content of third-party websites and encourage you to review the privacy policies of any website you visit.

13. Complaints

13.1 Complaints to Us

If you believe we have not complied with our obligations under the Privacy Act 1988 (Cth) or this Privacy Policy, we encourage you to contact us first so that we have the opportunity to resolve your concern:

Please provide as much detail as possible about your concern so that we can investigate and respond effectively. We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.

13.2 Complaints to the OAIC

If you are not satisfied with our response, or if you prefer to raise your complaint directly with the regulator, you may contact the Office of the Australian Information Commissioner (OAIC). The OAIC is the independent authority responsible for administering the Privacy Act 1988 (Cth) and provides published guidance, information and complaint resolution services relating to the handling of personal information in Australia.

You can lodge a privacy complaint with the OAIC by visiting www.oaic.gov.au or by writing to:

14. Responsible Gaming and Privacy

Our on-site casino is committed to the responsible conduct of gaming. The South Australian Independent Gambling Authority (IGA) is the statutory body responsible for the regulation and oversight of gaming in South Australia and publishes guidance and information about responsible gaming, self-exclusion programmes and related resources. Information about these resources is available through the IGA's public channels.

Where you voluntarily provide personal information in connection with a responsible gaming measure — such as enquiring about a self-exclusion programme — we handle that information with particular care, using it only for the purpose for which it was provided and treating it as sensitive information in accordance with Section 3.4 of this policy.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Your continued use of the Website after any changes take effect constitutes your acknowledgement of the updated policy.

16. Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the way we handle your personal information, please contact our Privacy Officer: