Privacy Policy
Effective date: 14 August 2026
1. Scope and controller
This Privacy Policy explains how Corvelliquegrandhaven Pty Ltd handles personal information when people use this website, contact us, submit an enquiry, or otherwise interact with our guest services. The company is established in Australia. The contact address is shown below and is loaded from the site's local address data file. This policy is intended to support transparent handling of personal information under the Australian Privacy Act 1988 and the Australian Privacy Principles where they apply, and to explain additional rights for individuals covered by the General Data Protection Regulation (GDPR) when that regulation applies to our processing.
2. Personal information we may collect
We may collect information that you choose to provide, including your name, email address, telephone number, enquiry details, preferences relating to a visit, accessibility requests, correspondence, and any other information included in a message. We may also process basic technical information generated when the website is accessed, such as browser type, device information, approximate network information, timestamps, requested pages, referrer information, and security logs, to the extent such information is generated by the hosting environment or necessary for security and operation.
3. How information is collected
Information may be collected directly from you when you complete a contact form, communicate with us, request information, or interact with guest services. Technical information may be generated automatically by the web server or browser as part of delivering the website. We do not ask users to provide more personal information than is reasonably necessary for the relevant purpose.
4. Purposes of processing
We may use personal information to respond to enquiries, provide requested information, manage communications, support prospective or current guests, maintain website security, diagnose technical problems, prevent misuse, keep appropriate business records, comply with legal obligations, and establish, exercise or defend legal claims. We do not use contact information for unrelated purposes without an appropriate legal basis or permission where required.
5. Legal bases under the GDPR where applicable
Where the GDPR applies, processing may be based on taking steps at your request before entering into a contract, performance of a contract, compliance with a legal obligation, our legitimate interests in operating a secure and effective website and responding to enquiries, or consent where consent is specifically requested. Where processing relies on consent, you may withdraw that consent at any time for future processing. Withdrawal does not affect processing already carried out lawfully before withdrawal.
6. Australian Privacy Principles
Where Corvelliquegrandhaven Pty Ltd is an APP entity for the relevant processing, we aim to manage personal information openly and transparently, collect information by lawful and fair means, use and disclose it consistently with the purpose of collection and applicable exceptions, take reasonable steps to protect it, and provide appropriate access and correction mechanisms. Australian privacy obligations can depend on the nature and circumstances of the organisation and processing.
7. Data minimisation and accuracy
We seek to limit personal information to what is reasonably necessary for the identified purpose. If information appears inaccurate, out of date, incomplete, irrelevant or misleading, reasonable steps may be taken to correct or update it when appropriate. You may also contact us to request correction of information relating to you.
8. Retention
Personal information is retained only for as long as reasonably necessary for the purpose for which it was collected, to meet legal, accounting, security, dispute-resolution or record-keeping requirements, or to establish or defend legal claims. Retention periods vary according to the type of information and the context of the interaction. Information that is no longer required may be deleted, destroyed or de-identified where appropriate.
9. Security
We use reasonable administrative and technical measures intended to protect personal information against misuse, interference, loss, unauthorised access, modification or disclosure. No website, storage system or transmission method can be guaranteed to be completely secure. Users should therefore avoid submitting unnecessary sensitive information through general enquiry forms.
10. Service providers and disclosures
Personal information may be disclosed to service providers that support website hosting, security, IT administration, communications, professional advice or business operations where reasonably necessary. Such providers should receive only the information required for their role and are expected to handle it consistently with applicable contractual and legal obligations. Information may also be disclosed where required or authorised by law, regulation, court order or a lawful request from a competent authority.
11. Overseas handling
Some service providers or technical systems may operate across national borders. Where personal information is disclosed or transferred internationally, we take reasonable steps required by applicable law and consider appropriate safeguards. If the GDPR applies to a restricted transfer, a recognised transfer mechanism may be used where required.
12. Your rights in Australia
Subject to applicable exceptions, you may ask for access to personal information held about you and request correction of inaccurate or incomplete information. You may also raise a privacy concern or complaint. We may need to verify identity before acting on a request and may request additional information where reasonably necessary to locate the relevant records.
13. GDPR rights where applicable
If the GDPR applies to our processing of your personal data, you may have rights including the right to be informed, access, rectification, erasure in qualifying circumstances, restriction of processing, data portability where applicable, and objection to certain processing. You may also have the right to withdraw consent and to lodge a complaint with a competent supervisory authority. These rights are subject to legal conditions and exceptions.
14. Automated decision-making
We do not intend the general contact functionality on this website to make decisions based solely on automated processing that produce legal effects or similarly significant effects concerning an individual.
15. Children and age-restricted venue areas
The website is directed to adults interested in an age-restricted gaming venue and related accommodation. In New South Wales, persons under 18 must not enter a casino. We do not knowingly seek personal information from minors for participation in casino activities. If information from a minor is identified in circumstances where it should not have been collected, appropriate steps may be taken to delete or otherwise handle it lawfully.
16. Complaints and contact
Privacy enquiries, access or correction requests, and complaints may be submitted using the contact details on this website. We will consider the request and respond within a reasonable period, taking into account applicable legal requirements. In Australia, individuals may also have the ability to raise eligible privacy complaints with the Office of the Australian Information Commissioner after first giving the organisation an opportunity to address the matter.
17. Changes to this policy
This policy may be updated to reflect changes to website functionality, business practices or applicable law. The current version published on the website replaces earlier versions. Material changes should be reflected in the updated text and effective date.
18. Sensitive information
We do not request sensitive information through the general enquiry form unless it is genuinely necessary for a specific guest-service purpose and lawful to collect. If a visitor voluntarily includes health, accessibility or other sensitive details in a message, we will handle that information with additional care and only for a relevant purpose, subject to applicable law and any required consent.
19. Anonymity and pseudonymity
Where it is lawful and practicable, people may make general enquiries without providing more identifying information than is necessary. Some requests, reservations, security matters or legal obligations may require verified identity, and in those circumstances anonymous handling may not be practicable.
20. Direct marketing
We do not intend to use contact details supplied for a service enquiry for unrelated direct marketing without a lawful basis. If direct marketing communications are sent where permitted, recipients should be given a practical way to opt out, and an opt-out request should be respected within a reasonable period.
21. Data breach response
If a security incident involving personal information occurs, we will assess the nature of the incident, the information affected, the likely consequences and the steps available to reduce harm. Where the Australian Notifiable Data Breaches scheme or another applicable notification regime requires notice, we will take the steps required by law, including notifying the appropriate regulator and affected individuals when the relevant threshold is met.
22. Identity verification for rights requests
Before disclosing, correcting or deleting personal information in response to a request, we may take reasonable steps to verify that the requester is the person concerned or is properly authorised to act for that person. Verification information will be limited to what is reasonably necessary and should not be retained longer than needed for the verification purpose.
23. Records of requests and compliance
We may keep proportionate records showing how privacy enquiries, access requests, correction requests, objections, consent withdrawals or complaints were handled. Such records may be necessary to demonstrate compliance, maintain accountability, prevent repeated misuse of request channels, or establish and defend legal claims.
24. Data protection by design
When website functionality or internal processes are changed, privacy and security considerations should be assessed at an appropriate stage. We aim to avoid collecting unnecessary information, limit access to those who need it, use suitable security controls, and review whether optional tracking or third-party integrations are necessary before introducing them.
25. Contact details and escalation
For privacy matters, contact Corvelliquegrandhaven Pty Ltd using info@corvelliquegrandhaven.com or the postal address displayed on this page. Please describe the nature of the request and the information or interaction concerned so that it can be assessed efficiently. We may ask for clarification where the scope is unclear or unusually broad.