Cornish Arms Hotel (ABN 96 037 334 565)
We understand the importance of, and are committed to, protecting your personal information (that is, information or an opinion about you, whether true or not, which identifies you or from which your identity is reasonably identifiable). We are bound by the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth) (Privacy Act).
Please take a moment to read this Privacy Policy. It explains how we manage your personal information, including our obligations and your rights in respect of our dealings with your personal information.
- How we collect your personal information
We collect and hold personal information in a fair and lawful manner. We collect personal information in a number of unobtrusive ways, including:
- when you interact with us or staff at our venue, whether in person, by telephone, electronically or in written correspondence (Staff Interactions);
· via our website www.cornisharms.com.au
· via third-party online services,
- when you participate in promotional activities, complete surveys or enter competitions such as dropping your business card in a box in one of our venues (Promotional Activities);
- when you log into any of our public or guest wireless internet (Wifi) services that are provided at any of our venues (Public Wifi).
Where it is reasonably practical to do so, we will collect your personal information directly from you. However, in certain cases we may collect personal information from publically available sources and third parties, such as suppliers, recruitment agencies, contractors, our clients and business partners. For example, we collect personal information from our service providers when you use an Online Service or Public Wifi.
- Types of personal information we collect
The type of personal information we collect depends on the collection method and the immediate purpose for which it is collected. This may include your name, phone numbers, address, email address, Social Media handles and profile information, age/date of birth, gender and company/employment information.
We may collect billing information if required to provide our goods and services to you; however, we will not retain or hold such information unless we need it for an ongoing purpose. For example, pay a bill through a Staff Interaction, we only retain a few digits of your card details for verification purposes and do not retain full billing information for any future purposes. When you book a function, we collect billing information and store this for approximately two months after the function to allow us to process payments for corresponding expenses, then we destroy the billing information.
We only collect sensitive information about you with your consent or otherwise in accordance with the Privacy Act. For example, we may request information about any allergies or other medical issues you or your guests may have when you order food, beverages or catering services, which we will use for the purposes of fulfilling your order.
Where you do not wish to provide us with your personal information, we may not be able to provide you with requested goods or services.
- Background collection
When you use our Websites, Applications, Online Services or Public Wifi (collectively, Digital Services), information can be collected using cookies, beacons, log files, clickstream data and other technology (collectively, Metadata). This may include:
- the date, time and duration of your use of the Digital Services;
- information about the device and operating system you are using;
- the identity of the telecommunications network you are connected to;
- the browser you are using;
- the pages you visit and information you access using the Digital Services;
- when visiting our Website, the last web page you were on before visiting the Website and the next page you click to when leaving our Website.
Aggregated Metadata helps to understand how people use our Digital Services so we can improve and develop them further. Metadata is generally not linked to the identity of visitors or users. However, we may be able to identify you and combine your anonymous Metadata with other personal information we hold about you in certain circumstances, such as:
- if you are logged in to a Website, Application or Online Service;
- if you follow a link from an electronic message to access a Website, Application or Online Service;
- if you use Public Wifi and we hold personal information about you that could be used to associate your usage with your identity.
We also collect personal information and Metadata provided by Social Media networks when you use a Social Media account to login to our Digital Services, and this Metadata will be associated with your identity.
Depending on your device settings and permissions, Digital Services may also collect information about your current location. This may be needed for some functionality, such as identifying your proximity to our venue.
Browsers and devices may provide settings that allow you to control whether Digital Services can access certain types of Metadata. For example, you can disable the use of cookies in your browser settings and you may be asked to grant permissions for Websites and Applications to access certain information. Please refer to the user manual or help section of your browser or device for details.
- Our purposes for handling your personal information
As a general rule, we only use personal information for purposes that would be considered relevant and reasonable in the circumstances.
We collect, hold, use and disclose personal information to:
- communicate with you, including responding to your inquiries;
- book a function at our venue and any related catering services;
- offer and provide you with our goods and services;
- conduct customer satisfaction surveys and market research;
- administer loyalty programs and Promotional Activities;
- provide, maintain and improve our venue, products and services, including Websites, Applications, Social Media activities and Public Wifi;
- monitor and improve our engagement of Online Services;
- compile and analyse statistics and trends;
- performing contracts with service providers;
- manage and administer those goods and services;
- comply with our legal and regulatory obligations; and
- otherwise to manage our business.
We will not use or disclose your personal information for any other purpose unless you have consented to that use or disclosure.
- Protection of personal information
We will hold personal information as either secure physical records, electronically on our internal system, in cloud storage, and in some cases, records on third party servers, which may be located overseas.
We maintain appropriate physical, procedural and technical security for our office and information storage facilities so as to prevent any loss, misuse, unauthorised access, disclosure, or modification of personal information. This also applies to disposal of personal information.
We further protect personal information by restricting access to personal information to only those who need access to the personal information to do their job. Physical, electronic and managerial procedures have been employed to safeguard the security and integrity of your personal information.
We will destroy or de-identify personal information once it is no longer needed for a valid purpose or required to be kept by law.
- Direct marketing
Like most businesses, marketing is important to our continued success. We therefore like to stay in touch with customers and let them know about new opportunities. We may provide you with information about new services, products, Online Services and Promotional Activities either from us, or from third parties which may be of interest to you.
You may opt out at any time if you no longer wish to receive commercial messages from us. You can make this request by contacting our Privacy Officer.
- Accessing and correcting your personal information
You may contact our Privacy Officer to request access to the personal information that we hold about you and/or to make corrections to that information, at any time. On the rare occasions when we refuse access, we will provide you with a written notice stating our reasons for refusing access. We may seek to recover from you reasonable costs incurred for providing you with access to any of the personal information we hold about you.
We are not obliged to correct any of your personal information if we do not agree that it requires correction and may refuse to do so. If we refuse a correction request, we will provide you with a written notice stating our reasons for refusing.
We will respond to all requests for access to or correction of personal information within a reasonable time.
- Sharing personal information
We may occasionally disclose personal information to third-party promotional partners, such as sponsors of Promotional Activities, with your consent.
We may also disclose personal information to our service providers and other trusted third parties (and their directors, servants and agents) to assist us with carrying out our functions. For example, we disclose customers’ personal information to Mailchimp, a marketing service provider. We do so in compliance with the requirements of the Privacy Act.
Personal information and Metadata may also be collected by Social Media networks, Online Services, Public Wifi service providers and other third-party websites and applications. We do not receive such information except as otherwise indicated in this Privacy Policy. Please contact the operators of those channels or check their privacy policies with any queries about how they collect, use and disclose such information.
- Resolving personal information concerns
If you have any questions, concerns or complaints about this Privacy Policy, or how we handle your personal information, please contact our Privacy Officer:
Cornish Arms Hotel
163A Sydney Road
Brunswick
03 9380 8383
thecornish@bigpond.com
- Changes
We reserve the right to change the terms of this Privacy Policy from time to time, without notice to you. An up-to-date copy of our Privacy Policy is available on our Website.