Velsoravianluxestay is an Australian business. Our privacy practices are designed with the Privacy Act 1988 (Cth) and the Australian Privacy Principles in mind where those requirements apply. Where the General Data Protection Regulation applies to an individual in the European Economic Area or another covered situation, the additional GDPR rights described below are intended to apply.
1. Privacy Administrator and Contact
For privacy matters, the responsible business is Velsoravianluxestay Pty Ltd, located at Level 26, 44 Market Street, Sydney NSW 2000, Australia. Privacy enquiries may be sent to info@velsoravianluxestay.com. The email address is displayed as text and is not a clickable mail link on this website.
If you contact us about privacy, please include enough information for us to identify the issue and, where appropriate, verify your identity before we disclose or change personal information.
2. Personal Information We May Collect
Depending on how you interact with us, we may collect your name, email address, telephone number, enquiry category, message content, accessibility requests you choose to provide, booking-related preferences, correspondence records, and technical information generated when a web server delivers the site. We ask visitors not to send payment card data, identity documents, health records or other sensitive information through the general enquiry form unless specifically requested through an appropriate secure process.
Information submitted through the enquiry form is provided directly by you. Technical information may include browser type, approximate device characteristics, requested page, date and time of access, referring information and security logs. This static version of the website does not intentionally deploy advertising or behavioural analytics cookies.
3. Purposes of Processing
We use information to respond to enquiries, provide requested information about rooms, guest services, accessibility and adult entertainment areas, communicate about a requested visit or group enquiry, maintain service and security records, improve site usability, prevent misuse, comply with lawful obligations and establish, exercise or defend legal rights.
We do not use contact details supplied for an enquiry to send unrelated direct marketing unless a lawful basis and any required consent exist. We do not sell personal information to advertisers.
4. Legal Bases Where GDPR Applies
Where the GDPR applies, processing may be based on taking steps at your request before entering a contract, performance of a contract, compliance with legal obligations, legitimate interests such as responding to enquiries and protecting the website, or consent where consent is the appropriate basis. If processing relies on consent, you may withdraw that consent at any time for future processing.
Providing information in an enquiry form is generally voluntary. If information is necessary to answer a particular request and you do not provide it, we may be unable to respond fully.
5. Disclosure of Information
Personal information may be disclosed only where reasonably necessary to personnel, contractors or service providers supporting website hosting, security, communications, guest administration, professional advice or legal compliance. Any service provider should receive only the information reasonably required for its role and should be subject to appropriate confidentiality or data protection obligations.
We may disclose information when required by law, court order, regulatory requirement, law-enforcement request that is legally valid, or where reasonably necessary to protect rights, safety, property or the integrity of our systems.
6. Overseas Disclosures and International Transfers
Online services can involve infrastructure or providers located outside Australia. Before using a provider to handle personal information, appropriate consideration should be given to the location, safeguards and contractual protections involved. Where the GDPR applies to an international transfer, a recognised transfer mechanism and appropriate supplementary safeguards should be used when required.
This policy does not represent that every service is physically hosted in Australia. If you require information about a specific provider or transfer relevant to your enquiry, contact us using the details above.
7. Retention
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, to maintain appropriate business records, resolve disputes, satisfy legal or regulatory obligations and protect legitimate interests. Retention periods can differ depending on the nature of the enquiry and the legal context.
When information is no longer reasonably required, it should be securely deleted, destroyed or de-identified where appropriate and permitted by law.
8. Security
We use reasonable administrative, technical and organisational safeguards intended to protect personal information against misuse, interference, loss, unauthorised access, modification or disclosure. No internet transmission or storage system can be guaranteed to be completely secure, so visitors should avoid sending unnecessary sensitive information through a general website form.
Where an eligible data breach occurs under applicable Australian law, notification obligations are assessed under the Notifiable Data Breaches scheme. Other applicable breach-notification laws are considered where relevant.
9. Access, Correction and Australian Privacy Rights
You may request access to personal information we hold about you and ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading, subject to lawful exceptions. We may need to verify identity before processing an access or correction request.
If you have a privacy complaint, contact us first so we can review it. If you remain dissatisfied and Australian privacy law applies, you may have the right to complain to the Office of the Australian Information Commissioner.
10. GDPR Rights Where Applicable
Where the GDPR applies, you may have rights to be informed, access personal data, request rectification, request erasure in applicable circumstances, restrict processing, receive portable data where the portability right applies, object to certain processing, withdraw consent when consent is the basis, and lodge a complaint with a competent supervisory authority.
These rights are not absolute and can be limited by lawful exemptions. Requests will be handled within the period required by applicable law after any necessary identity verification.
11. Children and Adult Gaming Areas
This website describes a venue whose gaming areas are restricted to persons aged 18 years and over. The general website is not intended to solicit personal information from children for participation in adult gaming activities. If we learn that information has been submitted by a minor in a context where it should not have been collected, we will assess appropriate deletion and response steps.
12. Third-Party Links
The finished local version of this website is designed not to depend on third-party scripts, remote fonts, remote images or external style sheets. If a future version includes links to an external website, that external operator will have its own privacy practices and this policy will not govern that third-party site.
13. Changes to This Policy
We may update this Privacy Policy when website functionality, legal requirements or information-handling practices change. The updated version should display a revised date and should be made available through the footer on every page.