Privacy Policy

1. Scope and controller

Cormerion Luxe Manor Pty Ltd, ACN 674 921 385 ("Cormerion Luxe Manor", "we", "us" or "our") operates this website and the hospitality services presented through it from 17 Maribyrnong Road, Moonee Ponds, VIC 3039, Australia. This document should be read together with the other legal notices available on this website. We aim to explain our practices in clear language while preserving the rights and obligations that apply under Australian law and, where relevant to visitors in the European Economic Area, the United Kingdom or Switzerland, the General Data Protection Regulation and equivalent privacy requirements.

The data controller and website administrator is Cormerion Luxe Manor Pty Ltd. This Privacy Policy applies to information collected when you browse the website, submit an enquiry, request information about accommodation, casino hotel leisure, dining, events or relaxation experiences, subscribe to updates, or otherwise communicate with us. It does not automatically apply to independent third-party services that may have their own privacy notices.

2. Principles we follow

We process personal information lawfully, fairly and transparently. We seek to collect only information that is reasonably necessary for the purpose explained at the point of collection, keep it accurate where practical, protect it against loss or misuse, retain it only for as long as there is a legitimate need, and provide meaningful ways for individuals to exercise applicable privacy rights.

For Australian visitors, our practices are intended to reflect the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply. For individuals protected by the GDPR, we rely on a valid legal basis for each processing activity and provide the additional rights described below.

3. Information we may collect

Information you provide may include your name, contact details, preferred dates, party size, event or accommodation preferences, message content, accessibility requests voluntarily shared with guest services, subscription preferences and other details that you choose to include in an enquiry. We do not ask visitors to provide unnecessary highly sensitive information through general website forms.

When you use the website, limited technical information may be generated automatically, such as browser type, device category, approximate region derived from network information, page interactions, referral information, language settings, timestamps and security logs. We use this information to operate, secure and improve the website rather than to build intrusive profiles.

4. Purposes and legal bases

We may use personal information to answer enquiries; provide requested information about stays, casino hotel facilities, dining, events and relaxation services; administer reservations where a separate booking process is used; maintain service records; manage subscriptions; prevent abuse or security incidents; comply with legal obligations; establish or defend legal claims; and improve the usability and reliability of our services.

Under the GDPR, the legal basis may be performance of a contract or steps taken at your request before entering a contract, our legitimate interests in operating a secure and useful hospitality website, compliance with legal obligations, or consent where consent is specifically requested. You may withdraw consent at any time without affecting processing that was lawful before withdrawal.

5. Enquiries and communications

If you send an enquiry, the information is used to understand your request and allow the appropriate guest services team to respond. We may retain correspondence for a reasonable period to preserve context, handle follow-up questions, document service commitments and resolve disputes. Contact details displayed on the website are presented as plain text and are not used to create automatic telephone or email links.

6. Cookies and local technologies

The website may use essential storage, preference settings and limited measurement technologies as described in our Cookie Policy. Non-essential technologies should not be activated merely because a visitor opens the website where consent is legally required. You can change browser controls, clear stored data or adjust any available consent preferences at any time.

7. Sharing and processors

We do not sell personal information. We may disclose information to carefully selected service providers that support hosting, security, communications, reservation administration, customer service or professional advice, but only to the extent necessary for the relevant function. Providers acting as processors are expected to handle information under appropriate contractual and confidentiality obligations.

Information may also be disclosed where required by law, a court, regulator or lawful authority; to protect the safety, rights or property of guests, visitors or our organisation; or as part of a legitimate corporate restructuring subject to appropriate protections.

8. International transfers

Some service providers may process information outside Australia or outside the country in which you are located. Where GDPR transfer restrictions apply, we seek to use a recognised transfer mechanism such as an adequacy decision, approved standard contractual clauses or another lawful safeguard, together with supplementary protections when appropriate. Transfer arrangements are reviewed according to the nature and sensitivity of the information involved.

9. Retention

Retention periods depend on why the information was collected. General enquiries are retained only while reasonably useful for guest service and recordkeeping; contractual and transaction records may be kept longer where accounting, taxation, consumer protection or limitation periods require it; security logs are retained for a proportionate period; and subscription information is kept until you opt out or the list is retired. We may anonymise information so that it no longer identifies an individual and use the anonymised information for statistical purposes.

10. Security

We apply organisational and technical measures appropriate to the nature of the information, including access controls, least-privilege practices, secure configuration, software maintenance, backup controls and procedures for responding to suspected incidents. No internet service can guarantee absolute security, but we seek to reduce foreseeable risks and review safeguards as technology and threats evolve.

11. Your Australian privacy rights

Subject to applicable law, you may ask for access to personal information we hold about you and request correction if it is inaccurate, out of date, incomplete, irrelevant or misleading. You may also make a privacy complaint. We will take reasonable steps to verify identity before disclosing or changing personal information and will respond within a reasonable period.

12. GDPR rights

If the GDPR applies to you, you may have the right to access personal data, correct inaccurate data, request erasure, restrict processing, object to processing based on legitimate interests, receive certain data in a portable format, and withdraw consent. You also have the right to lodge a complaint with a competent supervisory authority. These rights are not absolute and may be limited by lawful exemptions, overriding obligations or the need to establish, exercise or defend legal claims.

13. Direct marketing

We send promotional or editorial updates only where there is an appropriate legal basis. Where consent is required, we rely on consent. Every marketing communication should provide a practical way to stop future promotional messages, and an opt-out request will be respected subject to limited service communications that remain necessary for an active booking or legal obligation.

14. Children and age-restricted services

The general hospitality website is not intended to collect personal information from children without appropriate involvement of a parent or guardian. Casino-related leisure areas are age restricted and are intended only for adults who meet the applicable entry requirements. We do not knowingly use general website interactions to profile minors for casino-related marketing.

15. Automated decision-making

We do not use the general website to make solely automated decisions that produce legal or similarly significant effects about visitors. If this changes, we will provide the disclosures and safeguards required by applicable law before such processing is used.

16. Changes to this policy

We may update this Privacy Policy when laws, services or data practices change. The revised version will be posted on this website with an updated date. Material changes may be highlighted where practical. Continued use of the website after an update does not remove any rights that cannot lawfully be waived.

17. Administrator and contact

The administrator is Cormerion Luxe Manor Pty Ltd, 17 Maribyrnong Road, Moonee Ponds, VIC 3039, Australia. General contact details shown elsewhere on this website may be used to submit privacy questions, access or correction requests, objections, withdrawal of consent or complaints. Please provide enough information for us to identify the relevant interaction without sending unnecessary sensitive documents.