Your data, plainly explained

Privacy Policy

What we collect, why we collect it, and how you can see, fix or delete it — written in plain English, not lawyer-speak.

Last updated
1 September 2026

This policy covers osteriahotel.website, our booking systems and any contact you have with Osteria Hotel Pty Ltd.

What we collect

When you enquire, book or stay with us we collect the obvious stuff: name, contact details, dates, payment data (handled by our PCI-compliant processor — we never store card numbers), ID where the law requires it (the gaming floor is 18+), and any preferences you tell us about.

On the website we collect standard analytics — pages viewed, rough location, device type — plus whatever you type into our forms.

Why we collect it

  • To make and manage your bookings
  • To verify age for gaming floor access (legal requirement)
  • To respond to enquiries and complaints
  • To meet Australian regulatory obligations for licensed venues
  • To improve the website — analytics are aggregated, not personal

Who sees it

Our booking and payment providers, our licensing regulator where required by NSW law, and nobody else. We don't sell data, we don't rent lists, and we don't share your details with marketers.

How long we keep it

Booking records are kept for 7 years (Australian tax law). Enquiry emails are kept 12 months. CCTV on the gaming floor is retained per licence conditions. You can ask what's held about you at any time.

Your rights

Under the Australian Privacy Act you can request access to your data, correct it, or ask us to delete it where the law allows. Email us and we'll respond within 30 days — usually much faster.

Security

Card payments run through a PCI-DSS certified processor. Our systems are access-controlled, and staff see only what their role needs.

Questions about this page?

Our team answers policy questions the same way as booking ones — quickly and in plain language.

  • +61755249699
  • osteriahotel@gmail.com
  • Banora Point NSW 2486
Contact us
FAQ

Common questions

Yes — email us from the address you booked with and we'll send a summary within 30 days.

No. Never have, never will. Your details exist to run your booking and meet licence rules — that's it.

Mostly, yes — we'll delete what we can. Some records (invoices, licence-required ID checks) must be kept by law for set periods.

No ad trackers, no cross-site profiling. Our analytics stop at our own pages.