Privacy Policy

Privacy Policy

Effective date: 12 September 2026

Policy Introduction

Our Commitment to Your Privacy

Hearthan Ddish is committed to protecting the privacy of our guests, members, and visitors. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). The policy applies to all personal information collected through our website, booking systems, in-person interactions, and other channels. By using our services or providing personal information, you consent to the practices described in this policy.

This policy may be updated from time to time to reflect changes in our practices or legal obligations. We will notify you of any material changes by posting the updated policy on this page with a new effective date. We encourage you to review this policy periodically. Continued use of our services after changes constitutes acceptance of the updated policy. Last updated: 12 September 2026.

Collection

Personal Information We Collect

We collect personal information that is reasonably necessary for our business functions and activities. This may include:

  • Contact details Name, email address, phone number, postal address.
  • Booking and reservation details Dining preferences, dietary requirements, special occasions.
  • Membership and gaming information Membership status, gaming activity, identification documents for age and identity verification.
  • Payment information Credit card details, billing address (processed securely).
  • Technical information IP address, browser type, device information, and website usage data collected via cookies and similar technologies.

Collection Methods

How We Collect Personal Information

Direct Collection

We collect personal information directly from you when you:

  • Make a booking or reservation online, by phone, or in person.
  • Register for membership or join our VIP programs.
  • Participate in gaming activities at our private salon.
  • Contact us via email, phone, or through our website forms.
  • Subscribe to our newsletter or marketing communications.

Indirect Collection

We may also collect personal information from third parties, such as:

  • Booking platforms and reservation agents.
  • Payment processors and financial institutions.
  • Identity verification services for gaming compliance.
  • Marketing and analytics providers.

Use and Disclosure

Use and Disclosure of Personal Information

Purposes of Use

We use your personal information for the following purposes:

  • To process and manage bookings, reservations, and memberships.
  • To provide personalized dining and gaming experiences.
  • To communicate with you about your bookings, events, and promotions.
  • To comply with legal and regulatory obligations, including RSA and gaming licensing requirements.
  • To improve our services, website, and customer experience.

Disclosure to Third Parties

We may disclose your personal information to:

  • Service providers who assist us in operating our business (e.g., payment processors, IT support, marketing agencies).
  • Government and regulatory bodies as required by law.
  • Professional advisers such as lawyers and accountants.
  • Any other party with your consent or as permitted by law.

We do not sell your personal information to third parties.

Storage and Security

Storage and Security

Security Measures

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorized access, modification, or disclosure. These steps include:

  • Secure servers and encrypted data transmission (SSL/TLS).
  • Access controls and authentication for staff.
  • Regular security assessments and updates.
  • Physical security measures at our premises.

Data Retention

We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. When no longer needed, we securely destroy or de-identify the information.

  • Booking and transaction records may be retained for legal and accounting purposes.
  • Gaming-related records are retained in accordance with licensing requirements.

Your Rights

Your Rights and Choices

Access and Correction

You have the right to request access to the personal information we hold about you and to request corrections if it is inaccurate, incomplete, or out-of-date. To request access or correction, contact us using the details in the 'Contact Us' section below. We will respond to your request within a reasonable timeframe, usually within 30 days.

Opt-Out and Complaints

You may opt out of receiving marketing communications at any time by using the unsubscribe link in our emails or contacting us directly. If you believe we have breached the APPs, you may lodge a complaint with us, and we will investigate promptly. We will acknowledge your complaint within 5 business days. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

Contact Us

Contact Us

Privacy Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact our Privacy Officer: