Privacy Policy

1. Introduction

(ABN 84 729 615 308, ACN 647 382 915), trading as Valmessia Plate, operates the Valmessia Plate casino-restaurant venue and this website at valmessiaplate.com (the "Website"). Our registered address is .

We are committed to protecting the personal information of everyone who visits or uses the Website. This Privacy Policy explains what personal information we collect, why we collect it, how we use and disclose it, how long we keep it, and what rights you have in relation to it.

This Policy applies to personal information collected through the Website only. It should be read alongside our Website Terms of Use.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) contained in Schedule 1 to that Act, together with any applicable Queensland privacy legislation.

2. Data Controller

The entity responsible for your personal information (the "data controller" in international terminology, referred to as the "APP entity" under Australian law) is:

If you have any questions, concerns or requests relating to this Policy or the handling of your personal information, please contact us at the privacy email address above.

3. Personal Information We Collect

We collect only the personal information that is reasonably necessary for the purposes described in this Policy. The categories of personal information we collect through the Website are set out below.

3.1 Contact and Reservation-Request Information

When you submit an enquiry, request a reservation or otherwise contact us through the Website, we may collect:

• Full name
• Email address
• Telephone number
• Postal or residential address (where provided)
• Preferred reservation date and dining time
• Table, dining-time or event preferences
• Number of guests
• Special requests or additional information you choose to provide in free-text fields

3.2 Age Verification Information

Access to casino facilities and certain areas of the property is restricted to persons aged 21 years and over. Where the Website presents an age-gate or age-declaration mechanism, we collect the date of birth or age declaration you submit in order to verify compliance with this requirement before presenting relevant content.

3.3 Device, Technical and Usage Information

When you access the Website, our servers and analytics tools automatically record certain technical information, including:

• IP address
• Browser type and version
• Operating system and device type
• Referring URL and exit page
• Pages viewed, links clicked and features used on the Website
• Date, time and duration of your visit
• Language preferences

This information is collected automatically as part of the operation of the Website and may constitute personal information to the extent it can be linked to an identifiable individual.

3.4 Cookie and Consent Data

We use cookies and similar tracking technologies on the Website. When you interact with our cookie consent mechanism, we record your preferences and the timestamp of your consent or withdrawal. For further detail on the specific cookies we use, please see Section 8 (Cookies and Tracking Technologies) below.

3.5 Special-Category Personal Data

We do not intentionally collect special-category personal data through the Website. If you voluntarily include such information in a free-text field (for example, in a special requests field), we will handle it with additional care and will not use it for any purpose beyond responding to your specific request.

3.6 Information Collected from Third Parties

We may receive personal information about you from third-party reservation or event platforms where you have initiated a reservation or enquiry that is referred to us. In those cases, the third party's own privacy policy governs the collection of your information on their platform, and this Policy governs our subsequent handling of that information.

4. How We Use Your Personal Information

We use your personal information only for the purposes for which it was collected or for directly related purposes. The table below summarises each key purpose and the legal basis under the APPs and, where applicable, the Privacy Act 1988 (Cth), on which we rely.

5. Legal Bases for Processing

Under the Australian Privacy Principles, we are required to collect personal information only by lawful and fair means, and to notify you of the purposes for which it is collected. The primary grounds on which we handle your personal information are:

• Contract: Processing that is necessary to respond to your reservation request or to perform obligations under a reservation agreement with you.
• Legal obligation: Processing required to comply with Australian federal or Queensland state law, including gaming, anti-money-laundering and consumer-protection legislation.
• Legitimate interests: Processing necessary for our legitimate business interests — such as Website security, fraud prevention, business analytics and direct marketing — where those interests are not overridden by your rights and interests.
• Consent: Where we rely on your consent — in particular for non-essential cookies and for certain direct-marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Disclosure of Your Personal Information

We do not sell, rent or trade your personal information. We may disclose personal information to the following categories of recipients where necessary and proportionate to the relevant purpose:

6.1 Service Providers and Data Processors

We engage third-party service providers to assist us in operating the Website and our business. These providers act on our instructions and are not permitted to use your personal information for their own purposes. They include:

• Website hosting and infrastructure providers — to host and deliver the Website
• Reservation and venue management system providers — to process and manage dining bookings and venue enquiries
• Email and communications service providers — to send transactional and marketing communications
• Analytics providers — to help us understand Website usage and performance
• Cybersecurity and fraud-prevention providers — to protect the Website and detect abuse
• Professional advisers — including lawyers and accountants, subject to professional confidentiality obligations

6.2 Regulatory and Law-Enforcement Authorities

We may disclose personal information to government agencies, law-enforcement bodies or regulators where we are required or authorised to do so by law, court order or valid legal process.

6.3 Business Transfers

If is involved in a merger, acquisition, asset sale or corporate restructure, personal information held by us may be transferred to a successor entity, subject to that entity agreeing to handle it in a manner consistent with this Policy.

6.4 With Your Consent

We may disclose personal information to other third parties where you have given us your express consent to do so.

7. Overseas Disclosure

Some of our third-party service providers are located outside Australia, including in countries within the Asia-Pacific, Europe and North America. Where we disclose personal information to overseas recipients, we take reasonable steps — including contractual protections — to ensure that the recipient does not handle that information in a way that would be inconsistent with the Australian Privacy Principles.

By submitting your personal information to us, you acknowledge that we may transfer it to overseas service providers as described in this section, in accordance with APP 8.

8. Cookies and Tracking Technologies

Cookies are small text files stored on your device when you visit a website. We use cookies and similar technologies to operate the Website, remember your preferences, and collect analytics data. The main categories of cookies we use are:

You can manage or withdraw your cookie consent at any time by using the cookie preference tool available on the Website, or by adjusting the settings in your browser. Please note that disabling certain cookies may affect the functionality of the Website.

9. Retention of Personal Information

We retain personal information for no longer than is necessary for the purposes for which it was collected, or as required by applicable law. The key retention periods we apply are set out below.

When personal information is no longer required, we take reasonable steps to destroy it securely or to de-identify it in accordance with APP 11.2.

10. Security of Personal Information

We take the security of your personal information seriously and implement reasonable organisational, technical and physical safeguards designed to protect it from misuse, interference, loss, unauthorised access, modification or disclosure.

These measures include, but are not limited to:

• Transmission of information via encrypted connections (TLS/HTTPS)
• Access controls and authentication requirements for staff who handle personal information
• Regular review of our information security practices
• Contractual requirements imposed on third-party service providers regarding information security
• Secure storage and disposal procedures for data held in electronic and physical formats

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to use commercially reasonable means to protect your personal information, we cannot guarantee its absolute security. In the event of an eligible data breach, we will comply with our notification obligations under the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act 1988 (Cth).

11. Your Rights and Choices

Under the Australian Privacy Principles and other applicable legislation, you have a number of rights in relation to your personal information. We set these out below together with guidance on how to exercise them.

11.1 Right of Access

You have the right to request access to the personal information we hold about you (APP 12). We will respond to a valid access request within a reasonable time and provide the information in the manner requested where it is reasonable and practicable to do so.

11.2 Right to Correction

If you believe that personal information we hold about you is inaccurate, out of date, incomplete, irrelevant or misleading, you may request that we correct it (APP 13). We will take reasonable steps to correct the information within 30 days of receiving your request, or notify you if we require more time.

11.3 Right to Withdraw Consent

Where we are processing your personal information on the basis of your consent — for example, for marketing communications or non-essential cookies — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing we carried out before you withdrew it.

To unsubscribe from marketing emails, click the "unsubscribe" link in any marketing communication we send you, or contact us at info@valmessiaplate.com.

11.4 Right to Complain

If you believe we have not handled your personal information in accordance with our obligations under the Privacy Act 1988 (Cth) or this Policy, you have the right to make a complaint. Please see Section 13 (Complaints) for further details.

11.5 Exercising Your Rights

To exercise any of the rights listed above, please submit your request in writing to:

We may need to verify your identity before processing your request. We will not charge a fee for making an access or correction request unless the request is manifestly excessive or unfounded, in which case we will notify you before proceeding.

12. Responsible Gaming and Age Restrictions

Access to casino-related content on the Website and gaming facilities at the property is restricted to persons aged 21 years and over. We do not knowingly collect personal information from individuals below this age in the context of casino-related content or facilities.

Queensland's gaming regulator publishes publicly available guidance, self-exclusion tools and information about responsible gaming practices. If you are concerned about gambling behaviour — your own or someone else's — we encourage you to consult the resources made available by the relevant Queensland regulatory body and support organisations operating in Australia.

Where a self-exclusion or exclusion record is provided to us or created at your request, we handle that information in strict confidence and use it solely for the purpose of administering the exclusion in accordance with applicable regulatory requirements.

13. Complaints

If you have a complaint about the way in which we have handled your personal information, we ask that you first contact us directly so that we have an opportunity to resolve the matter:

We will acknowledge your complaint within 5 business days and aim to provide a substantive response within 30 days. If additional time is required, we will notify you and keep you informed of progress.

If you are not satisfied with our response, or if we fail to respond within a reasonable time, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• GPO Box 5218, Sydney NSW 2001, Australia
• GPO Box 2999, Canberra ACT 2601, Australia

The OAIC is the independent statutory authority responsible for privacy regulation and oversight under the Privacy Act 1988 (Cth). It provides publicly available information about your privacy rights and handles complaints about APP entities that cannot be resolved directly with the entity concerned.

14. Third-Party Links

The Website may contain links to third-party websites, services or platforms. This Privacy Policy applies only to personal information collected through our Website. We are not responsible for the privacy practices of third-party websites, and we encourage you to review the privacy policies of any external sites you visit.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Website, or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this Policy periodically. Your continued use of the Website after any changes are published constitutes your acknowledgement of the updated Policy.

16. Contact Us

If you have any questions about this Privacy Policy or the way we handle your personal information, please contact us at: