Privacy Policy
(“Merovian Stay”, “we”, “us” or “our”) is committed to protecting the privacy of every person who visits merovianstay.com (the “Website”). This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have in relation to it.
Please read this policy carefully before using the Website. By continuing to browse or submit information through the Website, you acknowledge that you have read and understood this Privacy Policy.
Last updated: 1 July 2025
1. Data Controller
The data controller responsible for personal data collected through this Website is:
| Legal entity | |
|---|---|
| ACN | 647 283 915 |
| ABN | 52 647 283 915 |
| Registered address | |
| Privacy enquiries | info@merovianstay.com |
| Website | merovianstay.com |
All enquiries, requests and complaints relating to your personal data should be directed to the contact details above.
2. Scope of This Policy
This Privacy Policy applies solely to personal data collected through the Website merovianstay.com. It covers information submitted to us via online enquiry and reservation request forms, information gathered automatically when you browse the Website, and communications you initiate with us by electronic means through the Website.
This policy does not govern data collected by third-party websites that may be linked to or from the Website. We encourage you to review the privacy notices of any such third-party sites independently.
3. Personal Data We Collect
We collect personal data in two principal ways: data you provide to us directly, and data collected automatically when you use the Website.
3.1 Data You Provide to Us
When you submit an enquiry, request a room reservation or otherwise contact us through the Website, we may collect the following categories of information:
- Identity data – first name and last name.
- Contact data – email address, postal address and telephone number.
- Reservation request data – preferred arrival and departure dates, room-type preference, number of guests and any special requests you choose to include in a free-text field.
- Communication data – the content of any message or correspondence you send to us through a Website form or to our privacy email address.
- Age verification data – a declaration of age where required in connection with casino-related enquiries, given that access to casino facilities at Merovian Stay is restricted to guests aged 18 years and over.
You are not required to provide all of the above information, but some fields are necessary for us to respond to your enquiry or process your reservation request. Where a field is mandatory, this will be indicated on the relevant form.
Please do not submit special-category personal data to us through Website forms unless we have expressly requested it. If you do submit such data voluntarily, we will treat it with a higher level of protection as required by applicable privacy law.
3.2 Data Collected Automatically
When you visit the Website, certain technical data is collected automatically by our web server and, where applicable, by cookies or similar technologies. This may include:
- Device and browser data – IP address, browser type and version, operating system, device type and screen resolution.
- Usage data – pages visited, time and date of your visit, time spent on each page, referring URL and links clicked.
- Cookie and consent data – records of cookie preferences you set through the Website’s consent management tool, including the date and time of consent, the version of the policy in effect at that time and the categories of cookies accepted or declined.
Where automatically collected data can be linked to an identifiable individual (for example through an IP address), it is treated as personal data under this policy.
5. Purposes and Legal Bases for Processing
We process personal data only where we have a lawful basis to do so under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) contained in Schedule 1 of that Act. The table below sets out each processing purpose, the categories of data involved and the relevant legal basis.
| Purpose | Categories of data | Legal basis |
|---|---|---|
| Responding to your enquiry or reservation request submitted through the Website | Identity, contact, reservation request and communication data | Necessary to take steps at your request prior to entering into a contract (APP 3) |
| Managing your reservation request and coordinating with our reservations team | Identity, contact and reservation request data | Performance of a contract or pre-contractual steps (APP 3) |
| Verifying that guests accessing casino facilities meet the minimum age requirement of 18 years | Age verification data, identity data | Compliance with a legal obligation and our legitimate interest in operating in accordance with applicable regulations |
| Operating, maintaining and improving the Website | Device and browser data, usage data | Our legitimate interests in ensuring the Website functions correctly and in improving visitor experience |
| Analytics to understand how visitors use the Website (where consent is given) | Usage data, cookie and consent data | Consent (APP 3 read with your cookie preference) |
| Sending promotional communications about Merovian Stay (where you have opted in) | Identity, contact data | Consent; you may withdraw at any time using the unsubscribe link in any communication |
| Complying with legal and regulatory obligations, responding to lawful requests from public authorities | All categories as required | Compliance with a legal obligation |
| Establishing, exercising or defending legal claims | All categories as required | Our legitimate interests in protecting the rights of |
| Recording and managing cookie and marketing consent preferences | Cookie and consent data | Compliance with applicable privacy obligations and our legitimate interest in maintaining accurate consent records |
6. Recipients of Personal Data
We do not sell your personal data. We may share your personal data with the following categories of recipients, strictly for the purposes described in this policy:
6.1 Internal Staff
Personal data is accessible to employees and contractors who need it to perform their roles, including reservations, guest services, IT and management staff. Access is granted on a need-to-know basis and is subject to confidentiality obligations.
6.2 Service Providers and Data Processors
We engage third-party service providers to support the operation of the Website and our business. These providers act as data processors on our behalf and are contractually required to process personal data only on our instructions and to implement appropriate security measures. Categories of providers include:
- Web hosting and infrastructure providers;
- Reservation and property management system providers;
- Email delivery and communications platform providers;
- Website analytics providers (where you have consented to analytics cookies);
- IT support and cybersecurity service providers.
6.3 Regulatory and Law-Enforcement Authorities
We may disclose personal data to government bodies, regulators, law-enforcement agencies or courts where we are legally required to do so or where such disclosure is necessary to protect the rights, property or safety of , our guests or the public.
6.4 Professional Advisers
We may share personal data with our legal, financial or other professional advisers where necessary in connection with advice sought by us, subject to professional confidentiality obligations.
7. International Transfers of Personal Data
is based in Australia and primarily processes personal data within Australia. Some of our third-party service providers may be located in, or may operate infrastructure in, countries outside Australia. Where personal data is transferred to an overseas recipient, we take steps consistent with Australian Privacy Principle 8 to ensure that the recipient handles the data in a manner that is at least equivalent to the protections afforded by the Australian Privacy Principles, including through contractual arrangements with those recipients.
By submitting personal data through the Website, you acknowledge that your information may be transferred to and processed in countries other than Australia as described above.
8. Retention of Personal Data
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:
| Category of data | Retention period |
|---|---|
| Enquiry and reservation request data (where a reservation is not confirmed) | 12 months from the date of last contact, unless a longer period is required by law |
| Confirmed reservation records | 7 years from the date of the stay, in accordance with applicable Australian financial record-keeping obligations |
| Marketing communication preferences and consent records | For the duration of the consent and for 3 years following withdrawal or the cessation of the relationship |
| Cookie and consent records | 3 years from the date of consent or last update |
| Website server logs and technical data | Up to 12 months from the date of collection, unless required for security or legal purposes |
| Data held in connection with a legal claim | Until the conclusion of the relevant legal proceedings and any applicable appeal or limitation period |
Once personal data is no longer required, we will securely delete or de-identify it in accordance with our internal data governance procedures.
9. Security of Personal Data
implements appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss or destruction. These measures include:
- Encryption of data in transit using industry-standard secure protocols;
- Access controls limiting data access to authorised personnel only;
- Regular security assessments of our Website and IT infrastructure;
- Staff training on data protection and information security obligations;
- Procedures for detecting, reporting and managing suspected data breaches.
While we take every reasonable precaution, no transmission of data over the internet or electronic storage system can be guaranteed to be entirely secure. If you have reason to believe that your personal data has been compromised, please contact us immediately at info@merovianstay.com.
In the event of a data breach that is likely to result in serious harm to affected individuals, we will notify the Office of the Australian Information Commissioner (OAIC) and affected individuals in accordance with the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth).
10. Your Privacy Rights
Under the Australian Privacy Principles and applicable privacy law, you have the following rights in relation to personal data we hold about you:
10.1 Right of Access
You have the right to request access to the personal data we hold about you. We will respond to your request within a reasonable period and in the manner you request, where it is reasonable and practicable to do so.
10.2 Right to Correction
If you believe that personal data we hold about you is inaccurate, out of date, incomplete, irrelevant or misleading, you may request that we correct it. We will take reasonable steps to correct the data or, if we disagree, to note your request alongside the record.
10.3 Right to Withdraw Consent
Where we process your personal data on the basis of your consent (for example, for marketing communications or non-essential cookies), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. To withdraw consent for marketing, use the unsubscribe link in any communication or contact us at info@merovianstay.com. To withdraw cookie consent, update your preferences via the cookie settings control.
10.4 Right to Complain
You have the right to lodge a complaint with us or with the relevant supervisory authority if you believe we have mishandled your personal data. Details of how to raise a complaint are set out in Section 12 below.
10.5 How to Exercise Your Rights
To exercise any of the rights described above, please submit your request in writing to info@merovianstay.com or by post to:
Privacy OfficerWe may need to verify your identity before processing your request. We will respond within 30 days of receiving a valid request. If we are unable to comply with your request, we will explain why in writing.
11. Responsible Gaming and Regulatory Information
Merovian Stay operates casino facilities on its premises. Access to casino areas is strictly limited to persons aged 18 years and over. Personal data collected for age verification purposes is processed in accordance with this policy.
The Western Australian gaming regulatory environment is overseen by the Department of Local Government, Sport and Cultural Industries and the Gaming and Wagering Commission of Western Australia. These bodies publish public resources on responsible gaming, including self-exclusion arrangements and guidance for individuals seeking support. We encourage any guest with concerns about gaming to consult the publicly available resources published by those regulators.
12. Complaints
If you have a concern or complaint about how we have handled your personal data, we ask that you contact us in the first instance so that we have an opportunity to address the matter:
- Email: info@merovianstay.com
- Post: Privacy Officer, ,
We will acknowledge your complaint within 5 business days and aim to provide a substantive response within 30 days. If you are not satisfied with our response, or if you prefer not to contact us directly, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
- Website: www.oaic.gov.au
- Postal address: GPO Box 5218, Sydney NSW 2001, Australia
The OAIC is Australia’s independent national regulator for privacy and freedom of information. It provides guidance on privacy rights and a complaint resolution service for individuals who believe their privacy has been interfered with by an Australian entity covered by the Privacy Act 1988 (Cth).
13. Children
The Website is not directed at persons under the age of 18. We do not knowingly collect personal data from persons under 18. If you believe that a person under 18 has submitted personal data to us through the Website, please contact us at info@merovianstay.com and we will take prompt steps to delete that information.
14. Links to Third-Party Websites
The Website may contain links to external websites operated by third parties. These links are provided for your convenience only. has no control over the content or privacy practices of those websites and is not responsible for the way in which they handle personal data. We encourage you to read the privacy notices of any website you visit.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations or the services provided through the Website. When we make material changes, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically. Continued use of the Website following any update constitutes your acknowledgement of the revised policy.
16. Governing Law
This Privacy Policy is governed by the laws of the State of Western Australia and the Commonwealth of Australia. Any disputes arising in connection with this policy are subject to the jurisdiction of the courts of Western Australia, without prejudice to your rights to refer a complaint to the OAIC as described in Section 12.
17. Contact Us
If you have any questions, concerns or requests relating to this Privacy Policy or to the personal data we hold about you, please contact our Privacy Officer:
Privacy Officer
info@merovianstay.com