This Privacy Policy applies to personal information collected by a member of Navarra Venues and its affiliates (“Navarra Venues”, “we”, “us” or “our”). Navarra Venues is an applicable organisation under the Privacy Act 1988, which governs the way private sector organisations collect, use, store, secure and disclose personal information.

This Privacy Policy explains:

  • how and when Navarra Venues collects personal information;
  • how Navarra Venues uses and discloses personal information;
  • how Navarra Venues keeps personal information secure, accurate and up to date;
  • how an individual can access and correct their personal information; and
  • how Navarra Venues will facilitate or resolve a privacy complaint.


We recommend that you read and understand this Privacy Policy and keep it for future reference. If you require any clarification, you can contact us using the details at the end of this document.


1. Personal Information Navarra Venues Collects

What is Personal Information?

Personal information is defined under the Privacy Act 1988 as information or an opinion, whether true or not, and whether recorded in a material form or not, about an individual whose identity is reasonably identifiable from the information or opinion.

Examples of personal information include your name, residential address, email address, phone number, payment details, photographs, video footage, opinions and preferences where they can identify you.

 

2. Sensitive Information Navarra Venues Collects

What is Sensitive Information?

Sensitive information is a subset of personal information. It includes information or an opinion about an individual’s racial or ethnic origin, political opinions, membership of a political organisation, religious beliefs or affiliations, philosophical beliefs, membership of a professional or trade association, membership of a trade union, sexual orientation or practices, criminal record, health information, genetic information, biometric information used for automated biometric verification or identification, and biometric templates.


Collection of Sensitive Information

In general, we attempt to limit the sensitive information we collect. However, depending on the services you request from us, it may be necessary for us to collect certain sensitive information in order to provide our products or services to you.

The type of sensitive information we may collect will depend on the services provided to you by Navarra Venues and will be limited to the purpose for which it is collected.

We will not collect sensitive information from you without your consent, unless the collection is otherwise permitted or required by law.

We do not use sensitive information to send you Direct Marketing Communications without your consent.


Consent to Collection of Certain Types of Personal and Sensitive Information

We may collect certain types of personal and sensitive information where relevant to our dealings with you. Where consent is required for the collection of sensitive information, we will obtain your consent at or around the time we collect that information.

The types of personal or sensitive information we may collect, if applicable, may relate to your:

  • age;
  • marital status;
  • gender;
  • special food or dietary requirements due to medical, cultural or religious reasons;
  • racial origin or religious beliefs, to the extent these are ascertainable; and
  • taste, trend and styling requirements.


We will only collect this information where it is necessary for, or incidental to, the purposes of collection set out in this Privacy Policy.

 

3. Collection of Personal Information Required by Navarra Venues

We will only collect personal information that is necessary for us to provide our products and services to you, manage our business, comply with our legal obligations and carry out the purposes set out in this Privacy Policy.

The type of information we may collect includes, but is not limited to:

  • your contact information, such as your full name, email address, postal address, delivery address and phone number;
  • your date of birth;
  • proof of your identity, including but not limited to a driver’s licence, passport or birth certificate;
  • any personal or sensitive information described in section 2, where applicable;
  • emergency contact details, if applicable;
  • details required as part of a Navarra Venues contract;
  • details relating to your employment or previous employment, if applicable;
  • whether you participated in any activity or event organised by Navarra Venues;
  • photographs or video footage taken at our premises or at a Navarra Venues event off premises, which may include you;
  • your opinions, statements and endorsements collected personally or via surveys and questionnaires, including your views on the products and services offered by Navarra Venues;
  • payment or billing information, including bank account details, direct debit details, credit card details, billing address, repayment information and invoice details, where applicable;
  • information submitted through our website forms, including enquiry details, event requirements, venue preferences and any other information you choose to provide;
  • website usage information, including pages viewed, clicks, scrolling behaviour, device and browser information, referral sources and advertising campaign information; and
  • information relating to the source of your enquiry, including the webpage on which a form was submitted, referral information, campaign tracking parameters and other information that helps us understand how visitors find and use our website.


Where reasonable and practicable, we will collect your personal information directly from you. If we collect details about you from someone else, we will, whenever reasonably possible, make you aware that we have done this and explain the reason for it.

When you engage in certain activities, such as entering a contest or promotion, filling out a survey, submitting a form or sending us feedback, we may ask you to provide certain information. Some information may be mandatory and some may be optional.

If you do not provide mandatory information or any other information we require in order to provide our services to you, we may be unable to provide our services to you, or may be unable to provide them effectively.

 

4. Website Forms, QR Codes, Analytics, Cookies and Advertising Technologies

When you submit an enquiry, booking request, contact form or other online form through our website, we may collect the information you provide, including your name, contact details, event requirements and any other information you choose to submit.

We may also collect information relating to the source of your enquiry, including the webpage on which the form was submitted, referral information, campaign tracking parameters and other information that assists us in understanding how visitors find and use our website.

Some QR codes used by Navarra Venues may direct you to pages on our website. Scanning a QR code does not, by itself, provide us with your contact details. We will only collect your personal information if you choose to submit it, such as by completing a form on our website.

We use cookies and similar technologies to improve website functionality, analyse website performance, understand user behaviour, support our marketing activities and measure the effectiveness of our advertising campaigns.

These technologies may collect information including:

  • IP address and approximate geographic location;
  • device, browser and operating system information;
  • pages viewed and actions taken on our website;
  • clicks, scrolling behaviour and interactions with website content;
  • referral sources and websites visited before accessing our website;
  • advertising campaign information, including UTM parameters and click identifiers; and
  • interactions with website forms and enquiries.


We use services including Google Analytics, Microsoft Clarity, Meta Pixel, Google Ads and related technologies for analytics, advertising measurement, audience creation, remarketing, campaign optimisation and website improvement.

Microsoft Clarity may collect information about user interactions with our website, including clicks, scrolling behaviour, navigation patterns, heatmaps and session recordings. Sensitive form fields and personal information are masked where applicable.

We may use advertising technologies provided by Google, Meta and other advertising platforms to deliver relevant advertisements, measure advertising performance and show advertisements to users who have previously visited our website.

Information collected through these technologies may be linked to an enquiry where a visitor subsequently submits a form through our website.

You may manage your cookie preferences through our cookie consent banner or through your browser settings. Disabling certain cookies may affect the functionality of our website.

 

5. Use and Disclosure of Your Personal Information

We will only use or disclose your personal information for the primary purposes for which it was collected, for related purposes you would reasonably expect, where you have consented, or where permitted or required by law.

We may use or disclose your personal information for purposes including:

  • verifying your identity, including verification of your date of birth, if applicable;
  • facilitating contract requirements;
  • providing our products and services to you;
  • administering and managing our products and services, including charging, billing, payment authorisation, credit card verification, financial checks, fraud prevention and debt collection;
  • tailoring menus, events, functions, packages or services to your needs;
  • responding to enquiries, booking requests, customer service requests and complaints;
  • managing, administering and improving Navarra Venues;
  • communicating between related venues, entities and departments;
  • managing governance, administration, business systems and infrastructure;
  • facilitating medical assistance in the event of a medical emergency, or providing medical treatment as requested by you;
  • coordinating, managing and maintaining good order and security of Navarra Venues and our premises;
  • protecting the rights and safety of other parties on our premises;
  • investigating and reporting accidents or incidents that may have occurred on our premises;
  • improving our products and services, including contacting you about those improvements or asking you to participate in surveys;
  • marketing and promotional activities by us and our related bodies, including by direct mail, telemarketing, email, SMS and MMS messages;
  • offering you updates, content, products or services that may be of interest to you;
  • analysing marketing performance, including using referring websites, landing pages, campaign identifiers and tracking parameters;
  • understanding how customers engage with our website, advertising and enquiries;
  • assessing and managing job applications, recruitment, candidate suitability, employment eligibility and, where applicable, onboarding and employment administration;
  • complying with applicable laws; and
  • any other matters reasonably necessary for us to provide our products and services to you or operate our business.


We may also use or disclose your personal information without seeking additional consent:

  • where the use or disclosure is related to the primary purpose of collection and you would reasonably expect us to use or disclose the information for that purpose;
  • if we reasonably believe the use or disclosure is necessary to lessen or prevent a serious threat to an individual’s life, health or safety, or to public health or safety;
  • if we have reason to suspect unlawful activity has been, or is being, engaged in;
  • where required or authorised by law; or
  • where formally requested by a statutory or regulatory authority.


If we propose to use or disclose your personal information for a purpose other than those described in this Privacy Policy, we will seek your consent where required.

 

6. Organisations to Which We May Disclose Your Personal Information

We may disclose your personal information to other organisations where necessary for the goods or services we provide to you, for a purpose permitted by this Privacy Policy, or where required or authorised by law.

Examples of organisations and parties to whom your personal information may be disclosed include:

  • other member venues and reciprocal venues;
  • related entities and subsidiaries of Navarra Venues;
  • third parties, including trade suppliers, event suppliers and Navarra Venues sponsors;
  • contractors and agents who assist us in providing products and services to you;
  • professional advisers, including accountants, solicitors, insurers and auditors;
  • website hosting providers and technology service providers;
  • customer relationship management, marketing automation and email communication providers;
  • analytics and advertising service providers, including Google, Microsoft and Meta, where applicable;
  • payment processors and financial service providers;
  • regulatory authorities, law enforcement bodies or government agencies where required or authorised by law; and
  • offshore service providers, if applicable.


We take reasonable steps to ensure that these organisations and parties are aware of the need to handle your personal information in accordance with applicable privacy obligations.

 

7. Photographs and Closed Circuit Television

Closed circuit television cameras are installed throughout our venues and surrounding areas, including entry and exit points. CCTV is used to help maintain the safety and security of guests, staff, contractors and visitors, and may also be used for incident management, investigation, venue management and compliance purposes.

This may include monitoring or assessing patron numbers, venue capacity and the number or movement of people entering or leaving a venue to assist with compliance with applicable development consent conditions, council requirements, licensing conditions or other regulatory obligations.

Where CCTV footage is analysed for people-counting or similar purposes, the analysis is intended to determine aggregate numbers or movement patterns rather than to identify individuals.

CCTV footage is retained for as long as reasonably necessary for security, incident management, compliance, legal and regulatory purposes, and in accordance with any applicable licensing or legal requirements. Footage relating to an incident, investigation, compliance matter, legal matter or regulatory request may be retained for longer where necessary.

We may provide CCTV footage or information derived from CCTV footage to relevant authorities, including councils, police, Liquor & Gaming NSW or other regulatory bodies, where required or authorised by law or where reasonably necessary in connection with an incident, investigation, compliance requirement or legal matter.

We may take photographs or video footage at our premises or at Navarra Venues events held off premises for marketing, promotional and advertising purposes. Where practicable, we may provide notice that photography or filming is taking place. If you do not wish to be photographed or recorded, please notify a member of our team.

 

8. Direct Marketing

Where permitted by law, we may use your personal information to send you information about our products, services, events, offers, updates or other direct marketing communications that may be of interest to you.

We will only send commercial electronic messages where we have your consent, where consent may lawfully be inferred, or where otherwise permitted by law. Commercial electronic messages will include a functional means of unsubscribing where required by law.

If at any time you do not wish to receive further Direct Marketing Communications from us, you may unsubscribe using the unsubscribe facility included in the communication, or contact us using the details at the end of this document.

We do not use personal information provided in a job application for customer marketing purposes unless you have separately consented to that use or it is otherwise permitted by law.

We will not use sensitive information to send you Direct Marketing Communications without your consent.

  

9. Cross-Border Disclosure

We use third-party service providers and technology platforms that may store, process, access or disclose personal information outside Australia. These may include website hosting providers, cloud-based systems, customer relationship management systems, analytics platforms, advertising platforms, email and communication services, plugins and other technology providers.

Overseas recipients may be located in the United States and other countries, depending on the service providers we use from time to time. Where practicable, we will take reasonable steps to identify the countries in which overseas recipients are likely to be located.

Where we disclose personal information to an overseas recipient, we will take reasonable steps as required by the Privacy Act 1988 to ensure that the information is handled appropriately, unless an exception under the Privacy Act applies. 

 

10. Data Quality and Security

We take reasonable steps to ensure that the personal information we collect is accurate, up to date and complete, and that personal information we use or disclose is accurate, up to date, complete and relevant for the purpose for which it is being used or disclosed.
 
We take reasonable technical and organisational measures to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure.
 
Where personal information is no longer required for any purpose for which it may lawfully be used or disclosed, we will take reasonable steps to destroy or de-identify it, unless we are required or authorised by law to retain it.
 
The accuracy of the personal information we hold also depends on the information provided to us. We encourage you to notify us if you become aware that personal information we hold about you is inaccurate, out of date, incomplete, irrelevant or misleading, or if your personal details change.

 

11. Access to and Correction of Your Personal Information

You may request access to the personal information we hold about you and may also request that we correct personal information that is inaccurate, out of date, incomplete, irrelevant or misleading.

To protect your privacy and the privacy of others, we may ask you to provide information reasonably necessary to verify your identity or authority to make the request.

We will respond to requests for access or correction within a reasonable period and will take reasonable steps to provide access or make corrections where required by the Privacy Act 1988.

In some circumstances, we may be permitted or required by law to refuse access to certain personal information or to decline a correction request. Where required, we will provide you with written reasons for the refusal and information about available complaint mechanisms.

If you would like to request access to or correction of your personal information, please contact us using the details at the end of this Privacy Policy. 

 

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, information-handling practices, technology, service providers, legal requirements or other relevant circumstances.

The current version of this Privacy Policy will be published on our website. Where appropriate, we may provide additional notice of material changes.

We encourage you to review this Privacy Policy periodically to remain informed about how we handle personal information.

Last updated: September 2026 

 

13. Resolving Privacy Complaints

If you have any concerns or complaints about the way we have collected, used, disclosed, stored or otherwise handled your personal information, please contact us using the details at the end of this Privacy Policy.

We will take reasonable steps to investigate and respond to your complaint within a reasonable period, generally within 30 days.

In dealing with a privacy complaint, we may:

  • ask you to provide additional information so that we can properly understand and investigate the matter;
  • liaise with you to identify the nature and circumstances of the complaint;
  • keep you informed about the progress of the complaint where appropriate;
  • provide you with the outcome of our investigation; and
  • keep appropriate records of the complaint and any action taken in response.


If you are not satisfied with our response, or we have not responded within a reasonable period, you may be entitled to lodge a complaint with the Office of the Australian Information Commissioner (OAIC). Further information about making a privacy complaint is available at www.oaic.gov.au.

 

14. Contact Details

If you have any questions, concerns or complaints about this Privacy Policy or the way we handle your personal information, or if you wish to request access to or correction of your personal information, please contact:

Privacy Officer
Navarra Venues

Email: [email protected]

Phone: 1300 235 568

Post: Navarra Enterprises Pty Ltd, Level 1, 34 James Craig Road, Rozelle NSW 2039, Australia