Privacy Policy

1. Introduction

Mirage Quay Resort ("we", "us", "our") operates the website oceanviewlake.com. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website or use our services.

We are committed to protecting your privacy. We comply with the Australian Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and the General Data Protection Regulation (GDPR) where it applies.

2. Data We Collect

We may collect the following types of personal data:

2.1 Data You Provide

• Name, email address, and phone number (when you fill out our contact form)
• Booking details and preferences
• Messages and feedback you send to us
• Payment details (processed by secure third-party providers)

2.2 Data Collected Automatically

• IP address and approximate location
• Browser type and version
• Device type and operating system
• Pages visited and time spent on our site
• Referring website or source
• Cookie data (see Section 5)

2.3 Data from Third Parties

• Booking platforms and travel agents
• Social media platforms (if you interact with us there)
• Analytics providers

3. How We Use Your Data

We use your personal data for the following purposes:

• To respond to your enquiries and messages
• To process bookings and reservations
• To send you updates and offers (only with your consent)
• To improve our website and services
• To comply with legal obligations
• To protect the security of our website and guests
• To analyse website traffic and usage patterns

4. Legal Basis for Processing (GDPR)

Where GDPR applies, we process your data based on one or more of the following:

• Consent: You have given clear consent for us to process your data for a specific purpose.
• Contract: Processing is needed to fulfil a booking or service agreement.
• Legal obligation: We need to process your data to comply with the law.
• Legitimate interests: Processing is needed for our legitimate business interests, provided these do not override your rights.

5. Cookies

Our website uses cookies. Cookies are small text files stored on your device when you visit our site.

5.1 Types of Cookies We Use

• Essential cookies: Needed for the website to work properly. These cannot be turned off.
• Analytics cookies: Help us understand how visitors use our site. Data is anonymised.
• Marketing cookies: Used to show you relevant ads and measure campaign performance. Only active with your consent.
• Preference cookies: Remember your choices and settings.

5.2 Managing Cookies

When you first visit our site, a cookie banner will ask for your consent. You can change your cookie settings at any time by clearing your browser cookies and revisiting the site. You can also manage cookies through your browser settings.

6. Analytics

We may use analytics tools such as Google Analytics to understand how visitors use our website. These tools collect data about page views, session duration, and user behaviour. Data is processed in a way that does not identify individual users.

You can opt out of analytics tracking by declining non-essential cookies.

7. Data Sharing

We do not sell your personal data. We may share your data with:

• Service providers who help us run our website and business (e.g., hosting, email, payment processing)
• Legal authorities when required by law
• Professional advisors (lawyers, accountants)

All third-party providers are bound by data protection agreements.

8. Data Retention

We keep your personal data only as long as needed for the purposes described in this policy. Typical retention periods are:

• Contact form data: Up to 24 months after your last interaction
• Booking records: Up to 7 years (for legal and tax purposes)
• Analytics data: Up to 26 months
• Marketing consent records: Until you withdraw consent

After these periods, data is securely deleted or anonymised.

9. Your Rights

Under Australian privacy law and GDPR (where applicable), you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Ask us to correct inaccurate or incomplete data.
• Deletion: Ask us to delete your personal data.
• Restriction: Ask us to limit how we use your data.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to our processing of your data.
• Withdraw consent: Withdraw your consent at any time.

To exercise any of these rights, contact us at support@oceanviewlake.com.

We will respond within 30 days. For more details on GDPR rights, see our GDPR Policy.

10. Data Security

We use reasonable measures to protect your data, including:

• SSL/TLS encryption on all pages
• Secure servers and firewalls
• Access controls and staff training
• Regular security reviews

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we take every reasonable step to protect your data.

11. International Transfers

Some of our service providers may be located outside Australia. When data is transferred overseas, we ensure it is protected by appropriate safeguards, such as standard contractual clauses or adequacy decisions.

12. Children's Privacy

Our website and services are not directed at children under 18. We do not knowingly collect data from minors. If we become aware that we have collected data from a child, we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. We encourage you to review this page regularly.

14. Complaints

If you are unhappy with how we handle your data, you can contact us first at support@oceanviewlake.com. If you are not satisfied with our response, you can lodge a complaint with:

• The Office of the Australian Information Commissioner (OAIC) at oaic.gov.au
• Your local data protection authority (for GDPR-related complaints)

15. Contact Us