Privacy Policy — how the estate handles your data
What OZ Elements Hotel collects, why it collects it, and the exact channels for exercising your rights — written in plain language because policies should be read, not endured.
Effective 1 August 2026 · reviewed annually
GDPR & your data rights
Guests in the EU/UK and Australian residents hold the same rights at this desk: access, correction, portability and erasure of personal data. Requests are answered within 30 days — write to [email protected] with "Privacy request" in the subject. Full detail lives in our Legal & GDPR notice.
What we collect
Booking details (name, contact, dates, party size), payment tokens handled by our PCI-compliant processor, stay preferences you volunteer — dietary needs, pillow presets, arrival notes — and standard technical logs from site analytics.
We never sell personal data, never share it with advertisers, and never retain card numbers on our own systems — payment data lives with the processor, not the hotel.
Why we collect it
To run your stay: reservations, transfers, dining, spa and casino accounts. To honour preferences across visits. To meet legal obligations under the Tasmanian Gaming Control Act and Australian taxation law.
Marketing emails go only to those who opt in — the dispatch list is a separate consent from booking, and one tap unsubscribes.
Who sees it
Staff who need it to serve you: reservations, concierge, housekeeping, casino hosts. Third parties only where essential — the payment processor, the booking engine, and regulators where the law requires.
Casino floor play data is handled under gaming legislation — it's retained for statutory periods and disclosed only to the regulator where required.
How long we keep it
Booking records seven years (tax law), gaming records per the statutory schedule, marketing consents until you withdraw them, and enquiry correspondence for twelve months.
When retention ends, records are destroyed or anonymised — the vault keeps bottles, not paperwork.
Your rights
Access, correction, portability and erasure — write to [email protected] with 'Privacy request' in the subject and the desk responds within 30 days.
Statutory gaming and tax records can't be erased early — everything else can, and we'll tell you plainly which category your data sits in.
Security & breaches
Encrypted transmission, access-controlled storage, staff confidentiality training, and a breach-response protocol that notifies affected guests and the regulator within statutory windows.
Suspect a problem? Contact the desk immediately — the duty manager owns privacy incidents personally.
Talk to a human about it
Policy questions go to the same concierge desk as everything else — or write directly to [email protected].
- Desk line+61 3 6221 1888
- Email[email protected]
- Registered address410 Sandy Bay Rd, TAS 7005
On Privacy
Questions about your data?
Write to the desk — privacy questions get a human answer within 30 days, usually much faster.