Privacy Policy
How Ironbark Lodge Sydney Pty Ltd collects, uses and protects your personal information across our hotel, casino and digital services.
Ironbark Lodge Sydney Pty Ltd (ABN 63 481 907 254) operates the resort, casino and this website at ironbarklodge.com. This policy explains what personal information we collect, why we collect it, how we protect it and the rights you hold over it — under the Privacy Act 1988 (Cth), the Australian Privacy Principles and, where you are in the EU or UK, the GDPR.
1. Information We Collect
We collect information you give us directly — reservation details, contact information, identification required for casino entry under NSW law, dietary and accessibility preferences, payment details processed by PCI-compliant providers — and information generated by your stay: folio records, service preferences and loyalty activity. On this website we collect enquiry-form submissions and standard technical data such as IP address and browser type.
2. How We Use It
Your information is used to operate your reservation and stay, to meet our legal obligations (including NSW gaming and liquor licensing requirements), to personalise service where you have asked for it, to process payments, and — with your consent — to send offers and news. We never sell personal information to third parties.
3. Legal Bases for Processing
Under the GDPR and equivalent regimes we process data on the bases of contract performance (your reservation), legal obligation (gaming and identification requirements), legitimate interest (safety, security and service improvement) and consent (marketing communications, which you may withdraw at any time).
4. Sharing & Third Parties
We share data only where needed to deliver your stay: payment processors, transfer operators, government regulators where the law requires, and vetted service providers bound by confidentiality. Where data leaves Australia, we require contractual safeguards equivalent to the Australian Privacy Principles.
5. Casino & Identification Requirements
NSW law requires us to verify the identity of casino patrons and to retain certain gaming-related records. Surveillance operates across public gaming areas for the safety of guests and the integrity of play, as required by our licence conditions.
6. Data Security
Personal information is held in encrypted systems with role-based access, audited quarterly. Payment data is processed by PCI-DSS compliant gateways and never stored on our website servers. In the event of a notifiable breach we will inform affected guests and the Office of the Australian Information Commissioner as the law requires.
7. Retention
Reservation and folio records are retained for seven years to meet taxation and licensing obligations; gaming-related identification records are retained as NSW law requires; enquiry data not linked to a booking is deleted after 24 months. Marketing consent records are kept until consent is withdrawn.
8. Your Rights
You may request access to, or correction of, the personal information we hold about you. Under the GDPR you additionally hold rights to erasure, portability, restriction and objection. Requests are answered within 30 days — write to our Privacy Officer at [email protected] or via the contact page.
Your Privacy Rights
Access, correction, deletion, portability and the right to withdraw consent — exercised by a single email to our Privacy Officer, answered within 30 days.
Privacy Officer Contact
Write to the Privacy Officer, Ironbark Lodge Sydney Pty Ltd, 1 Barangaroo Avenue, Barangaroo NSW 2000, or email [email protected].
Common Questions
Yes — a written request to our Privacy Officer will return a copy of the personal information we hold within 30 days, free of charge.
No. We never sell personal information. Data is shared only where needed to deliver your stay or where the law requires it.
Every marketing email carries an unsubscribe link, or you may email our Privacy Officer directly — withdrawal takes effect immediately.
Questions We Can Answer Directly
Our guest services team responds to every enquiry within two hours, day and night — write to [email protected] or use the contact form.