Privacy Policy
Administrator and contact
Goldenstoneswork Hospitality Pty Ltd is the controller of personal information processed through goldenstoneswork.com. The registered contact address is 88 Collins Street, Melbourne VIC 3000, Australia. Privacy enquiries may be sent to info@goldenstoneswork.com.
Scope of this policy
This Privacy Policy explains how we collect, use, disclose, retain and protect personal information relating to visitors, prospective guests, hotel guests, casino patrons, suppliers and business contacts. It applies to website enquiries, reservations, customer service interactions, promotional communications and on-site services.
Information we collect
We may collect identity and contact details, booking and stay information, service preferences, correspondence, transaction records, age-verification information where legally required, device and browser data, IP address, security logs and information voluntarily supplied through forms. We do not intentionally collect more information than is reasonably necessary for the stated purpose.
Purposes and legal bases
We process information to respond to enquiries, administer reservations, provide casino-hotel services, manage accounts and payments, maintain security, prevent fraud, comply with responsible gaming and legal obligations, improve website operation and send marketing where consent or another lawful basis applies. Under the GDPR, the relevant bases may include consent, performance of a contract, compliance with legal obligations and legitimate interests balanced against individual rights.
Cookies and local storage
The website uses essential local storage to remember cookie preferences and may use strictly necessary technical storage required for security and functionality. Non-essential analytics or advertising technologies should not be activated without valid consent where consent is required. Further details are provided in the Cookie Policy.
Sharing and international transfers
Information may be shared with hosting, IT, booking, payment, security, professional advisory and regulatory service providers only to the extent necessary. Providers must act under appropriate contractual and confidentiality obligations. Where information is transferred outside the European Economic Area, recognised safeguards such as adequacy decisions or standard contractual clauses will be used when required.
Retention
Personal information is kept only for as long as needed for the purpose collected, including contractual, accounting, security, dispute-resolution and regulatory requirements. Retention periods are reviewed and information is securely deleted or anonymised when no longer required.
Your rights
Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection to processing, and may withdraw consent at any time without affecting earlier lawful processing. You may also lodge a complaint with a competent data protection authority. Identity verification may be required before a request is completed.
Security and children
We use proportionate administrative, technical and organisational safeguards, including access control, secure configuration and data minimisation. No method is completely risk-free. Casino services are intended only for persons who meet the applicable legal age requirements; we do not knowingly market casino participation to children.
Changes
We may update this policy to reflect operational or legal changes. The version published on this page is the current version. Last updated: 10 July 2026.