How Coastal Plateau handles your data

When you book, enquire or dine with us we collect the details you give us directly: your name, email address, phone number, reservation preferences and any notes you share about dietary requirements or occasions. When you browse the site we collect standard technical information such as your browser type, pages visited and time on page.

If you apply for membership or use gift card services we also collect purchase history and redemption records. We never collect information we do not need, and we never record payment card numbers on this site.

Contact details exist to answer your enquiries and manage your reservations. Dietary and preference notes exist so the kitchen and floor team can serve you properly. Technical data exists to keep the site working well.

With your consent we also use your email to send our monthly journal letter. You can withdraw that consent at any time and it affects nothing else.

We do not sell, rent or trade your personal information to anyone. We do not share your details with third parties for their own marketing. We do not send marketing communications without your consent, and we do not use your data to make automated decisions about you.

Your information is visible only to the Coastal Plateau team members who need it: the reservations desk, the events coordinator, the kitchen (for dietary notes) and the concierge. Service providers who help us operate, such as our booking system and email platform, process data under contract and only for our purposes.

Enquiry and reservation records are kept for up to three years so we can remember your preferences on return visits. Financial records required for taxation are kept for the statutory period. Journal subscription data is kept until you unsubscribe, then deleted within thirty days.

You may ask at any time for a copy of the data we hold about you, request its correction, or ask us to delete it entirely. You may also object to any processing based on our legitimate interest. We answer all requests within thirty days, and most much faster.

If you believe we have mishandled your data you may complain to us first and, if unsatisfied, to the Office of the Australian Information Commissioner.

Access to guest data is limited by role, stored on systems with current security updates and reviewed quarterly. Our site uses TLS encryption for all traffic. No method is perfect, but we investigate any suspected breach and will notify affected guests and regulators as the law requires.

We update this page when our practices change, and the date at the top reflects the current version. Material changes are also announced in the journal letter to subscribers.