The Gibraltar Global Privacy Policy 

Last updated: 11/02/26 

1. SCOPE OF THIS PRIVACY POLICY 

1.1 This Privacy Policy sets out how The Gibraltar (“we”, “us”, “our”) collects, uses and protects personal data in relation to the operation of our hotel, leisure, dining, conferencing and associated services. 

1.2 This Privacy Policy applies to all guests, customers, visitors and users of The Gibraltar’s services and facilities. 

2. THE GIBRALTAR 

The Gibraltar is operated by Gibraltar Hospitality Pty Ltd (Australia) and its related entities (together referred to as “The Gibraltar”). 

3. WHOSE PERSONAL DATA DO WE USE? 

3.1 What personal data do we collect and use? 

We typically process the following types of personal data: 

(a) Reservations and guest registration 

Information provided when making a reservation, including: 

(A) Name, address, title, date of birth, organisation name 
(B) Email address, telephone number, postal address 
(C) Demographic data 
(D) Allergy or accessibility information 
(E) Check-in and check-out dates, number and names of accompanying persons 
(F) Travel details and special requests 
(G) Payment details (including credit card information) 
(H) Photo identification (passport or driver’s licence) and credit card pre-authorisation 
(I) Date and time of visit 

(ii) Information relating to use of online services (website usage, device type, pages visited, cookies, preferences) 

(iii) Information required by law or regulation 

(b) Enquiries and complaints 

(i) Information you provide directly 
(ii) Date and time of contact and communication content 
(iii) Service usage information 
(iv) Information required by law 

(c) Surveys, reviews and marketing 

(A) Name, email address, telephone number, age group, gender 
(B) Reservation information 
(C) Feedback and review content 
(D) Date and time of contact 

If you choose not to provide certain information, we may be unable to provide some services (for example, to process a booking). 

We do not generally collect sensitive personal data (such as health, genetic, biometric, criminal, religious or political information). If such information is provided, it will only be used with your express consent and solely to meet your service requirements. 

3.2 How do we obtain your personal data? 

We collect personal data from: 

(a) Booking platforms and reservation systems 
(b) Travel agents and booking partners 
(c) Trusted suppliers (e.g. payment processors, marketing providers) 
(d) IT systems (Wi-Fi, phone, email, website) 
(e) Cookies and website tracking 
(f) Government agencies (where required) 
(g) Insurance companies 
(h) Professional advisers 
(i) IT service providers 
(j) Regulators 
(k) Surveys and marketing communications 

3.3 Purposes and lawful basis for processing 

We process personal data for: 

  • Reservations and guest services 
  • Responding to enquiries and complaints 
  • Providing accommodation and hospitality services 
  • Marketing and promotions (with consent) 
  • Legal and regulatory compliance 
  • Business operations and service improvement 

Legal bases include: 

(a) Legal obligation 
(b) Contract performance 
(c) Legitimate business interests 
(d) Consent 

We may share data with: 

  • Service providers (accommodation, food & beverage, transport, leisure activities) 
  • Administrative and IT service providers 
  • Government authorities where required 
  • Professional advisers 
  • Insurance providers 

Your personal data is kept confidential and only shared where necessary. 

We may aggregate and anonymise personal data for statistical analysis and service improvement. 

4. ONLINE AND MOBILE DATA WE COLLECT 

4.1 Browser and device data 

MAC address, device type, operating system, browser type, language and screen resolution. 

4.2 App and digital platform usage 

Usage data, access times, downloaded files, advertising identifiers. 

4.3 Cookies 

Used to improve functionality, security, analytics and marketing. 

4.4 Cookie opt-out 

You may manage cookie preferences via your browser settings. Refusing cookies may affect functionality. 

4.5 Third-party advertising 

Advertising partners may use cookies or pixel tags. 

4.6 Pixel tags and tracking technologies 

Used to measure campaign effectiveness. 

4.7 Analytics 

We use Google Analytics to measure website usage. You may opt out using Google’s tools. 

4.8 IP Address 

Collected to manage system security and usage analytics. 

4.9 Aggregated and segmented data 

Used to improve services and provide relevant offers. 

4.10 Location-based services 

Collected only with your consent through digital platforms. 

4.11 Location opt-out 

You may disable location services through your device settings. 

5. LINKS TO THIRD PARTY WEBSITES 

Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies separately. 

6. INTERNATIONAL DATA TRANSFERS 

We may transfer personal data internationally to service providers or partners. We ensure safeguards are in place to comply with data protection laws, including contractual protections. 

7. MARKETING ACTIVITIES 

7.1 We may send you information about our services or promotions by email or digital platforms. 

7.2 Marketing communications comply with applicable laws and require consent where necessary. 

7.3 You may unsubscribe at any time using the link provided or by contacting us. 

Service-related communications will continue where necessary. 

8. AUTOMATED DECISION MAKING 

We may use automated processing to segment customers and provide tailored offers, discounts and recommendations. 

9. YOUR RIGHTS 

You have the right to: 

(a) Access your personal data 
(b) Correct your personal data 
(c) Request erasure 
(d) Restrict processing 
(e) Data portability 
(f) Object to marketing 
(g) Object to processing 
(h) Withdraw consent 
(i) Lodge a complaint with a data protection authority 

Some rights may be limited by legal obligations. 

10. HOW WE STORE YOUR PERSONAL DATA 

We store personal data securely in paper and electronic form, including secure off-site document storage. 

11. HOW WE PROTECT YOUR PERSONAL DATA 

We use: 

(a) Security measures and procedures 
(b) Breach response protocols 
(c) Staff training 

You are responsible for keeping passwords confidential. 

12. HOW LONG DO WE KEEP YOUR PERSONAL DATA? 

We retain personal data only as long as necessary for service delivery and legal compliance. 

13. CONTACTING US 

If you have questions about this Privacy Policy or your personal data, please contact: 

The Gibraltar 
Email: gm@thegibraltarbowral.com.au 
Website: www.thegibraltarbowral.com.au/ 

14. COMPLAINTS 

If you believe we have not complied with our obligations regarding your personal data, you may lodge a complaint with us using the contact details above. We will respond within a reasonable timeframe. 

If unresolved, you may contact the relevant privacy regulator in your jurisdiction. 

15. UPDATES TO THIS PRIVACY POLICY 

We may update this Privacy Policy from time to time. The most current version will always be available on our website: 

www.thegibraltarbowral.com.au 

This policy is provided in English. In the event of translation, the English version prevails.