NORMAN HOTEL PRIVACY POLICY

Last updated: September 2026

Norman Power Pty Ltd atf Norman Power Trust trading as the Norman Hotel (“Norman Hotel”, “we”, “us” or “our”) respects your privacy and is committed to protecting the personal information we collect and hold.

This Privacy Policy explains how we collect, use, disclose, store and protect personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Personal information we collect

The types of personal information we may collect depend on how you interact with us and may include:

  • information about how you interact with our website, emails and digital services, including IP address, browser and device information, pages viewed, referral information and interactions with our website.
  • your name;
  • email address;
  • telephone number;
  • reservation and dining information;
  • event and function enquiries and booking information;
  • gift card and transaction information;
  • competition and promotional entry information;
  • marketing preferences and consent records; and

We only collect sensitive information where reasonably necessary and permitted by law, including where you have provided any consent required by law.

2. How we collect personal information

We may collect personal information when you:

  • make a restaurant reservation;
  • make an enquiry;
  • book a function, event or experience;
  • purchase a gift card or other product;
  • order through one of our online ordering services;
  • enter a competition or promotion;
  • subscribe to receive marketing communications;
  • complete a survey or provide feedback;
  • interact with our website, advertising or digital communications; or

We generally collect personal information directly from you. We may also receive information through service providers that assist us with reservations, ordering, payments, functions, marketing, website operation and other services.

3. How we use personal information

We may collect, hold, use and disclose personal information to:

  • manage restaurant reservations;
  • provide food, beverage and hospitality services;
  • process orders, transactions and gift cards;
  • manage functions, events and experiences;
  • respond to enquiries, feedback and complaints;
  • administer competitions and promotions;
  • provide customer service;
  • understand and improve our website, services and customer experience;
  • measure the performance of our marketing and advertising;
  • send marketing communications where permitted by law;
  • maintain the security and safety of our venue, guests and team;
  • comply with liquor licensing and other legal and regulatory requirements;
  • prevent or investigate fraud, misuse or unlawful activity; and
  • manage our business and administrative requirements.

We will not use or disclose your personal information for an unrelated purpose unless permitted or required by law.

4. Reservations, ordering and other service providers

We use third-party providers to help us operate the Norman Hotel and provide services to our guests.

Depending on how you interact with us, these may include providers of:

  • restaurant reservations;
  • order-at-table and online ordering;
  • payment processing;
  • gift cards;
  • customer relationship management;
  • email and SMS communications;
  • website hosting and support;
  • analytics;
  • digital advertising;
  • competitions and promotions; and
  • IT, security and data storage.

When you use a service provided through a third-party platform, that provider may also collect and handle personal information in accordance with its own privacy policy.

We take reasonable steps to work with reputable providers and manage personal information in accordance with our obligations under applicable privacy laws.

5. Cookies and tracking technologies

Our website uses cookies and similar technologies to operate the website, understand how visitors use it and improve our digital services.

Some cookies are necessary for the website to function. Other technologies may be used for analytics, measuring advertising performance and, where applicable, providing more relevant advertising.

Information collected through these technologies may include:

  • IP address;
  • device and browser information;
  • approximate location derived from an IP address;
  • pages viewed;
  • links or buttons selected;
  • referring websites;
  • date and time of visits; and
  • interactions with our website and advertising.

We may use third-party analytics and advertising services, which may include services provided by Google and Meta, where those services are active on our website.

Some third-party technologies may allow information about your interaction with our website to be disclosed to those providers.

Where required or appropriate, you can manage optional cookies and tracking technologies through our cookie preference tool. You may also be able to control cookies through your browser and privacy settings.

Disabling some cookies may affect the operation or functionality of parts of our website.

6. Direct marketing

We may send you information about Norman Hotel news, events, offers, experiences and services where you have consented to receive those communications or where we are otherwise permitted to do so by law.

You can opt out of marketing communications at any time by using the unsubscribe facility included in our electronic marketing communications or by contacting us.

We maintain records of marketing preferences and take reasonable steps to ensure that requests to unsubscribe are actioned in accordance with applicable law.

Opting out of marketing will not prevent us from sending communications that are reasonably necessary to provide a service you have requested, such as reservation or transaction information.

7. Disclosure of personal information

We may disclose personal information where reasonably necessary to:

  • our employees and authorised personnel;
  • reservation, ordering, payment and technology providers;
  • marketing, communications and analytics providers;
  • professional advisers and contractors;
  • regulators, law enforcement agencies and government authorities where required or authorised by law; and
  • other parties where you have authorised the disclosure or where otherwise permitted by law.

We do not sell personal information.

8. Overseas disclosure

Some of the service providers we use may store or process information outside Australia or use overseas infrastructure.

Where personal information is disclosed to an overseas recipient, we will handle that disclosure in accordance with applicable Australian privacy laws.

The countries in which overseas recipients are located may vary depending on the providers and services we use. Where practicable, information about relevant overseas locations will be maintained in this Privacy Policy.

9. Security and retention

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure.

Personal information may be held electronically or in physical records, including through service providers engaged by us.

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, our legitimate business and operational requirements, and applicable legal obligations.

When personal information is no longer required, we take reasonable steps to securely destroy or de-identify it, subject to any legal requirements to retain it.

10. Accessing or correcting your information

You may request access to personal information we hold about you or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading.

To make a request, contact our Privacy Officer using the details below.

We may need to verify your identity before providing access or making a correction.

In some circumstances permitted by law, we may refuse access or correction. Where required, we will explain our reasons.

11. Privacy complaints

If you have a concern or complaint about how we have handled your personal information, please contact our Privacy Officer.

We will acknowledge and investigate privacy complaints and aim to respond within a reasonable period.

If you are not satisfied with our response, you may be able to lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

12. Data breaches

We maintain processes for responding to suspected or actual data breaches.

Where a data breach is likely to result in serious harm and meets the requirements of the Notifiable Data Breaches scheme, we will notify affected individuals and the Office of the Australian Information Commissioner as required by law.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, technology, service providers or legal obligations.

The current version will be published on our website at normanhotel.com.au with the date it was last updated.

14. Contact us

For questions about this Privacy Policy, requests to access or correct personal information, marketing preferences or privacy complaints, please contact:

Privacy Officer
Tania Cousens
Marketing Manager
Norman Hotel

Email: marketing@nhpg.com.au
Phone: (07) 3391 5022
Address: 102 Ipswich Road, Woolloongabba QLD 4102