Privacy Policy
How Bonza Rooms collects, uses, stores and protects your personal information — written to be read, not buried. If anything here is unclear, the answer is one email away.
Last updated 1 November 2025
1. What We Collect
We collect the information a hotel needs to look after you: reservation details (name, contact information, arrival and departure dates), payment information processed through our secure booking engine, identification documents where required by law (including casino entry verification for guests 18 and over), stay preferences such as dietary requirements and room setups, and correspondence you send us.
When you use bonzarooms.com, we also collect standard technical data — device type, browser, pages visited and referral source — through cookies described in our Cookie Policy.
2. How We Use It
Your information is used to process and manage reservations; personalise your stay through the preference questionnaire; process payments and prevent fraud; meet legal obligations, including licensed-premises identification requirements; respond to enquiries; and — only with your consent — send offers and the monthly dispatch.
We do not sell personal information. We do not use your stay data for automated decision-making that produces legal effects.
3. Storage & Security
Guest records are stored on servers located in Australia. Payment card data is handled by our PCI-DSS-compliant processor and is never stored on hotel systems. Access to personal information is restricted to staff who need it for their role, protected by access controls, encryption in transit and at rest, and audit logging.
Reservation records are retained for seven years to satisfy Australian taxation and licensing obligations, then destroyed or de-identified.
4. Sharing & Disclosure
We share personal information only where necessary: with payment processors; with Casino Canberra where you use hosted salon access (identity verification and entry eligibility only); with transport and excursion partners where you book through the concierge; and with regulators or law enforcement where legally required. Each recipient is bound to use the information solely for the service provided.
5. Your Rights
You may request access to, correction of, or deletion of your personal information at any time. You may withdraw marketing consent with a single click in any message. Australian Privacy Act 1988 rights apply to all guests; international guests' additional rights under GDPR and equivalent frameworks are described on our Legal & GDPR page.
6. Contact
Privacy questions, access requests and complaints go to [email protected] or by post to 1 Binara Street, Canberra ACT 2601. We respond within 30 days. If you remain unsatisfied, you may contact the Office of the Australian Information Commissioner.
Prefer to ask a person?
The team answers privacy questions directly — no ticket queues, no legal boilerplate replies.