1. Introduction
This Privacy Policy explains how riverandroasst.com (Riverandroast, we, us, or our) collects, uses, discloses, and protects your personal information when you visit our website, interact with our digital channels, or engage with our services. Our services include browsing our fire and roast menu, exploring The River Room card lounge, submitting event enquiries, joining our newsletter, and making secure table reservations.
By accessing or using our website, submitting your details through our forms, or otherwise providing personal information to us, you agree to the terms of this Privacy Policy. If you do not agree with any part of this policy, you should not use our website or provide personal information to us.
This Privacy Policy is intended to be read in conjunction with our Cookie Policy and our Terms and Conditions.
2. Data Collection Overview
We collect a combination of personal and non-personal information to operate riverandroasst.com, support our guests, and improve experiences at our physical venue in Australia. The information we collect can be grouped as follows:
2.1 Information you provide directly
We may collect personal information you choose to provide when:
- Submitting a table reservation or dining enquiry via our online booking or enquiry tools
- Requesting information about private functions, corporate dining, or special events
- Enquiring about The River Room card lounge, tournaments, or weekend schedules
- Signing up to receive our newsletter, venue updates, or promotional offers
- Contacting us through the Contact Us page or other communication channels
Depending on the form or interaction, this information may include:
- Name and contact details (such as email address and phone number)
- Booking details (preferred date and time, party size, seating preferences)
- Event details (company name, event type, headcount, budget range, special requirements)
- Dining preferences or dietary requirements you choose to disclose
- Newsletter preferences and communication selections
- Any other personal information you voluntarily provide in a message or note
2.2 Information collected automatically
When you browse riverandroasst.com, we may automatically collect non-personal and technical information, such as:
- Device information (browser type, operating system, device type)
- Log data (IP address, access times, referring pages, pages viewed, and clickstream data)
- Approximate location data based on your IP address (for example, general region or city)
This information is primarily used in aggregated form to maintain website performance, monitor security, and better understand visitor trends.
2.3 Information from third-party tools
Where we use third-party service providers for booking, email marketing, analytics, or event management, those providers may collect and process information on our behalf in accordance with their own privacy practices and contracts with us. We only appoint providers that handle information in a way consistent with this Privacy Policy and applicable Australian privacy law.
3. Use of Your Information
We use the personal and non-personal information we collect for purposes directly connected to running our restaurant, card lounge, and event operations, and to enhance your overall guest experience. In particular, we use your information to:
3.1 Reservations and in-venue services
- Process and manage table reservations for our riverside woodfired grill
- Confirm, modify, or cancel bookings and communicate with you about your reservation
- Coordinate seating arrangements, special occasions, or dietary requests
- Manage guest lists and attendance for The River Room and other in-venue experiences
3.2 Event planning and corporate dining
- Respond to enquiries about private functions, corporate dining, and special events
- Prepare tailored proposals based on your event details and requirements
- Coordinate event logistics, menu selections, and any additional services
- Follow up after events to gather feedback and refine our offerings
3.3 Improving guest experience and website performance
- Analyse visitor behaviour and website usage to improve navigation and content
- Enhance the performance, security, and accessibility of riverandroasst.com
- Develop new features, services, or experiences consistent with our brand
3.4 Communication, marketing, and updates
- Send booking confirmations, reminders, and updates about your reservations or events
- Provide service-related notifications, such as changes to opening hours or venue policies
- With your consent, send newsletters, offers, and event invitations tailored to the Riverandroast experience
- Allow you to manage your preferences or unsubscribe from marketing communications at any time
3.5 Legal, safety, and compliance
- Comply with our legal and regulatory obligations in Australia
- Assist with fraud prevention, security monitoring, and venue safety
- Manage and resolve disputes, complaints, or claims
5. Third-Party Sharing
We do not sell your personal information. We may, however, share your information with carefully selected third parties where it is necessary to deliver our services, support our operations, or comply with legal obligations.
5.1 Service providers
We may share your information with third-party service providers engaged to support our venue and website, including:
- Reservation and booking system providers
- Event management and function planning platforms
- Email service providers and newsletter platforms
- Website hosting, security, and analytics providers
- Payment processors where applicable for deposits or prepayments
These providers are only permitted to use your personal information to perform services for us and must handle it in accordance with strict confidentiality and security requirements.
5.2 Legal and regulatory disclosures
We may disclose your personal information when we believe it is reasonably necessary to:
- Comply with applicable laws, regulations, or lawful requests from authorities
- Protect the rights, property, or safety of Riverandroast, our guests, or the public
- Support the investigation or prevention of suspected fraud, security incidents, or unlawful activities
5.3 Business changes
If Riverandroast is involved in a business transition such as a merger, acquisition, or asset transfer, your information may form part of the transferred assets. In such cases, we will take reasonable steps to ensure that your information remains protected and that any new entity continues to handle it consistently with this Privacy Policy.
6. Data Security
We take the security of your personal information seriously and implement a combination of technical, administrative, and physical safeguards designed to protect it from loss, misuse, unauthorised access, modification, or disclosure.
Measures we may use include:
- Secure server configurations and access controls
- Encryption of data in transit where appropriate (for example, through HTTPS)
- Restricted access to personal information on a need-to-know basis
- Use of reputable, security-focused third-party providers for hosting and infrastructure
- Ongoing monitoring of systems for unusual activity and potential vulnerabilities
While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, but we are committed to continuously reviewing and strengthening our security posture.
7. Access and Control
You have rights in relation to your personal information under Australian privacy law. Subject to certain exceptions, you may request to:
- Access the personal information we hold about you
- Update or correct your personal information if it is inaccurate, out of date, or incomplete
- Request deletion, anonymisation, or de-identification of your personal information where it is no longer required for our business purposes or legal obligations
- Withdraw your consent to receive marketing communications
To exercise these rights, please contact us using the details provided in the Contact Information section of this policy. We may need to verify your identity before processing your request and may charge a reasonable fee for providing access where permitted by law.
We will respond to your request within a reasonable timeframe and in accordance with the requirements of the Australian Privacy Principles.
8. Minors' Privacy
Riverandroast is a premium riverside restaurant and land-based card lounge designed for adults and families dining together. Our online services are not directed at children under the age of 18, and we do not knowingly collect personal information from individuals under 18 years of age without appropriate parental or guardian consent.
If you are a parent or guardian and believe that your child under 18 has provided personal information to us without your consent, please contact us immediately using the details in the Contact Information section. We will take steps to review and, where appropriate, delete the information in accordance with applicable laws.
All in-venue activities in The River Room card lounge are strictly face-to-face and offline. Riverandroast is not an online gambling platform, and we do not operate any form of online wagering service.
9. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our operations, legal obligations, or best practice guidance. When we make material changes, we will update the effective date at the top of this page and, where appropriate, provide additional notice (such as a prominent notice on our website).
Your continued use of riverandroasst.com after any changes have been posted will constitute your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we manage your personal information.
10. Contact Information
If you have any questions, concerns, or requests relating to this Privacy Policy, your personal information, or our data-handling practices, you can contact us using the following channels:
- Website: Use the enquiry form on our Contact Us page.
- Venue: You may also speak with a member of our management team in person at our riverside restaurant in Australia. They will direct your enquiry to the appropriate contact.
When contacting us, please provide enough detail for us to understand your request, and include your contact information so that we can respond.
11. Australian Privacy Law Compliance
Riverandroast is committed to handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Our data-handling practices are designed to ensure that:
- We collect personal information only where it is reasonably necessary for our functions and activities
- We inform you about how we collect, use, and disclose personal information in a clear and transparent manner
- We take reasonable steps to ensure the personal information we hold is accurate, up to date, and secure
- We provide mechanisms for you to access and correct your personal information
- We respond to complaints and requests related to privacy in a timely and respectful way
If you are not satisfied with our response to a privacy query or complaint, you may have the right to contact the Office of the Australian Information Commissioner (OAIC) for further guidance or to lodge a complaint.