I am raw html block.
Click edit button to change this html

Privacy Policy

Effective date: 22 October 2026

1. Who we are

This policy covers the Stardeck Group of venues in the Pilbara, Western Australia, and the website stardeck.com.au. In this policy, “Stardeck”, “we”, “us” and “our” mean the following businesses:

  • Stardeck Management Pty Ltd (ABN 36 666 293 885), which manages the group and runs the website
  • Grand Central Kta Pty Ltd, trading as Grand Central Tavern, Nickol (ABN 89 631 601 262)
  • Haybar Pty Ltd, trading as Foundry Tavern, Karratha (ABN 38 154 717 610)
  • Fiorita Pty Ltd, trading as Fiorita Wine Bar & Restaurant, Karratha (ABN 69 602 476 013)
  • Rambla Bar Pty Ltd, trading as Rambla Bar & Bistro, Wickham (ABN 66 169 215 105)

We follow the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. What personal information we collect

We only collect what we need, and it depends on how you deal with us. It can include:

  • Contact details: your name, email, phone number and postcode or address.
  • Bookings and enquiries: booking date, time and party size, function and Christmas party details, dietary requirements and anything else you tell us in a form or email.
  • Membership and loyalty: member number, date of birth (for birthday vouchers and age checks), points or cashback balance, punchcard progress, what you buy and when you visit.
  • Tickets and events: ticket purchases and attendance details.
  • Job applications: CV, work history, right-to-work and visa details (for example regional work days), referees, and anything else in your application.
  • Website and device information: IP address, browser and device type, the pages you visit, how you got to our site and cookie identifiers.
  • Social media: your public profile name and anything you send or post on our pages.
  • Venue security: CCTV footage recorded in and around our venues, and ID scans (name, date of birth, photo and ID number) taken at entry, as required under our liquor licence and the Liquor Control Act 1988 (WA).

We don’t usually collect sensitive information. If you give us health information, such as allergies or accessibility needs, we only use it to look after you.

3. How we collect it

  • Directly from you, through website enquiry forms (including Christmas and function enquiries at christmas.stardeck.com.au), email, phone, in person, and when you join our membership program.
  • Through our service providers when you use them: OpenTable (table bookings), MyGuestList (event tickets), Teamtailor (careers at stardeckgroup.teamtailor.com), our point-of-sale systems, Como (COMOSense, our loyalty and membership platform and app) and me&u Connect (ordering and SMS messaging).
  • Automatically, through cookies, Google Analytics and the Meta Pixel on our website.
  • From Facebook, Instagram and other social platforms when you interact with our pages or ads.

You can deal with us anonymously or under a different name where that’s practical, for example when you’re just asking a general question.

4. Why we collect it

  • To take and manage bookings, functions, events and tickets.
  • To run our membership program, including cashback, punchcards and birthday vouchers.
  • To reply to your enquiries and give you good service.
  • To send you news, offers and event information (see section 6).
  • To improve our website, venues and advertising, and to measure how well our ads work.
  • To assess job applications and to recruit.
  • To meet our legal obligations, including responsible service of alcohol and venue safety.

5. Who we share it with

We don’t sell your personal information. We share it only with:

  • Other Stardeck Group venues, so we can run bookings and membership across the group.
  • Service providers who help us run our business, such as OpenTable, MyGuestList, Teamtailor, Google, Meta (Facebook and Instagram), our website host and form tools (WordPress and Gravity Forms), Como (COMOSense), me&u (Connect), our email, point-of-sale, payment and IT providers, and our professional advisers.
  • Police, regulators or others when the law requires or allows it.

Overseas disclosure: Some of these providers store or process information outside Australia, including in the United States, Ireland, the European Union and Sweden (Teamtailor). We take reasonable steps to make sure they protect your information in line with the APPs.

6. Marketing and how to opt out

We may send you emails, push notifications through the Como (COMOSense) membership app, or SMS messages through me&u Connect, about events, specials and member offers if you’ve agreed to it or would reasonably expect it, for example as a member. Every email and SMS has an unsubscribe link or opt-out option, and you can turn off push notifications in the app or your phone settings. You can also contact us to opt out. We follow the Spam Act 2003 (Cth).

We use Meta and Google advertising tools to show our ads to people who may be interested, including people who have visited our website. Where permitted, we may use hashed customer email addresses or phone numbers to create advertising audiences. Hashing helps protect identifiers but does not make them anonymous. If you don’t want to be included, tell us and we’ll leave you out. You can also change your ad settings on Facebook and Google.

7. Cookies and tracking

Our website uses cookies and similar technologies, including:

  • Google Analytics to understand how visitors use our site. You can opt out using the Google Analytics opt-out browser add-on.
  • Meta Pixel to measure and improve our Facebook and Instagram ads.
  • Cookies set by embedded booking, ticketing and recruitment tools (OpenTable, MyGuestList and Teamtailor).

You can block or delete cookies in your browser settings, but parts of the site may not work properly if you do.

8. Keeping your information secure

We take reasonable steps to protect your information from misuse, loss, unauthorised access, changes or disclosure. This includes password-protected systems, limiting access to staff who need it, and using reputable providers. If a data breach is likely to cause serious harm, we’ll tell you and the OAIC as the Notifiable Data Breaches scheme requires.

9. How long we keep it

We only keep personal information for as long as we need it for the reasons above or as the law requires. Then we securely delete it or make it anonymous. CCTV footage is usually kept for 30 days unless it’s needed for an incident, police request or legal matter. ID scan records are kept for 30 days. Unsuccessful job applications are kept for 30 days after the recruitment decision, and inactive membership accounts are kept for 30 days after becoming inactive. These periods are subject to any legal requirement to retain information for longer.

10. Children

Our venues serve alcohol, and our membership program, marketing and online ticketing are for people aged 18 and over. We don’t knowingly collect personal information from children, except where a parent or guardian gives it to us, for example a booking for a family meal.

11. Accessing and correcting your information

You can ask to see the personal information we hold about you, or ask us to correct it, by contacting us (see section 13). We’ll reply within 30 days. If we can’t give you access, we’ll tell you why.

12. Complaints

If you’re concerned about how we’ve handled your personal information, please contact us first. We’ll look into it and reply within 30 days. If you’re not happy with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or on 1300 363 992.

13. Contact us

Toby — Stardeck Operations
Email: [email protected]
Phone: 0491 652 769
Postal address: 2 Melody Street, Kelmscott, Western Australia

14. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with its effective date.

15. Grok business management app and Meta integrations

This policy also covers Stardeck’s Grok business management app when it connects to Meta for advertising and reporting. Only authorised Stardeck users may connect business accounts or grant access. Access is limited to the permissions granted and features enabled.

The app may process business and advertising account identifiers, campaign and ad information, advertising content and settings, expenditure, and advertising performance and conversion reports. We use this information to manage and report on Stardeck advertising, measure campaign performance and support authorised advertising decisions. This integration does not cover access to private Facebook or Instagram messages or Page content management.

Where Grok is used to assist with these authorised advertising and reporting tasks, information relevant to the task may be processed by xAI, the provider of Grok, and the IT providers operating the integration. This processing may occur outside Australia. We limit access to authorised users and service providers who need it for those purposes. We do not sell information received through Meta integrations.

16. Requesting deletion of your information

You can request deletion of personal information held by Stardeck, including information received through our Grok app or Meta integrations, by emailing [email protected] with the subject “Data deletion request”. Tell us which service or account the request concerns and provide enough information for us to locate your records. Do not send passwords, access tokens or identity documents with your initial request. You can also contact us by phone or post using section 13.

We may ask for reasonable information to verify your identity and authority. We will respond within 30 days and delete or de-identify information that is no longer needed, including relevant app data held by us or our service providers. If information must be retained for a legal obligation or an unresolved matter, we will explain the reason and any applicable limits.

You can also remove the app’s access through the business integration or connected-app settings in the relevant Meta account. Removing access stops further access under that connection; it does not necessarily delete information already held by Stardeck. Contact us using the instructions above to request that deletion. Requests about information held independently by Meta or another booking or service provider should also be directed to that provider.