Privacy Policy
What we collect when you book, stay or browse lunaresort.website — and exactly what we do with it. Plain English, no legalese maze.
What we collect
When you enquire, book or stay with us we collect the details a hotel actually needs: your name, contact details (email and phone), booking dates, party size, dietary or accessibility notes you choose to share, and payment card details for guarantees — processed by our payment provider, never stored on our servers.
On the website itself we collect standard technical data: pages visited, device and browser type, approximate location (city level), and how you arrived at the site. We do not collect precise geolocation, we do not scan your device, and we do not buy data about you from third parties.
How we use it
Your details are used for four things: processing and managing your booking, contacting you about that booking, meeting our legal obligations (guest registration, tax records, responsible gaming requirements in the casino), and improving the site through aggregated statistics.
If you tick the marketing box — and only then — we send occasional offers. Every email has an unsubscribe link that works in one click, no dark patterns.
Who sees your data
Inside Luna Resort: only the teams that need it — reservations, front office, the spa or events desk depending on your booking. Outside: our booking engine and payment processor (both bound by contract to handle data securely), and authorities where the law requires it.
We never sell guest data. We never share it with advertisers. Casino gaming records are handled separately under Queensland gaming law and are not used for marketing.
GDPR & international guests
Booking from the EU or UK? GDPR rights apply on top of Australian law — access, rectification, erasure, portability and objection. Our lawful bases are contract (your booking), legal obligation and consent where given.
Full details of how these rights work sit in this policy — or ask our team for the data we hold before you travel.
Contact the team
Privacy questions and requests: email lunaresort@gmail.com with 'Privacy' in the subject, or write to Luna Resort Australia Pty Ltd, 1-9 Hinkler Dr, Nerang QLD 4211. Phone: +61 7 5596 1244.
Related documents
How long we keep it
Booking records: seven years, because Australian tax law requires it. Enquiry emails that never became bookings: twelve months, then deleted. Marketing consent: until you withdraw it. Website analytics: aggregated after 14 months.
You can ask us to delete your data sooner where the law allows — some records (invoices, gaming-related logs) have fixed retention periods we can't override.
Your rights
You can request a copy of everything we hold about you, ask us to correct it, withdraw marketing consent at any time, or ask for deletion where legally possible. Requests go to the privacy contact below — we respond within 30 days, usually much faster.
If you're unhappy with how we handle a request, you can complain to the Office of the Australian Information Commissioner (OAIC) — though we'd honestly rather you give us the chance to fix it first.
Quick answers
Straight answers about this policy. Still unsure? Write to us any time.
Questions about your data?
Write to us — a real person in the office reads and answers every privacy request.
Contact us