Privacy Policy

1. Scope and purpose

This Privacy Policy explains how Pearl Frostichard Pty Ltd, an Australian proprietary limited company with ACN 672 189 436, collects, uses, discloses, stores and protects personal information when people visit this website, make a private dining inquiry, communicate with the restaurant or otherwise interact with our services. It is intended to provide transparent information under the Australian Privacy Act 1988 (Cth), the Australian Privacy Principles and, where the processing of a person in the European Economic Area or United Kingdom falls within territorial scope, the General Data Protection Regulation and applicable UK data-protection law.

Personal information means information or an opinion about an identified individual, or an individual who is reasonably identifiable. Some information may also be treated as personal data under European law even where Australian law would classify it differently. This Policy applies to information collected through the website and related restaurant communications, but it does not apply to third-party websites or services that operate under their own privacy notices.

2. Privacy administrator and contact

The company acts as the privacy administrator for information processed through this website. Questions, access requests, correction requests, objections and complaints may be sent using the contact details above. Email and telephone details are displayed as plain text to reduce unintended automatic contact actions.

3. Information we may collect

Depending on how you interact with us, we may collect identification and contact details such as your name, email address and telephone number; booking or event information such as preferred date, guest count, dietary needs, accessibility needs and event notes; correspondence that you send to us; and technical information such as browser type, device type, approximate region, referring page, pages viewed and security logs.

We do not ask for payment-card details through this static website. If a future booking or payment service is introduced, payment information should be processed by an appropriately secured service provider and the relevant collection notice will explain that arrangement. Please do not submit sensitive information that is unnecessary for your inquiry. Dietary or accessibility information may reveal health-related information; we use it only where you voluntarily provide it and where it is reasonably necessary to safely provide the requested hospitality service.

4. How information is collected

Information may be collected directly when you enter details into an inquiry form, contact the restaurant, attend an event, provide feedback or request assistance. Technical information may be collected automatically through essential browser functions, server logs and security mechanisms. The current website is designed to operate without advertising trackers, remote fonts, third-party analytics, embedded social feeds or externally hosted scripts.

Where information is provided by another person, such as an event organiser providing guest dietary requirements, the organiser should ensure that the information is accurate, relevant and shared with appropriate authority. We may also receive business contact details from professional advisers, venue partners or publicly available sources where it is lawful and reasonable to do so.

5. Purposes of processing

We may use personal information to respond to inquiries; assess availability; prepare private dining or event proposals; manage reservations and guest requirements; deliver requested services; maintain business and accounting records; improve website usability; prevent fraud and misuse; protect the safety of guests, staff and systems; comply with legal obligations; establish, exercise or defend legal claims; and communicate important service information.

We do not sell personal information. We do not use information submitted through the website to conduct automated decision-making that produces legal or similarly significant effects. We do not use personal information for unrelated direct marketing without a lawful basis and any consent required by applicable law.

6. Legal bases under GDPR

Where the GDPR applies, processing may be based on steps requested before entering a contract, performance of a contract, compliance with a legal obligation, protection of vital interests, our legitimate interests or consent. Legitimate interests may include operating and securing the website, responding to genuine business inquiries, maintaining accurate records, improving hospitality services and defending legal rights, provided those interests are not overridden by the individual’s rights and freedoms.

When we rely on consent, consent may be withdrawn at any time for future processing. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. When special-category information such as health-related dietary information is processed, we rely on explicit consent, necessity to protect vital interests where legally permitted, or another exception available under applicable law.

7. Disclosure and service providers

Personal information may be disclosed only to people who need it for legitimate business purposes, including authorised employees, event coordinators, chefs handling dietary requirements, professional advisers, insurers, secure hosting or IT support providers, and government or regulatory bodies where disclosure is required or permitted by law. Service providers are expected to handle information confidentially, apply appropriate safeguards and use the information only for agreed purposes.

We may disclose information in connection with a reorganisation, financing, sale or transfer of the business, subject to confidentiality and lawful processing requirements. We may also disclose information where reasonably necessary to investigate security incidents, prevent harm, enforce terms or respond to valid legal process.

8. International transfers

The company is based in Australia. A person accessing the website from another country should understand that information may be processed in Australia, where privacy laws may differ from those in the person’s home jurisdiction. Where European data-protection law applies to a restricted transfer, we will use an available transfer mechanism such as an adequacy decision, standard contractual clauses, another approved safeguard or a lawful derogation.

We assess service providers and transfer arrangements according to the nature of the information, the destination, contractual controls and practical security measures. Individuals may request further information about relevant safeguards, subject to confidentiality and legal restrictions.

9. Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to manage an inquiry or event, maintain required accounting and operational records, resolve disputes, respond to complaints and comply with legal obligations. Retention periods vary according to the type of information, the relationship with the individual and applicable limitation or record-keeping periods.

Unsuccessful or incomplete inquiries are generally deleted or de-identified when they are no longer needed, unless retention is justified for security, dispute resolution or lawful business records. When information is no longer required, we take reasonable steps to securely delete it, destroy it or de-identify it.

10. Security

We use technical and organisational measures designed to protect personal information against loss, misuse, unauthorised access, alteration and disclosure. Measures may include access controls, least-privilege practices, software maintenance, secure backups, staff confidentiality obligations, incident procedures and minimisation of information collected through the website.

No internet transmission or storage method can be guaranteed to be completely secure. Individuals should avoid sending unnecessary sensitive information and should contact us promptly if they believe their information or communications have been compromised.

11. Cookies and local storage

This website is intended to use only technologies necessary for core operation, security and user-requested functionality. It does not intentionally load third-party advertising cookies, remote analytics pixels or social-media tracking scripts. Detailed information about browser storage and cookie controls appears in the Cookie Policy.

If optional analytics, preference or marketing technologies are added in the future, they will not be activated where consent is required until an appropriate consent choice has been recorded. This Privacy Policy and the Cookie Policy will be updated before any material change is implemented.

12. Rights of individuals

Depending on applicable law, an individual may have rights to request access to personal information, correction of inaccurate or incomplete information, deletion, restriction, objection, data portability and withdrawal of consent. Australian law also provides rights to access and correct personal information, subject to permitted exceptions. We may need to verify identity before acting on a request and may ask for information reasonably necessary to locate relevant records.

Some rights are not absolute. A request may be limited where retaining or using information is necessary to comply with law, protect another person’s rights, preserve legal privilege, establish or defend claims, or satisfy another lawful exception. We will explain a refusal or limitation where required.

13. Complaints and regulators

Privacy concerns should first be raised with us using the contact details in this Policy. Please describe the issue, relevant dates and the outcome requested. We will acknowledge and assess the matter within a reasonable period and may ask for additional information. We aim to resolve concerns fairly and transparently.

In Australia, a person may be entitled to complain to the Office of the Australian Information Commissioner. A person in the European Economic Area or United Kingdom may also have the right to complain to the data-protection supervisory authority in the place of residence, work or the alleged infringement. We encourage individuals to contact us first so that we can attempt to resolve the issue directly.

14. Children

The website and fine-dining services are not directed to children for independent use. We do not knowingly collect personal information directly from a child through this website without appropriate involvement of a parent, guardian or responsible event organiser. If we learn that information was collected inappropriately, we will take reasonable steps to delete or otherwise address it.

15. Third-party links

The website may include links to separate websites only where they provide a genuine destination relevant to the user. Once a person leaves this website, the third party controls its own data practices. We are not responsible for the content, availability, security or privacy practices of third-party services and recommend reviewing their notices before providing information.

16. Changes to this Policy

We may revise this Privacy Policy when our services, legal obligations or processing practices change. The updated version will be published on this page with a revised effective date. Material changes will be highlighted or communicated by another reasonable method where required. Continued use of the website after publication does not replace consent where consent is legally required.