Privacy Policy

Iconic Kirra Beach Resort

Iconic Kirra Beach Resort and its management entity respect your right to privacy and are committed to safeguarding the personal information of our guests, customers, and website visitors. We adhere strictly to the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth). This Privacy Policy outlines how we collect, use, manage, store, and disclose your personal information.

1. Personal Information We Collect

“Personal information” is information or an opinion about an identified individual, or an individual who is reasonably identifiable. We collect personal information primarily for the purpose of providing accommodation services, processing transactions, fulfilling administrative obligations, and conducting marketing activities.

The types of personal information we collect include:

  • Identity Data: Full name, residential address, date of birth, nationality, and contact details (phone number, email address).
  • Booking Data: Arrival and departure dates, reservation history, room preferences, guest requests, and party details.
  • Payment & Financial Data: Credit card details (processed securely and masked following authorization) or other payment and transaction information.
  • Security & Verification Data: Photographic identification (such as a valid driver’s license or passport) collected upon check-in to verify identity and maintain safety.
  • Website & Technical Data: IP address, browser type, operating system, referring URL, pages viewed, and online usage data collected via cookies and analytics tools.
  • Feedback & Customer Service Data: Information you provide when completing guest surveys, participating in promotions, submitting inquiries, or communicating with customer support.

2. How We Collect Your Personal Information

We collect personal information directly from you in a variety of ways, including when you interact with us electronically, via phone, or in person. Specifically, we collect information when you:

  • Make a reservation or booking through our website, online engine, or telephone.
  • Check-in at the resort and present mandatory guest identification.
  • Send an email, submit an online contact form, or engage with us on social media channels.
  • Subscribe to our newsletters, enter competitions, respond to surveys, or accept promotional offers.
  • Access and navigate our website.

We may also receive personal information about you from third parties, such as online travel agencies (e.g., Booking.com, Expedia, Agoda), travel agents, or corporate booking partners. Where we receive personal information from third parties, we protect and handle it as set out in this Privacy Policy.

3. Use of Personal Information & Direct Marketing

We collect, hold, use, and disclose personal information to provide you with high-quality accommodation services, fulfill legal obligations, and improve guest experiences.

Specifically, we use your personal information to:

  • Process, confirm, manage, and deliver your accommodation reservations and payments.
  • Provide personalized service, assistance, and amenities during your stay.
  • Manage and maintain business operations, guest services, and website functionality.
  • Communicate with you regarding stay details, updates, feedback, or administrative notices.
  • Inform you of news, promotions, special packages, and events available at Iconic Kirra Beach Resort (where you have opted in or as permitted by law).
  • Meet statutory legal, tax, accounting, security, and administrative record-keeping obligations.

Marketing Opt-Out

You may unsubscribe or opt out of receiving marketing or promotional communications from us at any time by clicking the “unsubscribe” link provided in electronic communications or by contacting us directly at sales@iconickirra.com.au.

4. Disclosure of Personal Information

We may disclose your personal information to our employees, officers, professional advisers, agents, contractors, or subcontractors insofar as reasonably necessary for the purposes set out in this Policy. Personal information is only supplied to third parties when required for the delivery of our services or to meet statutory duties.

Third parties to whom we may disclose personal information include:

  • Payment Processors: To execute secure online and in-person payment processing.
  • Third-Party Booking Channels: External booking platforms and travel portals through which your reservation was submitted.
  • Service Providers & Subcontractors: IT support providers, property management systems, housekeeping, maintenance teams, and marketing service software.
  • Sister Properties & Operations: For necessary corporate, administrative, maintenance, or central reservation functions.
  • Legal & Law Enforcement Bodies: When required or authorized by Australian law, court order, subpoena, search warrant, or in response to law enforcement requests.
  • Rights Protection: When necessary to protect the copyright, trademarks, legal rights, property, or safety of Iconic Kirra Beach Resort, its site, guests, or third parties.
  • Business Reorganization: In the event of a sale, merge, transfer, or change of business assets, user databases containing personal information may be disclosed to potential purchasers under strict confidentiality agreements.

Overseas Data Transfers & Cloud Storage (APP 8)

Personal information may be transferred to, stored in, or processed by service providers or software vendors located outside Australia (such as cloud hosting infrastructure, analytics engines, or communication software). Where cross-border data transfers occur, we take reasonable steps to ensure that overseas recipients handle your personal information in accordance with the Australian Privacy Principles.

5. Security & Retention of Personal Information

We are committed to ensuring that the personal information you provide to us is kept secure.

  • Safeguards: To prevent unauthorized access, loss, misuse, modification, or disclosure, we have implemented suitable physical, electronic, and managerial safeguards across both digital cloud environments and physical premise storage.
  • Data Retention & Destruction: We retain personal information only for as long as necessary to fulfill the purposes for which it was collected or to satisfy statutory accounting, legal, and operational guest record retention obligations. Once no longer required, personal information is securely destroyed, erased, or permanently de-identified.
  • Internet Security: While we enforce strict physical and electronic safeguards, internet-based data transmissions carry inherent risks, and we cannot guarantee 100% security of data transmitted over the internet.

6. Website Cookies, Analytics & External Links

  • Site Usage Data: When you visit our website (www.iconickirra.com.au), technical data such as browser type, operating system, IP address, and site movement patterns are aggregated to analyze audience behavior and improve website functionality.
  • Cookies: We utilize cookies and similar technologies to remember user preferences, facilitate online reservations, evaluate website traffic, and optimize site experiences. Cookies may also be used by third-party ad networks (e.g., Google Display Network) to display relevant advertisements based on past site visits. You can accept or decline cookies through your web browser settings; however, disabling cookies may limit access to certain features on our site.
  • Third-Party Links: Our website may contain links to external sites not operated or controlled by Iconic Kirra Beach Resort. These links are provided for convenience only and do not imply endorsement. We are not responsible for the privacy practices of external websites and encourage users to read the privacy statements of every third-party site visited.

7. Access to and Correction of Personal Information

Under the Privacy Act 1988 (Cth), you have the right to request access to the personal information we hold about you, or to request that inaccurate, out-of-date, incomplete, irrelevant, or misleading information be corrected or updated.

To submit an access or correction request:

  • Contact our Privacy Manager in writing at the address or email provided below.
  • We will respond within a reasonable period after the request is made.
  • An administrative fee may apply to cover costs associated with retrieving and supplying physical records.
  • In certain circumstances permitted by law, we may refuse access to or correction of personal information, in which case we will provide written reasons for the refusal.

8. Policy Updates

Please note that we may amend or update this Privacy Policy periodically to reflect changing regulatory requirements or operational practices. All modifications take effect immediately upon being posted on our official website. We encourage you to review this page periodically for updates.

9. Contact Us & Privacy Complaints

If you have any questions about this Privacy Policy, wish to access/correct your personal records, or want to make a formal complaint regarding a potential breach of the Australian Privacy Principles, please contact us:

Iconic Kirra Beach Resort
Attention: Manager
Postal Address: 74/76 Musgrave Street, Kirra Beach, Coolangatta QLD 4225
Telephone: +61 7 5618 8500
Email: sales@iconickirra.com.au

We take all privacy complaints seriously and will investigate and respond in writing shortly after receiving notice of your concern.