Privacy Policy

Who we are

This policy explains how Rabble Group (ABN 49 650 336 404) ("Rabble", "we", "us") handles personal information. It covers all our venues - Assembly, Corella, Fun Time Pony, Pony Up, Parlour of Dreams, Al's Deli & Diner, Burgermaker, Hill Station Precinct and Local Burleigh, in the ACT and Queensland - plus our websites (including rabblegroup.com.au), our booking system, and the emails and texts we send.

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Privacy contact: email hello@rabblegroup.com.au or write to Rabble Group, Level 1, 11 Lonsdale Street, Braddon ACT 2612.

What we collect

From you directly

• Bookings and the waitlist: name, mobile, email, party size, date and time, occasion, requests and notes, and any allergies or dietary requirements you tell us.
• Deposits and payments: if we take a deposit or payment, we keep the amount, status and a payment reference. Card details go straight to our payment provider; we don't see or store your full card number.
• Functions and events: contact details, event details, numbers, menus, dietary needs, invoices and payments.
• Feedback: your 1-5 rating and any comment you leave after a visit.
• Marketing sign-ups: name, email, mobile, preferred venues and, if you tell us, your birthday.
• Job applications: your CV, contact details and anything else you send.
• Emails and messages you send us, including enquiries to our inboxes.

From other sources

• Ordering at the table: we use an ordering platform at our venues. Contact details and marketing preferences of guests who ordered through it and opted in have been brought into our guest records.
• Our previous booking system: booking history going back to 2019 has been moved into our own system.
• Our staff: details you give in person or by phone, such as a booking, an allergy or a birthday.
• Review and social sites: public reviews and messages you send us on Google or Instagram.

We also collect website usage information automatically (see Cookies and analytics). If you don't give us what we need - such as a contact number for a booking - we may not be able to take your booking.

Allergies and dietary requirements

Allergy and dietary information is health information, which the law treats as sensitive. We only collect it with your consent, when you choose to tell us. It is attached only to that booking, and used only to serve you safely on that visit - for example, so the kitchen and floor team can see it on your booking.

We delete it shortly after the booking (within a day). It is not kept on your guest profile, and it is not shared with our other venues. For function bookings we ask for dietary needs as counts (for example, "3 vegetarian") without names, and delete them the day after the event. We never use allergy or dietary information for marketing.

Your Rabble guest profile

To recognise you across our venues, we keep one guest profile that links your bookings, visits and preferences at every Rabble venue, using your email address and mobile number.

• Staff at any of our venues may see your visit history and VIP status at other Rabble venues. Allergies are never part of your profile.
• Notes written by one venue's team are generally kept to that venue; other venues see which venues you've visited and how often.
• "Been here before?" - on our booking page you can enter your mobile number to pre-fill your details. Before you confirm, we only show your first name and a masked email (for example, j•••@gmail.com).

How we use your information

• To take and manage bookings, waitlist places and functions, including confirmations and reminders by email (and, in future, by SMS if you give us your mobile).
• To take and refund deposits and payments.
• To recognise returning guests and look after you on the night - seating requests, special occasions, and any allergies you tell us for that booking.
• To ask for feedback after your visit.
• To run our venues: staffing, service, ordering, food safety, accounts and record-keeping.
• To understand how our websites are used and improve them.
• To send marketing, if you've agreed.
• To assess job applications, handle complaints, prevent misuse and meet our legal obligations.

Feedback and reviews. After a visit we may email you a short thank-you with a 1-5 rating. Every guest can leave an optional comment and every guest is offered a link to leave a public Google review if they'd like to - we don't filter who is invited based on their score. Low scores and comments go to the venue manager so they can follow up.

Your booking link. Your confirmation includes a private link to view, change or cancel your booking. Anyone with the link can do those things, so please don't share it.

Marketing

Marketing communications are opt-in only. We only send promotional emails or texts if you've agreed - for example, by ticking the box when you book, signing up on our website, or agreeing in person with our staff.

• Which venues: you'll hear from the venue you opted in with. You'll only hear from other Rabble venues if you've agreed to that.
• Contacts from table ordering: if you opted in to marketing while ordering at one of our venues, you'll only hear from that venue - unless you separately agree to hear from other Rabble venues.
• Automated emails: if you've opted in, we may send a welcome email, a birthday email (if you gave us your birthday) and an occasional "we miss you" email if you haven't visited for a while.
• Unsubscribing: every marketing email has an unsubscribe link and every text has an opt-out. We action requests within 5 business days. You'll still get messages about bookings you've made.
• We keep a list of people who have unsubscribed so we don't contact them again by mistake.

We comply with the Spam Act 2003 (Cth).

AI tools

We use some AI tools to help run our operations - for example, with kitchen costings and menu data. We don't use them to make decisions about guests that have a legal or similarly significant effect.

Our website also lets AI assistants read public information such as venue details, opening hours and events. This doesn't expose guest information.

Cookies and analytics

Our website uses an analytics service to understand how people use the site - pages visited, device type, approximate location, and actions like starting a booking. This uses cookies. We don't use it to identify you personally. We don't use advertising pixels on this site.

We also run Google Business Profile and Instagram pages for our venues; your use of those is covered by Google's and Meta's own privacy policies.

You can block or delete cookies in your browser settings, or install Google's Analytics opt-out browser add-on (tools.google.com/dlpage/gaoptout). The site still works.

Photography and filming in our venues

Our photographers and videographers occasionally capture the atmosphere, events and food at our venues. We may use these images and recordings on our websites, social media, in emails, print and advertising. We aim to make guests aware when promotional photography is taking place.

We respect our guests' privacy and seek appropriate permission before publishing images that prominently feature identifiable people. We don't name or tag guests without asking, or use identifiable images of children as the main subject without permission from a parent or guardian.

If you'd prefer not to be photographed, please tell the photographer or a member of our team. If you see a photo of yourself you'd like removed, email us at hello@rabblegroup.com.au with a link or screenshot. We'll act on your request promptly and arrange removal from the channels we control. Copies shared by others and cached search results may take longer to disappear.

Our venues also use CCTV for safety and security. Footage is kept for a limited period and shared only with police or insurers when required.

Who we share it with

We share personal information only with the service providers who help us run the business, and only as far as they need it to do that work: website hosting and our booking system, payment processing, email and text messaging, point of sale and ordering, staff rostering, website analytics and internal tools. Each is bound by contract to protect your information and not use it for their own purposes.

We may also share information with professional advisers (lawyers, accountants, insurers), with police or regulators where the law requires or allows it, and with a buyer of all or part of our business.

Overseas. Our guest and booking records are stored in Australia. Some providers store or access data outside Australia, including in the United States. We take reasonable steps to make sure they handle it consistently with the Australian Privacy Principles, including choosing reputable providers with appropriate data-protection terms.

Promotional photographs and videos that we publish may be publicly visible on our websites, social media and other advertising channels, as explained above.

We do not sell your personal information. Email us if you'd like to know which providers handle a particular kind of information.

Security and data breaches

We protect personal information with access controls (staff see only what their role needs), encrypted connections, password-protected systems and audit logs. Card details are handled by our payment provider, not stored by us.

If a data breach is likely to cause you serious harm, we'll notify you and the Office of the Australian Information Commissioner under the Notifiable Data Breaches scheme.

How long we keep it

We keep personal information only as long as we need it, then delete or de-identify it. We're putting the following schedule in place. Automated deletion is being switched on progressively; until then we review and delete records on request.

We may keep some records longer where the law requires.

Your rights

You can ask us to:

• access the personal information we hold about you;
• correct it if it's wrong or out of date;
• delete it - on request we'll delete your details from our booking and guest systems across all venues, and from our other systems as far as practical (except records the law requires us to keep);
• stop marketing at any time.

Email hello@rabblegroup.com.au. We'll confirm who you are and respond within 30 days. There's no charge. If we refuse, we'll tell you why and how to complain.

You can deal with us anonymously or using a pseudonym where that's practical, but we need a real name and contact details to take a booking.

If you're under 18, please get a parent or guardian's OK before applying for a job or joining our lists. We don't knowingly send marketing to under-18s.

Complaints

Please contact us first at hello@rabblegroup.com.au and we'll aim to resolve it within 30 days. If you're not satisfied, you can complain to the Office of the Australian Information Commissioner: oaic.gov.au, 1300 363 992.

Changes to this policy

We'll update this page when our practices change. The date below shows when it was last revised.