Pat's Gems visitor experience in the Sapphire Gemfields

Open, careful and responsible

Privacy Policy

How Pat’s Gems collects, uses, protects and shares personal information when you contact, book or visit us.

Last updated: 9 September 2026
Only what we needInformation used to provide and improve our services
Your choicesAccess, correction and marketing opt-out options
Handled carefullyReasonable security and responsible disclosure

How we handle your information

Our approach: Where the Privacy Act 1988 and Australian Privacy Principles apply, we will follow them. We may also follow this policy as good practice where the Act does not otherwise require it.
1. Information we may collect

Depending on your interaction with us, we may collect:

  • name, phone number, email and postal address;
  • booking details, dates, group size and visitor requirements;
  • accessibility, dietary or safety information you choose to provide;
  • purchase, transaction and gift-voucher details;
  • enquiries, messages, feedback, competition entries and reviews;
  • approved photographs or recordings;
  • IP address, device, browser, pages viewed, referral source and website interactions; and
  • employment or supplier information when relevant.

Please do not send sensitive information unless reasonably necessary. Relevant health, accessibility or dietary information will be used for safety, access or service purposes and as permitted by law.

2. How we collect information

We collect information when you contact us, use a website form, request a booking, visit or purchase from us, subscribe, enter a promotion, give feedback, apply for work or supply services. Information may also come from someone booking for you, booking and payment providers, analytics tools or social-media platforms. If you give us another person’s information, please ensure you are authorised.

3. Why we use information
  • To answer enquiries and manage bookings, visits, purchases and refunds.
  • To provide safe, accessible and suitable experiences.
  • To process transactions and keep business records.
  • To send confirmations and operational updates.
  • To send marketing where consented to or legally permitted.
  • To improve our website, services, customer experience and campaigns.
  • To protect visitors, staff and property, handle complaints and prevent fraud.
  • To meet legal, insurance, accounting and regulatory obligations.

Without information reasonably required for a booking or service, we may not be able to provide it.

4. Cookies, analytics and tracking

Our website may use cookies, Google Tag Manager, analytics tools and similar technologies to operate the site, understand visits, measure campaigns and improve performance. These tools may collect device, usage and approximate-location information.

Third-party providers may handle information under their own privacy policies. Browser controls can block or delete cookies, although parts of the website may not work as intended. Where consent is required, we will seek it before activating non-essential tracking. We do not knowingly configure tracking to collect sensitive information without express consent.

5. Marketing choices

We may send news, offers or visitor information when you subscribe, consent or where the law permits. Opt out at any time using an unsubscribe link or by contacting us. We may still send necessary messages about an active booking, purchase or request.

6. When information may be disclosed

Where reasonably necessary, information may be disclosed to website, hosting, email, booking, payment, analytics and IT providers; accountants, insurers, advisers and contractors; delivery, event or tourism partners providing a requested service; government, emergency or regulatory bodies where authorised; or another party with your consent.

We do not sell personal information.

7. Overseas handling

Some technology, analytics, social-media, cloud or payment providers may process or store information outside Australia, and locations can change with their systems. Where required, we will take reasonable steps to ensure overseas recipients handle information appropriately. Please also review the policies of third-party services you choose to use.

8. Security, retention and data breaches

We take reasonable administrative, technical and physical steps to protect information, but no online system is completely secure. We retain information only as long as reasonably required for service, record-keeping, disputes and legal, taxation, insurance or regulatory obligations, then securely destroy or de-identify it where reasonable.

If a breach is likely to cause serious harm and the Notifiable Data Breaches scheme applies, we will assess and respond in accordance with the law.

9. Children’s privacy

Bookings for children should be made by a parent, guardian or responsible adult. We do not knowingly seek unnecessary information directly from children. Parent or guardian permission is required before we use an identifiable child’s image for marketing.

10. Access and correction

You may ask to access personal information we hold about you or request a correction. We may need to verify your identity. If a legal exception applies, we will explain the reason where required.

11. Questions and complaints

Contact us with enough detail to investigate your privacy concern. We will acknowledge and respond within a reasonable period. If you remain dissatisfied and the Privacy Act applies, you may contact the Office of the Australian Information Commissioner.

12. External links and policy updates

Our website may link to third-party platforms whose privacy practices we do not control. Review their policies before providing information. We may update this policy when our practices, services or legal obligations change; the current version and date will appear on our website.

Have a privacy question?

Contact us to request access or correction, change your marketing preferences, or raise a privacy concern.