Privacy Policy

This Privacy Policy explains how Third Wave BBQ (“we”, “us”, “our”) collects, uses, discloses and protects personal information when you make a booking with us, contact us, or when our staff use our booking and front-of-house software (including the Third Wave Host app). We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and marketing messages in accordance with the Spam Act 2003 (Cth).

1. Information we collect

We collect only the information we need to take and manage your booking and to run our venues:

• Booking & contact details — your name, email address, phone number, party size, date, time and seating area, and any notes you provide (special requests, dietary requirements, or the occasion).
• Payment information — where a booking requires a deposit or a pre-authorisation hold, your card is entered and processed by our payment provider (Stripe). We do not receive or store your full card number; we retain only a payment reference, the amount, and its status.
• Communication preferences — your consent choices for confirmations, reminders and any marketing, and a record of messages we have sent you.
• Staff account information — for our team members who use the software, an email address and role. This section is not about guests.
• Technical information — a login session cookie for staff, and, where enabled on our booking page, standard analytics data (see “Analytics” below).

2. How we use your information

• To create, confirm, change and manage your booking.
• To send you booking confirmations, changes, reminders and other service messages by email or SMS.
• To take, hold or refund a deposit in line with our booking terms.
• To recognise you as a returning guest and honour noted preferences (e.g. dietary needs).
• To operate, secure and improve our venues and our software.
• To send you marketing about our venues only where you have opted in; you can opt out at any time (see “Your choices”).

3. When we disclose information

We do not sell your personal information. We share it only with service providers who help us operate, and only for the purposes above:

• Stripe — payment processing for deposits and holds.
• Cellcast — sending SMS messages.
• Our email delivery provider — sending email messages.
• Hosting and infrastructure providers — who store the data securely on our behalf.

These providers are bound to use the information only to provide their service to us. We may also disclose information where required or authorised by law.

4. Analytics

Our public booking page may use standard analytics tools (such as Google Analytics or the Meta Pixel) to understand how the page is used and to measure our advertising. This is enabled per venue and, where active, is disclosed on the booking page. These tools may set cookies; you can control cookies through your browser settings.

5. Storage & security

Your information is stored on secured servers. Payment secrets and provider credentials are held encrypted, access is restricted to authorised staff, and connections to our booking page and app are encrypted in transit (HTTPS). No method of transmission or storage is completely secure, but we take reasonable steps to protect your information from misuse, loss and unauthorised access.

6. How long we keep it

We keep booking and guest information for as long as needed to provide our service, recognise returning guests, meet our legal and tax obligations, and resolve disputes. Where information is no longer needed, we delete or de-identify it.

7. Your choices and rights

• Access & correction — you may request access to the personal information we hold about you and ask us to correct it. Contact us using the details below.
• Deletion — you may ask us to delete your personal information at any time. See Request deletion of your data for how, what is deleted, and the limited records we are legally required to keep.
• Marketing opt-out — every marketing message includes an unsubscribe option, and you can reply STOP to marketing SMS. Opting out of marketing does not stop essential service messages about a booking you have made.
• Complaints — if you believe we have mishandled your information, contact us first. If you are not satisfied, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

8. Children

Our booking service is intended for adults making a reservation. We do not knowingly collect personal information from children except as part of a booking made by a parent or guardian (for example, a party size that includes children).

9. Changes to this policy

We may update this policy from time to time. The current version is always available at this page, and the effective date above shows when it was last updated.

10. Contact us

For any privacy question or request, contact us at [email protected].