Cookie Policy

Strictly necessary: the cookie-consent record itself (og_consent), which remembers your choice for twelve months so the banner doesn't reappear, and the session cookie that keeps the booking form secure.

Analytics: with your consent we load anonymised analytics — page views, referral source and device type — to understand which pages help and which don't. IP addresses are truncated before storage.

Preference: remembers display choices such as language and the last menu tab you viewed.

No advertising cookies, no cross-site trackers, no social-media pixels fired without consent, and no fingerprinting. If a third-party tool would add one, we don't use that tool.

Embedded content such as the map on the contacts page may set its own cookies when you interact with it — that happens only after you choose to load the embed.

The banner on first visit offers Accept All and Essential Only — both are one click and neither is dark-patterned.

To change your mind later, clear the og_consent cookie and reload, or email us and we'll reset it from our side.

Essential functions — the consent record and secure form sessions — can't be switched off because the site genuinely cannot work without them.

Analytics runs under a data-processing agreement with IP anonymisation and a twelve-month retention cap.

Font libraries and the CSS framework load from public CDNs which receive a standard request from your browser — no personal data beyond what any web request carries.

Consent record: 12 months. Session cookie: expires when the browser closes. Analytics identifiers: 14 months, then anonymised. Preference cookies: 6 months.

All cookies are set with Secure and SameSite=Lax attributes; none are accessible to other domains.

Cookie questions go to the same privacy contact as everything else: [email protected] or +61 3 8648 1900.

This policy sits beside the Privacy Policy — the two documents work together and are reviewed at the same annual pass.