Privacy Policy

Title

Privacy Policy

The Dromana Drive In Pty. Ltd. ABN: 87 006 929 317

Last updated: 31 August 2026

1. Acknowledgement

Dromana Drive-In respects your privacy and is committed to protecting the personal information that we collect and hold about you.

This Privacy Policy explains how Dromana Drive-In collects, holds, uses, discloses, protects and manages personal information in accordance with applicable Australian privacy laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), where applicable.

By using our website, purchasing tickets or products, contacting us, participating in our events, competitions or promotions, or otherwise interacting with Dromana Drive-In, you acknowledge that your personal information may be handled in accordance with this Privacy Policy.

This Privacy Policy should be read together with our Terms of Service and any other terms or notices provided to you when you interact with us.

Dromana Drive-In may update this Privacy Policy from time to time. The current version will be made available on our website.

2. About Dromana Drive-In

In this Privacy Policy, references to:

"Dromana Drive-In"
"we"
"us"
"our"

mean The Dromana Drive In Pty. Ltd. trading as Dromana Drive-In, together with any applicable business operations conducted under that name.

Business address:
133 Nepean Highway
Dromana VIC 3936

Postal address: PO box 430 Dromana
Email: info@dromanadrivein.com.au

For privacy enquiries, please contact us using the details above.

3. The Kinds of Personal Information Which We Will Collect and Hold

The types of personal information we collect and hold will depend on how you interact with Dromana Drive-In.

Personal information may include:

3.1 Contact information

name;
email address;
telephone or mobile number;
postal or residential address;
billing or delivery address; and
other contact details you provide to us.

3.2 Transaction and purchase information

Where you purchase tickets, food, beverages, merchandise, gift cards, equipment hire or other products or services, we may collect information such as:

details of products or services purchased;
transaction date and time;
transaction value;
booking or order details;
ticket information;
seating or vehicle-related booking information, where applicable;
gift card details;
refunds, exchanges and cancellations;
purchase history; and
information required to administer the transaction.

We generally do not collect or retain complete payment card numbers, CVV numbers or other sensitive payment authentication information where payment is processed by an external payment provider.

3.3 Account and registration information

If you create an account or register with us, we may collect:

username;
email address;
password or authentication information;
account preferences;
date of birth or age information where required for a particular service;
membership or loyalty information; and
account activity.

3.4 Communications and enquiries

If you contact us, we may collect:

the contents of your correspondence;
your name and contact details;
details of your enquiry, complaint or request;
booking or transaction information relevant to the enquiry; and
information necessary to resolve your enquiry or complaint.

3.5 Marketing and promotional information

If you subscribe to marketing communications, participate in a competition, promotion or survey, or otherwise interact with our marketing activities, we may collect:

your name;
email address;
telephone number;
preferences;
responses to surveys or promotions;
competition entries; and
information about your interactions with our communications.

3.6 Website and technical information

When you use our website, we may collect information such as:

IP address;
browser type;
device type;
operating system;
pages viewed;
dates and times of visits;
referring websites;
approximate location derived from technical information;
website interactions; and
other technical or diagnostic information.

We may collect some of this information using cookies, pixels, analytics tools and similar technologies.

3.7 Event and venue hire information

If you enquire about or book an event, venue hire or private function, we may collect:

name and contact details;
organisation or business details;
event requirements;
booking information;
invoicing information;
information relating to attendees or suppliers where provided;
vehicle or equipment requirements; and
other information reasonably required to administer the event.

3.8 Equipment hire information

Where equipment is hired from Dromana Drive-In, we may collect information reasonably required to administer the hire arrangement, including:

name and contact details;
identification details where required;
details of the equipment hired;
hire dates;
security deposit information;
payment information;
return and condition information; and
information concerning loss, damage or non-return of equipment.

Where physical identification is provided as security for equipment hire, we will handle that information in accordance with applicable legal requirements and our obligations to protect personal information.

3.9 Sensitive information

We generally do not seek to collect sensitive information unless it is reasonably necessary for a particular purpose and permitted or required by law.

Sensitive information can include information relating to health, racial or ethnic origin, religious beliefs, political opinions, criminal records and other categories defined by the Privacy Act.

If you voluntarily provide sensitive information to us, we will handle it in accordance with applicable privacy laws.

4. How We Will Collect and Hold Your Personal Information

4.1 How we collect information

We may collect personal information directly from you when you:

purchase movie tickets;
purchase food, beverages or merchandise;
purchase or redeem gift cards;
make a booking;
create an account;
subscribe to our mailing list;
contact us by telephone, email, social media or other channels;
submit an enquiry or complaint;
participate in a competition, promotion or survey;
make a venue or event enquiry;
hire equipment;
apply for employment;
attend or participate in an event; or
otherwise interact with us.

We may also collect information automatically when you use our website or digital services.

In some circumstances, we may collect personal information from third parties, including:

ticketing and booking providers;
payment providers;
technology and service providers;
event partners;
marketing platforms;
publicly available sources;
social media platforms;
fraud prevention or security providers; and
other organisations where permitted by law.

Where practicable, we will collect personal information directly from you.

4.2 Cookies and similar technologies

Our website may use cookies and similar technologies to:

operate the website;
remember preferences;
maintain sessions;
understand how visitors use our website;
improve website performance;
measure advertising and marketing effectiveness; and
provide relevant marketing or advertising where permitted.

You may be able to control or disable cookies through your browser settings. Some website functionality may not operate correctly if certain cookies are disabled.

4.3 How we hold personal information

Personal information may be held in:

electronic databases;
ticketing and booking systems;
customer relationship management systems;
email and communications systems;
accounting and financial systems;
cloud-based services;
digital files;
physical records; and
systems operated by service providers on our behalf.

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure.

Security measures may include access controls, authentication, secure systems, staff procedures, contractual controls and other technical and organisational safeguards appropriate to the nature of the information.

No method of electronic transmission or storage can be guaranteed to be completely secure.

5. The Purpose for Which We Collect and Hold Personal Information

We collect and hold personal information for purposes including:

processing ticket purchases and bookings;
providing movie screenings and related services;
processing food and beverage orders;
administering Shel's Diner purchases and services;
processing gift card purchases and redemptions;
processing equipment hire;
administering venue and event bookings;
processing payments, refunds and cancellations;
communicating with customers;
responding to enquiries and complaints;
providing customer service;
administering accounts and memberships;
managing competitions, promotions and surveys;
sending marketing communications where permitted;
improving our products, services and customer experience;
understanding customer preferences and behaviour;
website administration and analytics;
preventing fraud and misuse;
maintaining security;
complying with legal and regulatory obligations;
accounting, auditing and record keeping;
managing business operations;
protecting our rights and property; and
other purposes reasonably necessary for operating Dromana Drive-In.

Where required by law, we will obtain consent before collecting, using or disclosing personal information for a particular purpose.

6. The Purpose for Which We Use and Disclose Personal Information

We may use and disclose personal information for the purposes described in this Privacy Policy.

Depending on the circumstances, personal information may be disclosed to:

employees and managers of Dromana Drive-In;
contractors and service providers;
ticketing and booking providers;
payment processors and financial institutions;
accounting and bookkeeping providers;
IT and technology providers;
website hosting and analytics providers;
marketing and communications providers;
customer relationship management providers;
professional advisers;
insurers;
event partners and suppliers where reasonably required;
debt recovery providers;
fraud prevention and security providers;
government agencies and regulators where required or authorised by law;
law enforcement agencies where required or authorised by law; and
other parties where you have consented to the disclosure.

We will not sell your personal information to third parties for their own unrelated marketing purposes.

7. Direct Marketing

We may use personal information to send you information about:

upcoming movies;
screenings;
special events;
promotions;
food and beverage offerings;
memberships or loyalty programs;
competitions;
gift cards;
venue hire;
special offers; and
other products or services offered by Dromana Drive-In.

We will only send direct marketing communications where permitted by applicable law.

You may opt out of marketing communications at any time by:

using the unsubscribe facility contained in the relevant communication;
contacting us using the details provided in this Privacy Policy; or
using any other opt-out mechanism we provide.

Opting out of marketing communications will not prevent us from sending you important service-related communications, such as booking confirmations, transaction receipts, cancellation notices or other communications necessary to administer a service you have requested.

8. Disclosure to Credit Reporting Bodies (CRBs)

Dromana Drive-In does not ordinarily provide personal information to credit reporting bodies.

However, if Dromana Drive-In provides credit or other arrangements that are subject to the credit reporting provisions of the Privacy Act, personal information may be disclosed to, or obtained from, credit reporting bodies where permitted by applicable law.

Any such disclosure will be handled in accordance with the Privacy Act and applicable credit reporting requirements.

If credit reporting applies to a particular transaction or service, additional notices may be provided to you explaining:

the relevant credit reporting body;
the types of information that may be disclosed;
the purposes for which information may be disclosed;
your rights in relation to access and correction; and
how to make a complaint.

If Dromana Drive-In does not engage in credit reporting activities, this section does not authorise us to commence such activities without complying with applicable legal requirements.

9. How You May Access Your Personal Information

You may request access to personal information that Dromana Drive-In holds about you.

To make an access request, contact us using the details set out in the Contact Us section of this Privacy Policy.

We may ask you to provide sufficient information to verify your identity before providing access to personal information.

We will generally respond to an access request within the timeframe required by applicable privacy laws.

In some circumstances, we may refuse access where permitted or required by law. If we refuse access, we will generally explain the reason for the refusal and, where appropriate, provide information about available avenues for review or complaint.

We will generally provide access free of charge, although we may charge a reasonable fee for providing access where permitted by law and after informing you of the applicable charge.

10. Correction

We take reasonable steps to ensure that personal information we collect, use or disclose is accurate, complete and up to date.

If you believe that personal information we hold about you is inaccurate, incomplete, out of date or misleading, you may request that we correct it.

To request a correction, contact us using the details in this Privacy Policy and identify:

the information you believe is incorrect; and
the correction you are requesting.

We may request information reasonably necessary to verify your identity or the accuracy of the requested correction.

If we agree that the information requires correction, we will take reasonable steps to correct it within the timeframe required by applicable law.

If we refuse a correction request, we will generally provide reasons for the refusal and information about how you may make a complaint.

11. Complaints

If you believe that Dromana Drive-In has mishandled your personal information or breached applicable privacy laws, you may make a complaint to us.

Complaints should be made in writing where possible and should include sufficient information for us to investigate the matter.

You can contact us at:

Privacy Officer
Dromana Drive-In
Email: info@dromanadrivein.com.au

We will:

acknowledge your complaint where appropriate;
investigate the circumstances;
consider relevant information;
communicate with you as reasonably necessary;
take reasonable steps to address the complaint where appropriate; and
provide you with the outcome of our investigation.

We will handle privacy complaints in accordance with our obligations under applicable privacy laws.

If you are not satisfied with our response, or if your complaint is not resolved, you may be able to contact the Office of the Australian Information Commissioner (OAIC).

Information about making a privacy complaint to the OAIC is available through the OAIC website.

12. Disclosure to Overseas Recipients

Dromana Drive-In may use third-party service providers whose businesses, systems or data storage facilities are located outside Australia.

Depending on the services we use, personal information may be disclosed to overseas recipients in countries.

At this point in time, we do not share and/or disclose any personal information to overseas recipients.

This list must be updated to accurately reflect the countries in which Dromana Drive-In's actual overseas service providers are located.

Examples of service providers that may involve overseas disclosure or processing include providers of:

website hosting;
cloud storage;
email;
ticketing and booking systems;
payment processing;
customer relationship management;
marketing and email communications;
analytics;
website functionality; and
other business technology services.

Where we disclose personal information to an overseas recipient, we will take reasonable steps required by applicable Australian privacy law to ensure that the information is handled appropriately.

Where applicable, the Privacy Act may make Dromana Drive-In accountable for certain acts or practices of an overseas recipient.

Because technology providers may change their infrastructure, subcontractors or data storage locations, the countries in which information is processed or disclosed may change from time to time.

13. Payment Information

Payments made through Dromana Drive-In may be processed using third-party payment providers.

Where payment is processed by a third-party provider, your payment information may be collected directly by that provider in accordance with its own privacy policy and terms.

Dromana Drive-In does not generally require or retain complete payment card information where it is unnecessary for us to do so.

Transaction records may nevertheless be retained for accounting, reconciliation, refund, dispute resolution, fraud prevention and legal purposes.

14. Third-Party Websites and Services

Our website or communications may contain links to websites, applications or services operated by third parties.

Third-party websites and services are not controlled by Dromana Drive-In.

If you access a third-party website or service, that organisation's privacy policy will apply to its handling of your personal information.

We recommend that you review the privacy policy of any third-party service before providing personal information.

15. Social Media

Dromana Drive-In may operate or maintain social media accounts and may interact with customers through third-party social media platforms.

If you interact with us through a social media platform, the platform operator may collect and handle your personal information in accordance with its own privacy policy.

Information that you voluntarily provide to us through social media may also be collected and handled by Dromana Drive-In in accordance with this Privacy Policy.

We may repost or share publicly available customer content where permitted by the relevant platform and applicable law.

16. Photography, Video and Events

Dromana Drive-In may photograph or record activities at the venue for purposes including:

security;
operational management;
documenting events;
promotional activities;
social media;
advertising; and
marketing.

Where we intend to use identifiable images of individuals for promotional purposes, we will take reasonable steps to do so in accordance with applicable law and any relevant notices or consents.

If you do not wish to appear in promotional photography or video, you may contact us using the details in this Privacy Policy.

Security and CCTV footage, where used, may be handled separately from promotional photography and may be retained and disclosed where reasonably necessary for security, safety, incident investigation or legal purposes.

17. CCTV and Security Information

Dromana Drive-In may use CCTV, security cameras or other security systems at the venue.

These systems may collect images or other information about individuals who enter or use parts of the premises.

Security information may be used for purposes including:

protecting customers and staff;
preventing theft and property damage;
investigating incidents;
maintaining venue security;
managing safety;
assisting law enforcement where appropriate; and
complying with legal obligations.

Access to security recordings will be restricted to authorised persons and may be disclosed where permitted or required by law.

18. Children and Young People

Dromana Drive-In provides entertainment and services that may be accessed by children and young people.

We do not knowingly collect personal information from children for purposes that are unnecessary for providing our services.

Where a child or young person provides personal information, we may take reasonable steps appropriate to the circumstances to ensure that the collection and handling of that information complies with applicable law.

Parents or guardians who believe that we have collected personal information about a child inappropriately may contact us.

19. Data Quality

We take reasonable steps to ensure that personal information we collect is accurate, complete and up to date.

The accuracy of information may depend partly on the information provided to us.

You can assist us by notifying us if your contact details or other personal information changes.

20. Retention and Destruction of Personal Information

We will retain personal information only for as long as reasonably necessary for the purposes for which it was collected, or for as long as required or permitted by law.

The length of time information is retained may depend on:

the type of information;
the purpose for which it was collected;
whether you continue to have an account or relationship with us;
accounting and taxation requirements;
legal requirements;
dispute resolution requirements;
security requirements; and
other legitimate business purposes.

When personal information is no longer required, we will take reasonable steps to destroy or de-identify it, subject to applicable legal and operational requirements.

21. Data Breaches

Dromana Drive-In takes reasonable steps to protect personal information from unauthorised access, loss, misuse, interference, modification or disclosure.

If we experience a data breach involving personal information, we will assess the incident and take appropriate steps in accordance with applicable laws, including the Notifiable Data Breaches scheme where applicable.

Where required by law, we will notify affected individuals and/or the OAIC.

22. Anonymity and Pseudonymity

Where it is lawful and practicable, you may interact with Dromana Drive-In anonymously or using a pseudonym.

However, there are circumstances where we cannot reasonably provide a service without identifying you.

For example, identification may be required to:

process a ticket or booking;
process a refund;
administer an account;
process equipment hire;
verify a payment;
respond to a specific access request;
comply with legal obligations; or
investigate a security or fraud matter.

23. Government Identifiers

Dromana Drive-In will not adopt, use or disclose government-related identifiers, such as Medicare numbers or tax file numbers, as its own identifier of an individual except where permitted or required by law.

24. Use of De-identified and Aggregated Information

We may use information that has been aggregated or de-identified so that it no longer reasonably identifies an individual.

This information may be used for purposes including:

analysing attendance;
understanding customer preferences;
improving our services;
planning screenings and events;
analysing food and beverage sales;
business planning;
reporting; and
marketing and operational analysis.

25. Third-Party Service Providers

Dromana Drive-In may engage third-party service providers to perform functions on our behalf.

These providers may include:

ticketing providers;
payment processors;
accounting providers;
IT providers;
cloud storage providers;
website providers;
email and marketing providers;
analytics providers;
security providers;
professional advisers;
booking platforms; and
other contractors and suppliers.

Where appropriate, we will require service providers handling personal information on our behalf to take reasonable steps to protect that information.

26. Changes to This Privacy Policy

We may change this Privacy Policy from time to time to reflect:

changes to our business;
changes to our services;
changes to technology;
changes to our service providers;
changes to applicable laws or regulations; or
changes to our privacy practices.

The updated Privacy Policy will be published on our website.

The "Last updated" date at the beginning of this Privacy Policy indicates when it was most recently revised.

27. Contact Us

If you have questions about this Privacy Policy, wish to access or correct your personal information, or wish to make a privacy complaint, please contact:

Privacy Officer
The Dromana Drive In Pty. Ltd.
133 Nepean Highway
Dromana VIC 3936
Postal Address: PO Box 430, Dromana
Email: info@dromanadrivein.com.au

We will endeavour to respond to privacy enquiries and requests within the timeframes required by applicable law.

28. Further Information

Further information about privacy and the Australian Privacy Principles is available from the Office of the Australian Information Commissioner (OAIC).

The OAIC provides guidance about privacy rights, access and correction requests, privacy complaints, credit reporting and the Australian Privacy Principles.

End of Privacy Policy

Last updated: 31 August 2026