Privacy policy

Last updated: 17 September 2026

Zivaan Pty Ltd trading as Angelo’s Cabarita (“Angelo’s”, “we”, “us” or “our”) operates Angelo’s Cabarita at Prince Edward Park, Phillips Street, Cabarita NSW 2137 and angeloscabarita.com.au. This policy explains how we handle personal information when you visit our website, make or cancel a reservation, enquire about an event, purchase from us, apply for work or contact our team.

Privacy enquiries and requests: email privacy@abia.solutions or our General Manager at gm@angeloscabarita.com.au, or call (02) 9743 2225. ABIA assists us with website, IT and privacy enquiries. You can contact Angelo’s directly about information held for our business.

At a glance: we use OpenTable for restaurant reservations and Tripleseat for function and wedding enquiries. We also receive bookings from referral services. Cancelling a booking does not automatically delete all related information, close a provider account or update every separate system. You can ask us to explain, correct or assess deletion of the information we hold.

1. Information we collect and why

Depending on your dealings with us, we collect and hold:

• Contact and booking details: name, email address, telephone number, reservation date and time, party size, booking source, confirmations, cancellations, attendance and relevant guest notes.
• Event details: organiser and company details, occasion, guest numbers, preferred dates, packages, menus, seating arrangements, supplier details, quotes, agreements and event correspondence.
• Service requirements: dietary needs, allergies, accessibility requirements and preferences you choose to provide. Some of this may reveal health information or other sensitive information. Please provide only what we need to assist you. We seek consent where required and use this information for the relevant service, rather than advertising.
• Purchase and payment records: invoices, deposits, receipts, refunds, payment status, transaction references and information needed to administer purchases, vouchers or event tickets. Card processing is explained below.
• Communications and preferences: enquiries, feedback, complaints, privacy requests and records of marketing choices.
• Job applications: contact details, work eligibility, availability, experience, language skills, resumes and references you supply through our recruitment form. We use these to assess and respond to applications.
• Website information: IP address, device and browser information, approximate location, pages viewed, referral information, cookie identifiers and website interactions. These can be personal information; they are not necessarily anonymous.

We collect information directly from you, through our website and booking providers, and from people arranging a reservation or event for you. If you provide another person’s details, please have their permission where required and direct them to this policy. We use the information to handle enquiries, provide dining and event services, communicate about bookings, process transactions, administer our business, protect systems and resolve complaints or legal issues.

You may make a general enquiry anonymously or under a pseudonym where practical. If you do not provide information needed for a booking, payment, event or verified privacy request, we may be unable to complete that service. Please do not send full card numbers, security codes, identity documents or unnecessary medical details through ordinary email or enquiry forms.

2. Reservations, events and referral services

OpenTable

Our website’s restaurant reservation links lead to OpenTable. We also enter bookings received by phone, email or referral into our reservation system. This can create an Angelo’s booking or guest record without you creating an OpenTable account. Relevant contact details, booking history, requests and communications may be held in that system to manage your visit.

OpenTable provides services to us and also operates its own diner platform. Its separate account, platform uses, sharing choices and retention are explained in the OpenTable privacy policy. Contact us about Angelo’s records; contact privacy@opentable.com about OpenTable’s own records or account. We will help identify which request is needed.

Tripleseat

Our function and wedding enquiry links use Tripleseat. The forms may display a Concord Function Centre account name alongside Angelo’s branding. Information submitted for an Angelo’s enquiry is available to the team managing that enquiry in the shared event-management account. It may include your contact details, event requirements and correspondence, and subsequently quotes, agreements and payment records.

Tripleseat supplies the event-management service; we remain responsible for our handling of the event information. See the Tripleseat privacy policy. Contact Angelo’s first about your event record, or privacy@tripleseat.com about Tripleseat’s own processing. Archiving or using a recoverable delete function is not the same as permanent erasure.

AGFG, WOWAPPS and other referral channels

We may receive reservation requests from the Australian Good Food Guide (AGFG), including requests delivered through WOWAPPS. We use the booking details supplied to check availability, respond to the request and, if accepted, record the reservation in OpenTable. This can leave separate records with the referral service, in our correspondence and in our reservation system. AGFG, WOWAPPS and OpenTable are separate services.

A cancellation recorded in one service may not automatically update another service or stop its reminders. If you contact us to cancel a referred booking, tell us the original booking channel where you know it so we can help reconcile the records. Please contact us if a reminder arrives after cancellation. We will investigate our records and the relevant provider’s involvement, rather than assume the reminder proves an active booking.

See AGFG’s privacy policy and WOWAPPS’ privacy policy. These services explain their own collection and use of information. This does not remove our responsibility for information we hold or control, or for disclosures we make.

3. Card details and payment information

Depending on the booking or purchase, a provider may request a card to secure a reservation, collect a deposit or process a payment. The terms shown for that booking or transaction explain any applicable charges. This privacy policy does not change those terms.

Payment services, including Stripe where used in the relevant flow, process card information separately from ordinary booking details. Our team may have access to payment status, references, authorisations and limited card information such as a masked number. The information available depends on the provider and the transaction. See Stripe’s privacy policy.

Encryption, masking, removing a saved payment method and permanently deleting payment records are different things. Cancellation alone does not establish that a provider has erased card data or transaction records. A provider may retain information for legal, financial or fraud-prevention purposes. On request, we will check the relevant payment flow and explain what we can verify, including any provider confirmation still needed.

4. Who receives information

Information may be available to staff and contractors who handle your enquiry, reservation, event, payment or support request, including the event team operating our Tripleseat account. We use service providers for hosting, website maintenance, email, forms, bookings, event administration, payment processing, analytics and advertising measurement. ABIA provides website and IT support. Relevant information may also be disclosed to suppliers you ask us to coordinate, professional advisers, insurers, regulators or authorities where necessary and lawful.

We do not sell customer contact lists. Website advertising and measurement tools nevertheless involve sharing technical and interaction information with their providers, as described below. A service provider’s own policy applies to its independent activities; our obligations continue to apply to information handled on our behalf.

5. Cookies, analytics and advertising

The website uses Google Analytics and Google tags, Meta Pixel and Meta Conversions API/OpenBridge, Microsoft Clarity and related plugins. These help us understand site usage, diagnose problems, measure advertising and build advertising audiences. Information may include page URLs, device identifiers, IP addresses, approximate location, clicks, scrolling and other interactions, including booking-link, enquiry-link, voucher, telephone and email clicks. Clarity can provide session replays of website interactions.

External booking pages, embedded content, maps, fonts and social links may also disclose technical information to their providers and use their own cookies. Read the Google, Meta and Microsoft privacy notices for their practices and controls.

You can manage cookies through your browser and advertising preferences through the relevant provider. Blocking cookies may affect website features and does not necessarily stop server-side event reporting or delete information already collected. Contact us about objections to or questions about our use of your information. We obtain consent where required by applicable law.

6. Marketing choices

We send promotional email or SMS where we have the consent required by law. Making a booking or reading this policy is not, by itself, agreement to unrelated marketing. Newsletter and promotional choices are separate from handling your enquiry. You can unsubscribe using the instructions in a message or contact us. We action requests to stop our commercial electronic messages within five working days.

Necessary booking, cancellation, event, payment and privacy-request communications are different from promotions. Unsubscribing does not itself cancel a reservation or erase its records. Provider marketing preferences may need to be changed separately. We may retain a minimal suppression record so that an unsubscribe is respected.

7. Storage, security and overseas processing

Records may be held in our website database, email, booking and event systems, business files and backups. Our website hosting is provided through VentraIP in Australia. That does not mean all information stays in Australia: booking, payment, communications and analytics providers may process information overseas.

Overseas processing can include the United States; Stripe also identifies India in its international transfer information. Other locations depend on the provider, its support teams and subcontractors. The linked provider policies give further details; contact us for information about the services involved in your particular booking. We take reasonable steps required by applicable law concerning overseas disclosures.

We take reasonable steps to protect information against loss, misuse and unauthorised access or disclosure, including appropriate access restrictions and safeguards for the systems we use. No online service or transmission can be guaranteed completely secure. If a data incident occurs, we assess it and make any notifications required by law.

8. How long information is kept

Our retention policy is to keep personal information only while needed for a permitted purpose or a legal retention requirement, and to take reasonable steps to destroy it or de-identify it when it is no longer needed. There is no single retention period covering every booking, enquiry and provider. In particular:

• Reservations and enquiries: the relevant period depends on completing or cancelling the service, necessary follow-up, and any outstanding payment, complaint or dispute. Guest profiles and booking history can remain after a visit or cancellation; they are not automatically erased by a change in booking status.
• Events and agreements: relevant records may be needed through planning, delivery, payment and the resolution of contractual or insurance matters. Routine guest notes do not automatically need to be kept for as long as a contract.
• Financial records: company financial records generally must be kept for at least seven years after the relevant transactions are completed. This does not justify retaining every enquiry, dietary note or full card number for seven years.
• Marketing: contact information is used for permitted marketing while the relevant permission continues; withdrawal stops that use. Limited consent and suppression records may remain to demonstrate and respect your choice.
• Applications, correspondence and technical records: retention depends on the recruitment process, support or complaint involved, security needs and applicable obligations. Website form records do not all have automatic expiry enabled; deletion can require a manual review.

Information subject to a genuine legal hold or unresolved dispute may need to be retained for that purpose. Retention decisions should concern the records actually needed, not an entire customer profile by default. Ask us for the basis and applicable period for a particular record.

OpenTable, Tripleseat and other providers apply their own retention rules to information they hold for their own purposes. We do not promise a fixed deletion deadline for those records without confirmation. For information held on our behalf, we assess the request and use the provider’s available privacy processes. Backups, archives, exports and email copies must also be considered. Where immediate erasure of a backup is technically impracticable, appropriate restrictions and eventual deletion need to be addressed; we will explain any relevant limitation rather than describe a recoverable record as erased.

9. Access, correction and deletion requests

You can ask us what personal information we hold about you, how it was collected and disclosed, request access or correction, withdraw a relevant consent, or ask us to assess deletion or de-identification. Email the contacts above with enough detail to locate your records, such as the booking date and the email address used. We may reasonably verify your identity or an authorised representative’s authority before releasing or changing information. Please do not send full card details or identity documents unless we arrange an appropriate method.

Tell us whether your request concerns Angelo’s records, a particular booking, an event enquiry, a payment method or a provider account. We will distinguish those requests and explain any necessary provider involvement. A request about Angelo’s records is not automatically a request to close your OpenTable account. Deleting history or account information can affect saved preferences, records and features; the provider should confirm any effect on future bookings or use of an email address.

We will assess the information we hold or control, including relevant service-provider records. If access, correction or deletion cannot be completed in full, we will explain the reason, any lawful retention requirement or technical limitation, and the available complaint route. Australian privacy law does not provide an unconditional right to erase every record immediately. We do not charge for making a privacy request; if a lawful access charge is proposed, we will explain it in advance.

10. Complaints and contact

Please direct a privacy complaint to privacy@abia.solutions or gm@angeloscabarita.com.au, addressed to the Privacy Contact, Angelo’s Cabarita. You can also write to the venue address above or call (02) 9743 2225. We will acknowledge your concern, investigate with the relevant team and aim to provide a substantive response within 30 days. If more time is needed, we will explain why and provide an expected response date. This is a response target, not a promise that every provider’s records will be erased within that period.

If you are dissatisfied, you may seek guidance or lodge a complaint with the Office of the Australian Information Commissioner (OAIC), which determines whether it can deal with the matter. We comply with privacy laws that apply to our business. This policy does not limit your statutory rights.

11. Changes to this policy

We update this page when our practices or relevant requirements change and show the revision date above. Where required, we provide further notice or obtain consent for a new use of information. A policy update does not establish that historical records have been deleted or retrospectively authorise an unrelated use. You can request a copy of this policy using the contact details above.