Privacy Policy

Rundle Place Privacy Policy

Last updated: November 2025


1. About this policy

Your privacy is important to us. This Privacy Policy explains how Rundle Place collects, uses, discloses and protects your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

In this policy, “Rundle Place”, “we”, “us” or “our” includes Rundle Retail Trust ABN 46 574 879 901, the owner of Rundle Place, and its centre management and service providers.

This policy applies to:

Customers and visitors to Rundle Place

Users of our website and digital channels

Competition entrants and subscribers to our marketing

Retailers, prospective retailers and their staff

Suppliers and contractors

Job applicants and employees


2. The types of personal information we collect

The personal information we collect will depend on how you interact with us. It may include:

identification and contact details such as your name, email address, postal address and phone number

information you provide when entering competitions, promotions or surveys

information about your use of our website and digital channels

car registration details where licence plate recognition or car park systems are used

CCTV footage and other security images taken in and around the centre

information about your participation in centre events and activations

for retailers and prospective retailers, details relevant to leasing or other agreements (for example, business details and financial information)

for suppliers and contractors, details relevant to providing goods and services to us (including compliance and safety information)

for job applicants and employees, information relevant to recruitment and employment.

We may also collect certain technical and usage information automatically when you interact with our website or free Wi Fi, such as device identifiers, IP address, browser type, pages viewed and approximate location data.


3. How we collect personal information

We usually collect personal information directly from you when you:

subscribe to our email newsletter or other marketing communications

enter a competition, promotion or survey

contact us by phone, email, through our website or social media

participate in an event or activation at Rundle Place

interact with us on our website or via digital channels

apply for a lease, licence or other commercial arrangement

supply goods or services to us or work on site as a contractor

apply for a job or work for us

We also collect personal information in the centre environment when you:

attend Rundle Place and are captured on CCTV or other security systems

enter or exit car parks associated with Rundle Place, where licence plate recognition or similar technology is used

access free in centre Wi Fi or other digital infrastructure.

Where it is unreasonable or impracticable to collect personal information directly from you, we may collect it from third parties such as:

our service providers and contractors

retailers and other commercial partners

law enforcement and government agencies

publicly available sources and social media platforms

If we receive personal information that we did not ask for, we will handle it in accordance with our legal obligations, including de identifying or destroying it where appropriate.


4. Why we collect and use personal information

We collect, hold and use personal information for purposes including:

operating, managing and securing Rundle Place and associated car parks

communicating with you, including responding to your enquiries and requests

running competitions, promotions and events and contacting entrants or winners

sending you marketing communications, offers and news about Rundle Place, our retailers and partners, where permitted by law or with your consent

analysing foot traffic, visitor behaviour and centre performance to improve the customer experience

providing and improving our website, email newsletters and social media content

managing our relationships with retailers, including assessing and administering leases, licences and other agreements

engaging and managing suppliers and contractors, including safety and compliance requirements

recruiting, onboarding and managing employees and contractors

complying with legal, regulatory and risk management obligations

any other purpose you would reasonably expect, or that is made clear to you at the time of collection, or to which you consent.

You may choose not to provide certain personal information. However, this may mean we are unable to provide you with some services, respond fully to your enquiry or allow you to participate in certain activities.


5. Direct marketing and how to opt out

We may use your personal information to send you marketing communications about Rundle Place, our events, offers and promotions, and news from our retailers and partners. These communications may be sent by email, SMS, social media or other channels.

You can opt out of receiving marketing communications at any time by using the unsubscribe link in our emails, following the opt out instructions in an SMS, or by contacting us using the details below.

Even if you opt out of marketing, we may still contact you for non marketing purposes, for example in relation to competitions you have entered, operational matters, or as required by law.


6. Website, cookies and analytics

When you visit our website or interact with our digital channels, we may use cookies and similar technologies to:

make our website work properly and remember your preferences

understand how our website is used and improve its performance

measure the effectiveness of our marketing and advertising

personalise content and offers where permitted by law

You can usually adjust your browser settings to refuse cookies or to alert you when cookies are being used. If you disable cookies, some parts of our website may not function properly.

We may use third party analytics and advertising tools (for example, Google Analytics and social media advertising platforms). These third parties may collect or receive information from our website and use it to provide measurement services and targeted ads.


7. CCTV, security and Wi Fi

Rundle Place and associated car parks operate CCTV and other security systems. Images and related information are collected for security, safety, loss prevention, incident management and insurance purposes, and may be provided to law enforcement and other authorities where lawful.

If you access free Wi Fi or other in centre digital services, we and our service providers may collect information about your device and how you use the service, including session times, pages visited and approximate location within the centre. This information helps us manage the service, improve the centre experience, and understand visitor behaviour in aggregate.

Where this information identifies you or your device, we treat it as personal information and manage it in accordance with this policy.


8. Disclosure of personal information

We may disclose your personal information to:

the owner of Rundle Place and its related entities

our professional advisers, service providers and contractors who assist us with centre operations, marketing, security, IT, data hosting, payment processing, HR, legal and other services

retailers and commercial partners in connection with promotions, events and operational matters

law enforcement, regulators and government agencies where required or authorised by law

insurers and claims managers in connection with incidents or claims

prospective purchasers, investors or financiers of Rundle Place or related entities, subject to appropriate confidentiality arrangements.

Some of our service providers and data hosting arrangements may be located outside Australia. Where personal information is transferred overseas, we will take reasonable steps to ensure that the recipient protects your information in a way that is consistent with the Australian Privacy Principles.

We do not sell your personal information.


9. Storage and security

We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. These steps include:

physical security measures at our premises

access controls and authentication measures for our systems and records

firewalls, encryption and other technical safeguards for electronic records

contractual obligations requiring our service providers to protect personal information.

Personal information is stored in Australia or overseas in physical files, electronic systems or cloud based platforms, as part of our usual business practices.

We retain personal information only for as long as it is needed for the purposes described in this policy, or as required by law, after which we will take reasonable steps to destroy or de identify it.

If we become aware of a data breach that is likely to result in serious harm, we will assess and manage the breach in accordance with our legal obligations, including notifying affected individuals and the Office of the Australian Information Commissioner where required.


10. Access to and correction of your personal information

You have the right to request access to the personal information we hold about you, and to ask us to correct it if you believe it is inaccurate, incomplete or out of date.

To make a request, please contact us using the details below. We may need to verify your identity before providing access or making corrections. In some cases we may refuse access or correction where permitted by law, in which case we will explain why.

We do not usually charge a fee for access or correction, but we may charge reasonable administrative costs in some circumstances.


11. Questions, concerns or complaints

If you have any questions about this Privacy Policy or how we handle your personal information, or if you wish to make a complaint, please contact our Privacy Officer or the Centre Manager in the first instance.

We will acknowledge your complaint and aim to investigate and respond within a reasonable time.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC):

Website: oaic.gov.au

Phone: 1300 363 992


12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies or legal requirements. The most current version will always be available on our website. We encourage you to review it periodically.


13. Contact details

Rundle Place Privacy Officer / Centre Management

Rundle Place
Level 3, 77 91 Rundle Mall
Adelaide SA 5000

Phone: 08 8227 2369