Compliance
Legal & compliance for restaurant marketing in Australia
None of this is the fun part of marketing your venue, and most owners never think about it until something goes wrong: a fine for an unsolicited SMS, a complaint upheld against a "fresh, local, award-winning" claim you can't actually back up, or a giveaway that turns out to have needed a permit you didn't know existed. This is the plain-English version of the rules that actually apply to independent Australian restaurants, cafés, bars and pubs running their own marketing.
Key takeaways
- The Spam Act 2003 requires consent, clear sender identification, and a working unsubscribe on every marketing email and SMS, no exceptions for small business.
- Australian Consumer Law bans misleading or deceptive conduct, so specific claims like "fresh", "local" or "award-winning" need a specific, checkable basis.
- Running a competition or giveaway on social media can trigger a state-based trade promotion permit requirement depending on the prize value and your state, this is the gotcha most venues never check.
- This article is general information, not legal advice. Rules change and vary by state, always verify current requirements before you act.
Why this matters more than it looks like it does
Most compliance problems in restaurant marketing don't come from anything malicious. They come from an owner or a well-meaning team member firing off a quick SMS blast, writing "award-winning pizza" on a whim, or launching a "tag three friends to win" Instagram post on a Friday afternoon without a second thought. None of that feels risky in the moment. But regulators, and increasingly customers who know their rights, do notice, and the fixes are cheap while the mistakes are avoidable. This isn't about fear, it's about knowing the actual rules so you can market confidently within them.
The Spam Act 2003: consent, sender ID, unsubscribe
If you send marketing by email or SMS in Australia, the Spam Act 2003 applies to you regardless of your venue's size. It rests on three requirements, and all three need to be true for every message.
Consent. You need consent to send commercial electronic messages. This can be express consent (someone ticks a box, signs up on a form, or gives you their number specifically to receive offers) or reasonably inferred consent from an existing relationship, for example a customer who's given you their details as part of a booking or loyalty program in a way that makes it reasonable to assume they expect marketing. What doesn't count: buying a list, scraping numbers from business cards left in a bowl without ever mentioning marketing messages, or adding people because a staff member has their number in a personal phone.
Identification. Every message must clearly identify who sent it and how to contact your business. A message that just says "20% off tonight!" from an unrecognisable number or sender name doesn't meet this bar. Include your venue's name plainly.
Unsubscribe. Every message needs a functional way to opt out, and it has to actually work and be actioned within a reasonable time (the Act specifies a short window). If your unsubscribe link is broken or your SMS platform doesn't support STOP, that's a compliance gap, not a technical inconvenience.
The practical fix for most venues is straightforward: collect consent properly at the point of signup (a form at the till, an opt-in checkbox on your booking flow, a physical sign-up sheet with a clear marketing statement above it), keep a basic record of when and how someone opted in, and use an email and SMS platform that handles sender ID and unsubscribe automatically rather than sending marketing texts from a personal phone.
Australian Consumer Law: what you can and can't claim
Australian Consumer Law (ACL) prohibits misleading or deceptive conduct in trade or commerce, and marketing claims sit squarely inside that. The test isn't whether you meant to mislead, it's whether the overall impression a reasonable customer would take from your claim is accurate. This is where a handful of everyday menu and marketing words carry more risk than owners expect.
"Fresh" implies not frozen, not reheated from a previous batch, made close to serving. If some of what you serve is genuinely fresh and some isn't, be specific about which dishes the claim applies to rather than using it as a blanket description.
"Local" or "locally sourced" implies a meaningful proportion of your ingredients genuinely come from nearby suppliers or growers. If one specialty item is local and the rest of the menu isn't, say so about that item specifically rather than letting the word describe the whole kitchen.
"Award-winning" needs an actual award, from an actual body, that you could name if a customer asked. A "top pick" from a small blog, a positive TripAdvisor ranking within a suburb, or an internal "customer favourite" tag isn't the same thing and shouldn't be marketed the same way.
"Healthy", "low-calorie" or similar claims about food carry extra weight because they intersect with food standards regulation as well as ACL, and they need to be genuinely substantiated, not just directionally true.
The general rule that covers all of these: if a customer challenged the claim and asked you to prove it, could you? If the honest answer is "not really", either substantiate it properly before you use it, or soften the language to something you can stand behind, "made fresh daily in-house" instead of just "fresh", or naming the specific supplier instead of a vague "local" claim.
The giveaway trap: trade promotion permits
This is the one most independent venues have genuinely never heard of, and it's worth reading carefully even if you've run giveaways before without issue. In Australia, competitions where winners are chosen by chance (a random draw, "tag a friend and we'll pick a winner") rather than skill can be classified as a lottery or trade promotion under state and territory gambling and trade promotion legislation. Depending on the state and the total prize value, running one can require a permit or authority from the relevant state regulator before you launch it, not after.
As a general pattern across Australian states, low-value giveaways with a modest prize pool are often exempt or fall under a simplified process, while giveaways above a certain prize value threshold typically require a formal permit application, sometimes with a processing fee and a lead time of days to weeks. Which state you need to apply in generally follows where your entrants are based, which matters a lot for a social media competition open nationally, not just where your venue physically sits.
Because thresholds, fees and exemptions differ by state and are updated periodically, the responsible approach is: before you plan a giveaway with a prize of meaningful value, check the current rules with your state's regulator (for example, NSW Fair Trading or VIC Consumer Affairs handle this in their respective states) rather than assuming last year's rules, or another state's rules, still apply. A quick check before launch is a much smaller task than unwinding a competition that turns out to have needed a permit.
A simple, lower-risk alternative many venues use: run a "everyone who enters gets X" style offer (a free entrée voucher, a discount code) rather than a single random-draw prize. Skill-based entries, like "caption this photo" judged on merit rather than drawn randomly, are also generally treated differently to pure chance draws, but the exact line depends on how the promotion is structured, so this is still worth confirming rather than assuming.
A few other things worth knowing
A handful of smaller items that round out the picture, each worth a quick mention rather than a full section:
- Testimonials and reviews. Never fabricate a customer review or quote. Beyond the trust problem, presenting a fake testimonial as genuine is itself a form of misleading conduct under ACL.
- Influencer and gifted content. If you're gifting meals in exchange for a post, current guidance expects the relationship to be disclosed (#ad, #gifted or similar), both by the influencer and, ideally, reinforced in how you brief them.
- Pricing claims. "Was/now" discount pricing needs the "was" price to have genuinely applied for a reasonable period beforehand, not to be invented purely to make a discount look bigger.
- Data collected via signup forms or loyalty programs falls under Australian Privacy Principles once your venue meets the relevant threshold or if you're part of a franchise or group that does; keep collection purposeful and don't repurpose a booking list for unrelated marketing without telling people.
A quick self-check
Before your next campaign, run through this:
- Does everyone on my SMS/email list have genuine consent, and can I show where it came from?
- Does every marketing message clearly show my business name and a working unsubscribe?
- Could I substantiate every specific claim ("fresh", "local", "award-winning", "healthy") in my current marketing if challenged?
- If I'm planning a giveaway, have I checked this state's current trade promotion permit rules for this prize value?
- Are all reviews and testimonials I'm using genuine and attributable to real customers?
None of this needs a lawyer on retainer for a typical independent venue. It needs five minutes of honest self-checking before you hit send or publish, which is a lot cheaper than fixing a complaint after the fact.
FAQ
Do I need consent before sending marketing SMS or emails to customers?
Under the Spam Act 2003, yes. You need consent (express or reasonably inferred from an existing customer relationship), clear identification of your business as the sender, and a working unsubscribe option in every message. A signup form at the till or a booking-system opt-in gives you a defensible record of that consent. A scraped list from business cards in a bowl does not.
Can I say my food is "fresh" or "local" in my marketing?
You can, provided it's true and you could back it up if asked. Australian Consumer Law prohibits misleading or deceptive conduct, so a specific, checkable claim needs a specific, checkable basis. "Locally sourced" implies most ingredients genuinely come from nearby suppliers; "fresh" implies not frozen or reheated. If a claim wouldn't survive a customer asking you to prove it, soften it or drop it.
Do I need a permit to run an Instagram giveaway for my restaurant?
Sometimes, and it depends on your state and the prize value. Some Australian states require a trade promotion permit or lottery authority for competitions above a certain prize threshold, particularly where winners are chosen by chance rather than skill. Rules and thresholds vary by state and change over time, so check your state regulator's current requirements before you launch, not after.
This article is general information for Australian restaurant and hospitality owners, not legal advice. Laws and thresholds vary by state and territory and change over time. Verify current requirements with the relevant regulator, or a qualified professional, before acting.
Want marketing that's built right the first time?
The Playbook shows you how to run compliant campaigns yourself. Or have our team handle the strategy and the details for you.