Privacy Policy

1. Data Controller

The data controller responsible for personal information collected through this Website is:

2. Personal Information We Collect

We collect personal information only to the extent necessary to provide you with our services and to operate the Website effectively. The categories of personal information we collect are set out below.

2.1 Contact and Reservation-Request Data

When you submit an enquiry, reservation request, or other communication through the Website, we may collect:

• Your full name
• Email address
• Telephone number
• Postal address (where provided)
• Preferred arrival and departure dates
• Room or accommodation preferences
• Number of guests
• Special requests or notes you choose to include
• Correspondence content and records of your communications with us

2.2 Device and Technical Data

When you visit the Website, our servers and analytics tools automatically collect certain technical information, including:

• IP address
• Browser type and version
• Operating system and device type
• Referring URL and pages visited on the Website
• Date, time and duration of your visit
• Clickstream data and navigation paths

2.3 Consent and Preference Data

Where we rely on your consent for a particular processing activity — for example, sending you promotional communications or placing non-essential cookies on your device — we record the fact of that consent, the date and time it was given, and the specific purposes for which it was granted, so that we can demonstrate compliance with our legal obligations.

2.4 Special-Category Personal Data

We do not seek to collect special-category personal data through the Website. If you voluntarily include such information in a free-text field (for example, in a special-requests box), we will handle it with an additional level of care and will use it only to fulfil the specific request to which it relates. We will not retain it for any other purpose.

2.5 Casino Age Verification

Access to our casino facilities requires guests to be aged 18 or over. Where the Website includes any function relating to casino enquiries or registrations, we collect the confirmation you provide regarding your age. We do not operate a real-money online casino through the Website; any casino-related enquiry handling is strictly for the physical on-site facility.

3. How We Collect Personal Information

We collect personal information in the following ways:

• Directly from you — when you complete and submit a contact form, reservation-request form or enquiry on the Website, or when you email or otherwise communicate with us.
• Automatically — through server logs, cookies and similar technologies when you browse the Website (see Section 7 below).

4. Purposes for Processing and Legal Bases

The table below sets out each purpose for which we process personal information, together with the legal basis under which we do so.

4.1 Legitimate Interests

Where we rely on legitimate interests as our legal basis, we have assessed that our interests are not overridden by your rights and interests. You may request further information about this assessment by contacting us at privacy@zorquorianroyalcourt.com.

5. Recipients of Personal Information

We do not sell, rent or trade your personal information. We may share your personal information with the following categories of recipients where it is necessary for the purposes described in this policy:

• Our employees and management — staff involved in guest services, reservations, administration and marketing, on a strictly need-to-know basis.
• IT and hosting service providers — companies that provide web hosting, email infrastructure, analytics and related technical services that support operation of the Website.
• Professional advisers — lawyers, accountants and auditors where necessary for the conduct of our business.
• Regulatory authorities and law enforcement — where we are required by law, court order or other legal process to disclose personal information.

All service providers who process personal information on our behalf are required to do so only on our instructions and to maintain appropriate security measures.

6. International Transfers of Personal Information

We are based in New Zealand and primarily process personal information within New Zealand. However, some of our service providers may operate from or store data in other countries, including countries outside New Zealand. When personal information is transferred outside New Zealand, we take steps to ensure it receives a level of protection consistent with the Privacy Act 2020, including by entering into appropriate data-transfer agreements or relying on recognised transfer mechanisms where applicable.

If you would like further information about the safeguards we have in place for international transfers, please contact us at privacy@zorquorianroyalcourt.com.

7. Cookies and Similar Technologies

The Website uses cookies and similar technologies to distinguish you from other visitors, remember your preferences, and help us understand how the Website is used.

7.1 Categories of Cookies

7.2 Managing Cookies

When you first visit the Website, you will be presented with a cookie consent notice that allows you to accept or decline non-essential cookies. You may also change your preferences at any time through the cookie settings link available on the Website, or by adjusting your browser settings to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of the Website.

8. Retention of Personal Information

We retain personal information only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. The following general retention periods apply:

When personal information is no longer required, it is securely deleted or anonymised in accordance with our internal data-management procedures.

9. Security of Personal Information

We take the security of your personal information seriously and maintain appropriate technical and organisational measures to protect it against unauthorised access, disclosure, alteration or destruction. These measures include:

• Encryption of data in transit using industry-standard protocols
• Access controls limiting personal information to authorised personnel only
• Regular reviews of our information security practices
• Staff training on data protection and information security obligations
• Secure procedures for the disposal of personal information when it is no longer needed

While we take all reasonable steps to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. If you have reason to believe that your personal information has been compromised, please contact us immediately at privacy@zorquorianroyalcourt.com.

10. Your Privacy Rights

Under the Privacy Act 2020 and other applicable law, you have the following rights in relation to your personal information:

10.1 Right of Access

You have the right to request confirmation of whether we hold personal information about you, and to obtain a copy of that information together with details of how it is being used.

10.2 Right to Correction

You have the right to request correction of any personal information we hold about you that is inaccurate, incomplete, misleading or outdated. We will correct such information promptly or, if we decline to do so, we will note your request alongside the relevant record.

10.3 Right to Withdraw Consent

Where we process your personal information on the basis of your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

10.4 Right to Object

You have the right to object to the processing of your personal information where we rely on our legitimate interests as the legal basis for that processing. We will consider your objection and cease processing unless we have compelling legitimate grounds that override your interests, or where processing is necessary for the establishment, exercise or defence of legal claims.

10.5 Right to Erasure

In certain circumstances, you may request that we delete personal information we hold about you — for example, where it is no longer necessary for the purpose for which it was collected, or where you have successfully objected to its processing. This right is subject to any overriding legal obligation we may have to retain the information.

10.6 Right to Data Portability

Where we process your personal information by automated means on the basis of your consent or a contract with you, you may request that we provide that information to you in a structured, commonly used and machine-readable format.

10.7 Right to Restrict Processing

In certain circumstances, you may request that we restrict the processing of your personal information — for example, while the accuracy of the information is being verified following a correction request.

10.8 Exercising Your Rights

To exercise any of the rights described above, please submit a written request to:

We will respond to your request within 20 working days of receipt, in accordance with the Privacy Act 2020. We may ask you to verify your identity before processing your request. There is generally no charge for making a request, although we reserve the right to charge a reasonable fee where a request is manifestly excessive or repetitive.

11. Automated Decision-Making

We do not currently use automated decision-making processes, including profiling, that produce legal or similarly significant effects on you through this Website. Should we introduce such processes in the future, we will update this policy and, where required by law, seek your consent or provide you with the opportunity to request human review.

12. Minimum Age and the Website

The Website is not directed at persons under 18 years of age. We do not knowingly collect personal information from individuals under 18 through the Website. If you believe that we have inadvertently collected personal information from a person under 18, please contact us at privacy@zorquorianroyalcourt.com and we will take prompt steps to delete it.

Please note that access to the casino facilities at Zorquorianroyalcourt is restricted to persons aged 18 or over.

13. Links to Third-Party Websites

The Website may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of those third parties, and this Privacy Policy does not apply to them. We encourage you to review the privacy policies of any third-party sites you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the services we offer, or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically to stay informed about how we handle your personal information. Continued use of the Website after changes are published constitutes your acknowledgement of the updated policy.

15. Complaints

If you have a concern or complaint about the way we handle your personal information, we encourage you to contact us first so that we can attempt to resolve the matter directly:

We will acknowledge your complaint promptly and aim to resolve it within 20 working days. If you are not satisfied with our response, or if you consider that we are not handling your personal information in accordance with the Privacy Act 2020, you have the right to make a complaint to the Office of the Privacy Commissioner of New Zealand:

16. Contact Us

If you have any questions about this Privacy Policy or about the way in which we handle your personal information, please contact us: