Privacy Policy
Selvarian Royal Manor Hotel & Entertainment Limited
Website: selvarianroyalmanor.com
Privacy enquiries: info@selvarianroyalmanor.com
Last updated: 2 July 2025
Selvarian Royal Manor Hotel & Entertainment Limited ("we", "us" or "our") respects your privacy and is committed to protecting your personal information in accordance with the New Zealand Privacy Act 2020 and its Information Privacy Principles ("IPPs"). This Privacy Policy explains how we collect, use, disclose, store and protect personal information when you visit and interact with our website at selvarianroyalmanor.com ("Website").
Please read this policy carefully before using our Website or submitting any personal information to us. By continuing to use the Website you acknowledge that you have read and understood this policy.
1. Data Controller
The data controller responsible for the personal information collected through this Website is:
- Legal entity: Selvarian Royal Manor Hotel & Entertainment Limited
- Registered office:
- Privacy contact: info@selvarianroyalmanor.com
- Website: selvarianroyalmanor.com
Any questions, requests or complaints regarding the handling of your personal information should be directed to us using the privacy contact address above.
2. Personal Information We Collect
We collect personal information only to the extent necessary for the purposes set out in this policy. The categories of information we collect through the Website are described below.
2.1 Contact and Reservation-Request Information
When you submit an enquiry, reservation request, special-events inquiry or any other web form on the Website, we collect the information you provide, which may include:
- Full name
- Email address
- Telephone number
- Postal address (if provided)
- Requested arrival and departure dates
- Room or suite preference and number of guests
- Special requests or accessibility requirements
- Any other information you choose to include in a free-text message field
2.2 Device and Technical Information
When you visit the Website our web servers and associated technologies automatically record certain technical information about your device and browsing session, including:
- Internet Protocol (IP) address
- Browser type, version and language setting
- Operating system and device type
- Referring URL and the pages you visit on our Website
- Date and time of access
- Session duration and interaction data
2.3 Cookie and Consent Data
Our Website uses cookies and similar tracking technologies. When you first visit the Website you are presented with a consent notice that allows you to accept, reject or manage the categories of cookies used. We record your consent preferences, including the date and time of consent and the choices you made, so that we can demonstrate compliance and respect your preferences on subsequent visits.
For detailed information about the specific cookies we deploy and how to manage them, please see Section 6 (Cookies and Similar Technologies) below.
2.4 Special-Category Personal Data
We do not intentionally seek to collect special-category personal data through the Website. If you voluntarily include such data in a free-text field (for example, in a special-requests field), we will treat that information with additional care and use it only to the extent necessary to fulfil your request. Please avoid providing special-category personal data unless it is strictly necessary for your reservation or enquiry.
2.5 Casino Age-Verification Information
Access to the casino and entertainment facilities at Selvarian Royal Manor Hotel & Entertainment is restricted to persons who are 18 years of age or older. If you submit an enquiry relating to our entertainment facilities, we may need to confirm that you meet the minimum age requirement. We collect only the information necessary to make that confirmation and do not use it for any other purpose.
2.6 Information We Do Not Collect Through the Website
We do not collect full payment card numbers or banking credentials through this Website. Any booking that requires payment processing is handled through secure, separately governed channels.
3. Purposes and Legal Bases for Processing
We process your personal information for the purposes and on the legal bases described in the list below. In New Zealand, the Privacy Act 2020 does not require organisations to specify a statutory "legal basis" in the same way as some other frameworks; however, we identify the applicable justification for each purpose in the interest of transparency.
-
Responding to reservation requests, enquiries and general correspondence
- Personal information used: Contact and reservation-request information
- Justification under the Privacy Act 2020 / IPPs: Necessary to carry out functions directly related to your request (IPP 1); our legitimate interest in managing guest communications
-
Confirming eligibility for casino and entertainment facilities (age verification)
- Personal information used: Age-verification information
- Justification under the Privacy Act 2020 / IPPs: Compliance with applicable legal requirements and our legitimate interest in operating lawfully
-
Operating, maintaining and improving the Website
- Personal information used: Device and technical information; cookie data
- Justification under the Privacy Act 2020 / IPPs: Our legitimate interest in ensuring Website security, functionality and performance
-
Analytics and understanding how visitors use the Website
- Personal information used: Device and technical information; cookie and consent data (where consent is given)
- Justification under the Privacy Act 2020 / IPPs: Your consent, where required; our legitimate interest in improving the Website where consent is not required
-
Managing and recording cookie and consent preferences
- Personal information used: Cookie and consent data
- Justification under the Privacy Act 2020 / IPPs: Compliance with applicable legal obligations; our legitimate interest in demonstrating accountability
-
Sending promotional or marketing communications about our hotel and entertainment facilities
- Personal information used: Name; email address
- Justification under the Privacy Act 2020 / IPPs: Your consent, given at the time of submitting an enquiry or at a later stage; you may withdraw consent at any time
-
Complying with legal obligations, resolving disputes and enforcing our terms
- Personal information used: Any relevant personal information
- Justification under the Privacy Act 2020 / IPPs: Compliance with applicable law; our legitimate interest in protecting legal rights and business operations
Where we rely on your consent to process personal information, you have the right to withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal. To withdraw consent, please contact us at info@selvarianroyalmanor.com.
4. Disclosure of Personal Information
We do not sell, rent or trade your personal information to third parties. We may disclose your personal information to the categories of recipients described below, strictly for the purposes set out in this policy.
4.1 Internal Personnel
Personal information is accessible internally only to those members of our staff and management who need it to respond to your enquiry, manage your reservation request, or carry out their operational responsibilities. Access is controlled on a need-to-know basis.
4.2 Service Providers and Technology Partners
We engage third-party service providers to support the operation of the Website and related business functions. These may include providers of:
- Website hosting and infrastructure services
- Email and communications delivery services
- Web analytics platforms
- Customer relationship management systems
- Cookie consent management technology
- Cybersecurity and fraud-prevention services
All third-party service providers are required to process personal information only on our instructions, to implement appropriate security measures, and to comply with applicable privacy law. They are not permitted to use your personal information for their own independent purposes.
4.3 Legal and Regulatory Authorities
We may disclose personal information to courts, law enforcement agencies, regulatory bodies or other public authorities where we are legally required to do so, or where such disclosure is reasonably necessary to protect our legal rights, to prevent serious threats to public safety, or to investigate suspected unlawful activity.
4.4 Business Transfers
In the event of a merger, acquisition, restructuring or sale of all or part of our business assets, personal information held by us may be transferred to the relevant successor entity. We will take reasonable steps to ensure that any such transfer is subject to appropriate privacy protections.
5. International Transfers of Personal Information
Selvarian Royal Manor Hotel & Entertainment Limited is based in New Zealand. Some of the third-party service providers we use may be located in, or process personal information from, countries outside New Zealand. Where such transfers occur, we take steps to ensure that your personal information is protected to a standard comparable to the New Zealand Privacy Act 2020. These steps may include:
- Engaging service providers located in countries that have been assessed as providing comparable privacy protections;
- Incorporating contractual clauses into our agreements with service providers that require them to protect your personal information; or
- Relying on other appropriate safeguards recognised under applicable law.
If you would like further information about the specific safeguards in place for international transfers, please contact us at info@selvarianroyalmanor.com.
7. Retention of Personal Information
We retain personal information only for as long as is necessary to fulfil the purposes for which it was collected, or as required or permitted by law. The following general retention periods apply to information collected through the Website:
-
Contact and reservation-request information (enquiries that do not progress to a confirmed booking)
- Retention period: Up to 12 months from the date of the enquiry, after which the information is securely deleted or anonymised.
-
Contact and reservation-request information (enquiries that progress to a confirmed booking)
- Retention period: For the period necessary to fulfil the booking and for a reasonable period thereafter in accordance with applicable legal and accounting obligations.
-
Device and technical (server log) information
- Retention period: Up to 90 days from the date of collection, unless retention for a longer period is required for security investigations or legal proceedings.
-
Cookie and consent records
- Retention period: For the duration of your consent preference plus such additional period as is required to demonstrate compliance.
-
Marketing communication records
- Retention period: Until you withdraw consent or unsubscribe, plus a short period thereafter to process the withdrawal.
Where information is retained beyond its primary purpose for legal or compliance reasons, access to that information is restricted accordingly. When information is no longer required, it is securely deleted or irreversibly anonymised.
8. Security of Personal Information
We take reasonable steps to protect the personal information we hold against loss, unauthorised access, use, modification, disclosure and other misuse. The security measures we implement include:
- Encryption of data in transit using industry-standard Transport Layer Security (TLS) protocols;
- Access controls limiting personal information to authorised personnel only;
- Regular review of our information security practices and systems;
- Contractual requirements for our service providers to maintain appropriate security standards.
While we strive to protect your personal information, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security, and you provide your personal information to us at your own risk. If you become aware of any security concern relating to our Website or the personal information we hold, please notify us immediately at info@selvarianroyalmanor.com.
In the event of a privacy breach that is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and, where required, any affected individuals in accordance with our obligations under the Privacy Act 2020.
9. Your Privacy Rights
Under the New Zealand Privacy Act 2020 you have rights in relation to the personal information we hold about you. These rights are set out below.
9.1 Right of Access
You have the right to ask us whether we hold personal information about you and, if so, to request access to that information. We will respond to access requests within a reasonable time and, in any event, no later than the period required by applicable law. We may require you to verify your identity before providing access.
9.2 Right of Correction
If you believe that personal information we hold about you is inaccurate, incomplete, misleading or not up to date, you have the right to ask us to correct it. We will take reasonable steps to correct the information if we agree it requires correction, or to attach a notation to it if we do not agree.
9.3 Right to Withdraw Consent
Where we process your personal information on the basis of your consent (for example, for marketing communications or non-essential cookies), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.
9.4 Right to Make a Complaint
If you believe we have interfered with your privacy, you have the right to make a complaint to us and, if you remain dissatisfied, to the Office of the Privacy Commissioner of New Zealand. Details of the complaints process are set out in Section 11 below.
9.5 How to Exercise Your Rights
To exercise any of the rights described above, please submit your request in writing to:
Privacy Officer
Selvarian Royal Manor Hotel & Entertainment Limited
Email: info@selvarianroyalmanor.com
We may ask you to provide sufficient information to verify your identity before we process your request. We will respond as soon as reasonably practicable and will notify you if we are unable to fulfil your request and the reasons why.
10. Children and Minors
The Website and our entertainment facilities are not directed at persons under the age of 18. We do not knowingly collect personal information from anyone under 18 years of age through the Website. If you believe that a minor has provided personal information to us without appropriate consent, please contact us at info@selvarianroyalmanor.com and we will take appropriate steps to delete that information.
11. Complaints
If you have a concern or complaint about the way in which we have handled your personal information, we encourage you to contact us in the first instance so that we have the opportunity to resolve the matter:
Privacy Officer
Selvarian Royal Manor Hotel & Entertainment Limited
Email: info@selvarianroyalmanor.com
We will acknowledge your complaint promptly and aim to provide a substantive response within 20 working days. If you are not satisfied with our response, or if you do not wish to contact us directly, you may lodge a complaint with the Office of the Privacy Commissioner of New Zealand:
Office of the Privacy Commissioner
PO Box 10094, The Terrace, Wellington 6143, New Zealand
Website: www.privacy.org.nz
12. Third-Party Links
The Website may contain links to external websites operated by third parties. This Privacy Policy applies only to the Website operated by Selvarian Royal Manor Hotel & Entertainment Limited. We are not responsible for the privacy practices of any third-party websites, and we encourage you to review the privacy policies of any external sites you visit.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law or Website functionality. When we make material changes we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Your continued use of the Website after changes are posted constitutes your acknowledgement of the updated policy.
Where changes are significant, we may take additional steps to inform you, such as placing a prominent notice on the Website's homepage.
14. Contact Us
If you have any questions about this Privacy Policy or about the way we handle your personal information, please contact us:
Selvarian Royal Manor Hotel & Entertainment Limited
Privacy Officer
Email: info@selvarianroyalmanor.com
Website: selvarianroyalmanor.com