Privacy Policy
Last updated: 1 June 2025
1. Introduction
("we", "us" or "our") operates the physical hotel-casino known as Feravellian Prestige Hall, located at , and maintains the website at feravellianprestigehall.com (the "Website").
We are committed to protecting the privacy and security of all personal information entrusted to us. This Privacy Policy explains how we collect, use, disclose, store and protect personal information obtained through the Website, and describes the rights available to individuals under the Privacy Act 2020 (NZ) and other applicable legislation.
Please read this policy carefully before submitting any information through the Website. By using the Website you acknowledge that you have read and understood this policy.
2. Data Controller
The data controller responsible for personal information collected through the Website is:
| Legal entity | |
|---|---|
| Registered address | |
| Company registration number | 7843926 |
| GST / VAT number | 136-742-958 |
| Privacy enquiries | info@feravellianprestigehall.com |
All enquiries, requests or complaints relating to privacy and data protection should be directed to us using the contact details above.
3. Personal Information We Collect
We collect only the personal information that is necessary for the purposes described in this policy. The categories of personal information we may collect through the Website are set out below.
3.1 Contact and Reservation-Request Data
When you submit an enquiry, reservation request or contact form through the Website, we collect the information you provide, which may include:
- Full name
- Email address
- Telephone number
- Preferred arrival and departure dates
- Room type preferences and special requests
- Number of guests
- Any additional details you choose to include in a free-text message field
3.2 Device and Technical Data
When you visit the Website, our servers and analytics tools automatically collect certain technical information about your device and browsing session, including:
- IP address
- Browser type and version
- Operating system
- Device type (desktop, tablet or mobile)
- Referring URL
- Pages visited and time spent on each page
- Date and time of access
- Clickstream data
3.3 Cookie and Consent Data
We collect records of your cookie preferences and consent choices when you interact with our consent management tool on the Website. This includes the categories of cookies you accepted or declined and the timestamp of your consent decision. For full details of how we use cookies, please see Section 8 of this policy.
3.4 Communications Data
If you contact us directly by email using the privacy contact address, we will collect the content of your message and any personal information you include within it, together with metadata such as the date and time of the communication.
3.5 Special-Category Personal Data
We do not seek to collect special-category personal data through the Website. If you voluntarily include special-category personal data in a free-text field, we will process that information only to the extent strictly necessary to respond to your request and will handle it with an elevated level of care. We ask that you refrain from submitting special-category personal data unless it is essential to your enquiry.
4. Purposes and Legal Bases for Processing
We process personal information only for specified, explicit and legitimate purposes. The table below summarises each processing activity, the purpose pursued and the legal basis under the Privacy Act 2020 and applicable data protection principles.
| Processing Activity | Purpose | Legal Basis |
|---|---|---|
| Handling reservation requests and enquiries | To respond to your reservation request or general enquiry, communicate availability and provide pre-arrival information | Performance of a contract or taking steps at your request prior to entering into a contract; legitimate interests in conducting our hospitality business |
| Operating and maintaining the Website | To ensure the Website functions correctly, diagnose technical faults and maintain security and integrity | Legitimate interests in operating a secure and reliable online presence |
| Website analytics | To understand how visitors use the Website, identify popular content and improve user experience | Legitimate interests in improving our services; consent where analytics cookies are used |
| Cookie and consent management | To record and honour your cookie preferences and comply with our obligations regarding informed consent | Legal obligation; consent |
| Responding to privacy and data-subject rights requests | To fulfil our obligations under applicable privacy legislation and respond to your rights requests | Legal obligation |
| Compliance with legal and regulatory requirements | To meet our obligations under New Zealand law, including record-keeping and co-operation with lawful requests from public authorities | Legal obligation |
| Security and fraud prevention | To detect, investigate and prevent fraudulent or malicious activity affecting the Website or our business | Legitimate interests in protecting our business and website visitors |
Where we rely on legitimate interests as a legal basis, we have assessed that our interests are not overridden by your interests or fundamental rights and freedoms. You may request further information about that balancing assessment by contacting us at info@feravellianprestigehall.com.
Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
5. Recipients of Personal Information
We do not sell, rent or trade your personal information. We may share personal information with the following categories of recipients where necessary to fulfil the purposes described in this policy:
- Service providers and processors — third-party organisations engaged to provide technical, operational or administrative services on our behalf, including website hosting providers, email delivery platforms and analytics service providers. These parties process personal information only on our documented instructions and are bound by appropriate confidentiality and data protection obligations.
- Professional advisers — lawyers, accountants and auditors where disclosure is necessary to obtain professional advice or in connection with legal proceedings.
- Public authorities and regulators — government agencies, law enforcement bodies or courts where disclosure is required by law, court order or to protect the safety of individuals.
- Business successors — in the event of a merger, acquisition, restructure or sale of all or part of our business, personal information may be transferred to the relevant successor entity subject to equivalent privacy protections.
We require all third parties that receive or process personal information on our behalf to treat it securely and in accordance with applicable law. We do not permit third-party service providers to use personal information for their own independent marketing or commercial purposes.
6. International Transfers of Personal Information
We are based in New Zealand. Some of our service providers operate servers or offices outside New Zealand. Where personal information is transferred outside New Zealand, we take steps to ensure that an equivalent level of protection is maintained, including by:
- Transferring personal information only to recipients in countries that the New Zealand Privacy Commissioner has recognised as providing comparable privacy protections;
- Entering into contractual arrangements with recipients that impose privacy and security obligations consistent with the Privacy Act 2020; or
- Relying on other lawful transfer mechanisms recognised under New Zealand privacy law.
You may request details of any international transfer arrangements applicable to your personal information by contacting us at info@feravellianprestigehall.com.
7. Retention of Personal Information
We retain personal information only for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal obligations, to resolve disputes and to enforce our agreements. The table below provides indicative retention periods for the main categories of personal information collected through the Website.
| Category of Personal Information | Indicative Retention Period |
|---|---|
| Reservation request and enquiry data (where no booking is made) | 12 months from the date of the enquiry |
| Reservation request and enquiry data (where a booking results) | 7 years from the end of the guest relationship, in accordance with our legal and accounting obligations |
| Technical and device data (server logs) | 90 days, unless required for longer for security investigation purposes |
| Cookie and consent records | 3 years from the date of consent, or until you withdraw consent, whichever is earlier |
| Communications data (email correspondence) | 3 years from the date of the last communication |
| Data-subject rights request records | 3 years from resolution of the request, to demonstrate compliance with our obligations |
Where retention is required for a longer period due to ongoing legal proceedings, regulatory investigations or contractual necessity, we will retain the relevant information until those matters are concluded.
At the end of the applicable retention period, personal information is securely deleted or anonymised so that it can no longer be associated with any individual.
9. Security of Personal Information
We implement appropriate technical and organisational measures to protect personal information against unauthorised access, accidental loss, destruction, alteration or disclosure. Our security practices include:
- Encryption of data in transit using industry-standard secure protocols;
- Access controls limiting access to personal information to authorised personnel who require it to perform their responsibilities;
- Regular review of our information security practices and procedures;
- Contractual security requirements imposed on third-party service providers; and
- Internal policies governing the handling, storage and disposal of personal information.
While we take all reasonable steps to protect personal information, no method of electronic transmission or storage is completely secure. We cannot guarantee the absolute security of information transmitted to or from the Website, and you provide information at your own risk. If you have reason to believe that your personal information has been compromised, please contact us immediately at info@feravellianprestigehall.com.
In the event of a notifiable privacy breach affecting your personal information, we will notify the Office of the Privacy Commissioner and affected individuals in accordance with our obligations under the Privacy Act 2020.
10. Casino, Age Verification and Responsible Gaming
Feravellian Prestige Hall operates a casino on its premises. Access to casino facilities is restricted to persons aged 18 years and over. We do not provide or facilitate online gambling through the Website. The Website is used solely for information purposes and reservation enquiries relating to the hotel-casino property.
The Department of Internal Affairs (DIA) is the New Zealand government agency responsible for the administration of gambling legislation in New Zealand. The DIA publishes guidance on responsible gaming, self-exclusion options and support resources. Independent information and assistance with problem gambling is also available from the New Zealand Problem Gambling Foundation. We encourage visitors who have concerns about gambling to consult these publicly available resources.
If you use our Website contact form in connection with a self-exclusion request or responsible gaming matter, we will handle your personal information with an elevated level of care and process it only for the purpose of administering your request.
11. Your Privacy Rights
Under the Privacy Act 2020 and applicable privacy principles, you have the following rights in relation to personal information we hold about you:
- Right of access — you may request confirmation of whether we hold personal information about you and, if so, request access to that information.
- Right of correction — you may request that inaccurate, incomplete or outdated personal information we hold about you be corrected.
- Right to erasure — in certain circumstances you may request that we delete personal information we hold about you, for example where it is no longer necessary for the purpose for which it was collected and no legal obligation requires its retention.
- Right to restriction of processing — in certain circumstances you may request that we restrict the processing of your personal information, for example while a correction request is being assessed.
- Right to object — where processing is based on legitimate interests, you may object to that processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or unless processing is necessary for the establishment, exercise or defence of legal claims.
- Right to withdraw consent — where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
- Right to data portability — where processing is based on consent or contract and is carried out by automated means, you may request that we provide your personal information in a structured, commonly used and machine-readable format.
To exercise any of the above rights, please submit a written request to us by email at info@feravellianprestigehall.com. We may need to verify your identity before processing your request. We will respond to all valid requests within the timeframes required by applicable law. There is generally no charge for exercising your rights, although we may charge a reasonable fee in exceptional circumstances permitted by law.
12. Complaints
If you are concerned about how we have handled your personal information, we encourage you to contact us in the first instance so that we have the opportunity to address your concern:
Email:
info@feravellianprestigehall.com
Post: Privacy Officer, ,
We will acknowledge receipt of your complaint and endeavour to provide a substantive response within 20 working days. If we require additional time to investigate, we will keep you informed of our progress.
If you are not satisfied with our response, or if you prefer to raise your concern directly with the regulatory authority, you have the right to lodge a complaint with the Office of the Privacy Commissioner of New Zealand:
- Website: www.privacy.org.nz
- Postal address: Office of the Privacy Commissioner, PO Box 10094, Wellington 6143, New Zealand
The Office of the Privacy Commissioner is an independent authority established under the Privacy Act 2020 to promote and protect individual privacy interests in New Zealand, investigate complaints and provide guidance on privacy obligations.
13. Third-Party Links
The Website may contain links to third-party websites for your convenience and information. These linked websites are operated by independent organisations and are governed by their own privacy policies. We have no control over and accept no responsibility for the content or privacy practices of third-party websites. We encourage you to review the privacy policy of any third-party website you visit before providing personal information to that site.
14. Children's Privacy
The Website is not directed at children under the age of 18 years. We do not knowingly collect personal information from individuals under 18 years of age through the Website. If you believe that a person under 18 has submitted personal information to us through the Website, please contact us at info@feravellianprestigehall.com and we will take steps to delete that information promptly.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, the Website, applicable law or regulatory requirements. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically to stay informed about how we protect your personal information.
Your continued use of the Website following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree to the updated policy, you should cease using the Website and may contact us to request deletion of your personal information.
16. Contact Us
For any questions, concerns or requests relating to this Privacy Policy or our handling of your personal information, please contact us:
| Legal entity | |
|---|---|
| Address | |
| info@feravellianprestigehall.com | |
| Website | feravellianprestigehall.com |