Cookie Policy

1. About this Cookie Policy

This Cookie Policy explains how Darmorian Resort Lodge Limited may use cookies and similar browser technologies on darmorianresortlodge.com. It should be read with the Privacy Policy. The current website is designed to minimise external dependencies and uses local front-end resources; this reduces, but does not automatically eliminate, the possibility that essential browser storage or server-side session technologies may be used when the site is deployed.

2. What cookies are

Cookies are small text records that a website can ask a browser to store on a device. Similar technologies include local storage, session storage, and other identifiers used to remember state or preferences. Some technologies are necessary for a requested service, while others may be used for analytics or preferences only where legally permitted and, when required, after consent.

3. Essential technologies

Essential cookies or storage may be used when necessary for core security, session continuity, preference handling, accessibility, form protection, load management, or other functions that a user has requested. These technologies should be limited to what is necessary and should not be repurposed for unrelated advertising or profiling without a separate lawful basis.

4. Preference technologies

Preference storage may remember choices such as interface settings or other non-essential options. Where the law requires consent before setting a non-essential preference cookie, that technology should remain inactive until the user makes the relevant choice. Users can withdraw or alter a consent-based preference through the available controls when such controls are implemented.

5. Analytics

If analytics technologies are introduced, they may be used to understand aggregate website performance, page usage, navigation patterns, technical errors, and general interaction trends. Where analytics are non-essential and consent is required, they should be disabled until valid consent is obtained. We aim to configure analytics, if used, to minimise the amount of personal information collected.

6. Advertising and profiling

The current website is not intended to require advertising cookies for its basic operation. If advertising, cross-site tracking, or profiling technologies are introduced in the future, this policy and any consent interface should be updated before those technologies are used where required by law.

7. Cookie duration

Some cookies may last only for the current browser session and expire when the browser is closed. Others may remain for a defined period so that a preference can be remembered. The duration should be proportionate to the purpose. Unnecessary identifiers should be deleted or allowed to expire rather than retained indefinitely.

8. Third-party cookies

A third party may set a cookie only if third-party functionality is actually integrated into the deployed service. Because the public front end is intended to use local resources, ordinary page display should not depend on remote font, script, stylesheet, image, or content-delivery services. If a future feature introduces a third-party service, its cookie implications should be assessed and disclosed.

9. Your choices

You can usually control cookies through browser settings, including deleting stored cookies, blocking future cookies, or limiting certain categories. Blocking essential storage may cause parts of a website to stop functioning correctly. Where a dedicated consent control is required, using that control is generally the most direct way to manage non-essential technologies for the site.

10. Consent under GDPR and ePrivacy rules

Where European privacy and electronic-communications rules apply, non-essential cookies and similar technologies that require consent should not be placed before valid consent is obtained. Consent should be freely given, specific, informed, and unambiguous, and withdrawing consent should be as easy as giving it. Essential technologies may be used without consent where the law permits them because they are strictly necessary for a requested service.

11. Information generated by cookies

Depending on the technology, generated information may include a random identifier, timestamp, preference, session state, security value, browser information, or limited usage data. We aim to avoid collecting more information than needed for the stated purpose. Cookie-derived information is handled in accordance with the Privacy Policy where it constitutes personal information.

12. Security

Cookie values and browser storage should not be treated as a secure place for unnecessary sensitive information. We use reasonable measures designed to reduce misuse, but browser technologies are part of a broader technical environment and no system can be guaranteed completely secure. Users should keep browsers and devices updated and use appropriate device security.

13. Updates to cookie use

Website features may change over time. If a change materially alters the categories or purposes of cookies or similar technologies, this policy should be updated. Where the change requires a new consent decision, the relevant non-essential technology should remain inactive until the required consent is obtained.

14. Retention and deletion

Retention periods for browser identifiers should be no longer than reasonably necessary for the purpose for which the technology is used. Session records are ordinarily intended to end with the browser session, while persistent preference records may remain for a defined period so a user does not need to repeat the same choice on every visit. Where a consent record is maintained to demonstrate compliance, it may be retained for an appropriate period together with the version of the notice or preference presented at the time. When an identifier is no longer necessary, it should be deleted, anonymised where appropriate, or allowed to expire. Deleting cookies in a browser may remove a saved preference and cause the website to ask for that preference again on a later visit.

15. Browser controls, consent records and device settings

Most modern browsers provide controls that allow users to inspect stored site data, delete individual cookies, clear all cookies, restrict third-party storage, or block categories of browser storage. The exact controls depend on the browser and device. Device-level privacy features may also limit tracking or storage. Where the website provides its own consent interface, that interface should be used to record a user's current non-essential cookie choices and should not make access to ordinary content conditional on agreeing to optional tracking unless such a condition is lawful. A withdrawal of consent applies prospectively: it should stop future consent-based processing, although it does not make earlier processing unlawful if that processing was valid when carried out. Users who clear browser data may also clear the local record of a previous choice.

16. International access and applicable rules

The website may be accessed from jurisdictions outside New Zealand. Cookie and electronic-communications requirements can differ between countries. We aim to apply appropriate controls based on the circumstances of the deployed service, including consent where required for non-essential storage. Where GDPR or related European rules apply, information about purposes, legal bases, recipients, retention and individual rights is provided together with the Privacy Policy. If a third-party technology later transfers cookie-derived personal information outside the country in which a visitor is located, any required transfer safeguards and disclosures should be addressed before that technology is enabled.

17. Contact

Questions about this Cookie Policy or privacy-related browser technologies can be sent to info@darmorianresortlodge.com. The operator is Darmorian Resort Lodge Limited, located at 154 Victoria Street West, Auckland CBD, Auckland 1010, New Zealand. Contact details are displayed as ordinary text rather than clickable telephone or email links on the public pages.

Contact and administrator