Privacy Policy

1. Scope and controller

This Privacy Policy explains how Darmorian Resort Lodge Limited handles personal information when you use darmorianresortlodge.com, contact our guest-services team, submit an enquiry, request accommodation, or interact with our hospitality and gaming services. For the purposes of applicable privacy law, the organisation responsible for the processing described in this policy is Darmorian Resort Lodge Limited, located at 154 Victoria Street West, Auckland CBD, Auckland 1010, New Zealand. This policy is intended to be read alongside the New Zealand Privacy Act 2020 and, where the General Data Protection Regulation applies to an individual in the European Economic Area, the relevant GDPR requirements.

2. Information we collect

We may collect information you provide directly, including your name, email address, telephone number, enquiry details, booking preferences, accessibility or service requests, correspondence, and any information you voluntarily include in a form or message. We may also collect limited technical information generated by your browser, such as device type, browser type, approximate region, referring page, pages viewed, interaction timestamps, and basic security logs. We do not ask you to submit payment-card information through the public contact forms on this website.

3. How information is collected

Information may be collected when you complete an online form, contact us by email or telephone, request guest support, make an accommodation or event enquiry, communicate with our staff, or use the website. Technical information may also be generated through essential website functions, server logs, and cookies where those technologies are enabled. We aim to collect only information that is reasonably necessary for a clear operational, security, legal, or guest-service purpose.

4. Purposes of processing

We use personal information to respond to enquiries; manage reservation requests; provide guest, event, and player-service support; maintain records of communications; protect the security and integrity of our services; prevent misuse; comply with legal obligations; resolve complaints; improve website usability; and administer preferences where you have asked us to do so. We do not use personal information for unrelated purposes without an appropriate legal basis or additional notice.

5. Legal bases under GDPR

Where GDPR applies, processing may rely on one or more legal bases: taking steps at your request before entering into a contract; performance of a contract; compliance with a legal obligation; legitimate interests in operating, securing, and improving our services; protection of vital interests where relevant; and consent where the law requires consent. Where we rely on legitimate interests, we consider the necessity of the processing and the impact on your rights and expectations.

6. Sensitive information and age-related data

Please do not include sensitive personal information in a general website enquiry unless it is necessary for a specific service request. Access to regulated gaming areas is restricted to adults aged 18 or over. We do not knowingly use the public website to solicit personal information from children for gaming-related purposes. If we become aware that information has been provided contrary to an age restriction, we may delete or restrict it as appropriate.

7. Sharing and service providers

We may share information with carefully selected service providers that support hosting, information technology, security, communications, customer support, professional advice, and operational administration. Providers are expected to process information only for authorised purposes and to apply appropriate confidentiality and security measures. We may also disclose information where required by law, court order, regulatory request, or where reasonably necessary to protect legal rights, safety, or service security.

8. International transfers

Some service providers or technical systems may involve processing outside New Zealand. Where GDPR applies to a transfer of personal data outside the EEA, we take appropriate steps designed to provide an adequate level of protection, which may include an adequacy decision, approved contractual safeguards, or another lawful transfer mechanism. Transfer arrangements are reviewed in light of the type of information and the circumstances of processing.

9. Data retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, to maintain appropriate business and security records, to meet legal and regulatory requirements, and to establish or defend legal claims. Retention periods vary according to the nature of the information and the relationship involved. When information is no longer required, we take reasonable steps to delete, anonymise, or securely dispose of it.

10. Security

We use administrative, technical, and organisational safeguards intended to protect personal information against accidental loss, unauthorised access, alteration, disclosure, or destruction. Measures may include access controls, staff confidentiality requirements, secure configuration practices, monitoring, backups, and incident-response procedures. No internet-based system can be guaranteed to be completely secure, so users should avoid sending information that is unnecessary for the requested service.

11. Your privacy rights

Depending on the law that applies to you, you may have rights to request access to personal information, ask for correction of inaccurate information, request deletion in certain circumstances, restrict or object to certain processing, receive certain information in a portable format, withdraw consent where processing relies on consent, and complain to a competent supervisory authority. New Zealand users may also have rights under the Privacy Act 2020 to request access to and correction of personal information held about them.

12. Exercising your rights

To make a privacy request, contact us at info@darmorianresortlodge.com and provide enough information for us to identify the relevant records and understand your request. We may need to verify identity before releasing or changing personal information. We will respond within the time required by applicable law. We do not charge a fee for ordinary privacy requests unless the law permits a fee in exceptional circumstances.

13. Cookies and similar technologies

This website may use essential cookies or comparable local technologies for core functionality, security, preference retention, and form operation. Where non-essential analytics or preference technologies are introduced and consent is legally required, they should not be activated until the appropriate choice has been obtained. More information is provided in the separate Cookie Policy.

14. Automated decision-making

The public website is not intended to make decisions producing legal or similarly significant effects solely by automated means. If this changes, we will provide additional information about the logic involved, the significance of the processing, and any rights available under applicable law.

15. Complaints and regulatory contact

If you have a concern about how we handle personal information, please contact us first so that we can investigate. Individuals in New Zealand may also contact the Office of the Privacy Commissioner. Individuals protected by GDPR may have the right to lodge a complaint with the supervisory authority in the country where they live, work, or believe an infringement occurred.

16. Changes to this policy

We may update this Privacy Policy when our services, legal obligations, or privacy practices change. The current version will be published on this page with the effective date. Material changes may be highlighted where appropriate. Continued use of the website after an update does not remove any consent requirement that may apply under law.

Contact and administrator