Privacy Policy
Company No. 10038274 | GST No. 287-416-395
Website: quoravellienne.com
Privacy enquiries: privacy@quoravellienne.com
Last updated: 1 June 2025
1. Introduction
("we", "us" or "our") operates the Quoravellienne hotel and casino located in Whitianga, New Zealand, and the website at quoravellienne.com (the "Site"). We are committed to handling your personal information responsibly and in accordance with the Privacy Act 2020 (New Zealand) and any other applicable privacy legislation.
This Privacy Policy explains what personal information we collect when you visit the Site, how we use it, with whom we share it, how long we keep it, and what rights you have in relation to it. It applies only to information collected through this website. It does not govern information collected by us in person at the property except where that process begins on the Site (for example, a reservation request submitted online).
Please read this policy carefully before using the Site. By continuing to browse or by submitting information through any form on the Site, you acknowledge that you have read and understood this policy.
2. Data Controller
The data controller responsible for your personal information collected through this Site is:
| Legal entity | |
|---|---|
| Registered address | |
| Company number | 10038274 |
| GST number | 287-416-395 |
| Privacy contact | privacy@quoravellienne.com |
All questions, requests or complaints relating to the handling of your personal information should be directed to the privacy contact address above.
3. Information We Collect
We collect personal information only to the extent necessary for the purposes described in this policy. The categories of information we may collect through the Site are set out below.
3.1 Contact and Reservation-Request Data
When you submit an enquiry, reservation request, or any other form on the Site, we collect the information you provide. This may include:
- Full name
- Email address
- Telephone number
- Preferred arrival and departure dates
- Room or accommodation type preferences
- Number of guests
- Special requests or accessibility requirements you choose to disclose
- Any other information you voluntarily include in a free-text field
You are not required to provide all fields; however, certain information is necessary for us to respond to your request or process your enquiry. Required fields are indicated on each form.
3.2 Communication Data
When you correspond with us by email using the addresses published on the Site, we collect the content of that correspondence and any personal information contained within it, including your email address and the name associated with your email account.
3.3 Device and Technical Data
When you visit the Site, our web server and any analytics tools we operate automatically collect certain technical information about your device and browsing session. This may include:
- Internet Protocol (IP) address
- Browser type and version
- Operating system
- Device type (desktop, mobile or tablet)
- Referring URL (the page you visited before arriving at our Site)
- Pages visited on the Site and the order in which they were visited
- Date and time of each page request
- Time spent on each page
- Files downloaded
Where this technical data is linked or linkable to an identifiable individual, it is treated as personal information under this policy.
3.4 Cookie and Consent Data
We use cookies and similar tracking technologies on the Site. A cookie is a small text file stored on your device by your browser at the instruction of a website. Cookies allow the Site to function correctly, remember your preferences, and help us understand how visitors use our pages.
We collect information about the consent choices you make through our cookie preference tool, including the date and time you gave or withdrew consent and the specific categories you accepted or declined. This consent record is itself stored as a technical log associated with your browser session.
The categories of cookies we use are as follows:
| Category | Purpose | Legal basis |
|---|---|---|
| Strictly necessary | Enable core Site functions such as page navigation, form submission and security. The Site cannot function properly without these cookies. | Legitimate interests (essential operation) |
| Functional | Remember your preferences (such as language or region) to improve your experience across sessions. | Consent |
| Analytics | Collect aggregated and pseudonymised information about how visitors use the Site so we can measure and improve performance. | Consent |
You can manage your cookie preferences at any time through the cookie settings link in the footer of the Site. You may also control cookies through your browser settings; however, disabling strictly necessary cookies may affect the functionality of the Site.
4. Purposes and Legal Bases for Processing
We process your personal information only where we have a lawful basis to do so. The table below summarises our processing activities, the purposes for which we carry them out, and the legal basis we rely on under applicable New Zealand privacy law and, where relevant, internationally recognised privacy principles.
| Processing activity | Purpose | Legal basis |
|---|---|---|
| Handling enquiries and reservation requests | To respond to your enquiry, assess the availability of accommodation, and facilitate a booking at Quoravellienne | Taking steps at your request prior to entering a contract; performance of a contract |
| Managing pre-contractual correspondence | To communicate with you about your request, answer questions, and provide the information you need to make a booking decision | Taking steps at your request prior to entering a contract; legitimate interests |
| Operating and improving the Site | To maintain the technical performance of the Site, diagnose errors, prevent fraud and ensure security | Legitimate interests (running a secure and well-functioning website) |
| Analytics and Site improvement | To understand how visitors navigate the Site, which pages are most useful, and where improvements can be made | Consent (where analytics cookies are accepted) |
| Functional cookies and preferences | To remember settings you have chosen so that you do not need to re-enter them on each visit | Consent |
| Legal compliance and record-keeping | To comply with our obligations under New Zealand law, including responding to lawful requests from public authorities | Legal obligation; legitimate interests |
| Responsible gaming age verification enquiries | To ensure that casino access enquiries are handled in line with the minimum age requirement of 18 years | Legal obligation; legitimate interests |
Where we rely on legitimate interests as our legal basis, we have assessed that our interests do not override your privacy rights. You may request further information about that balancing assessment by contacting us at privacy@quoravellienne.com.
Where we rely on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent for cookies, use the cookie settings link in the Site footer. To withdraw consent for any other processing based on consent, please contact us at the privacy email address above.
5. Special-Category Personal Data
We do not intentionally seek to collect special-category personal data from visitors through the Site. If you choose to include information that falls within that category in a free-text field (for example, when describing an accessibility requirement), we will handle it with additional care and will use it only for the purpose for which you have provided it, which is ordinarily to accommodate your needs during your stay. We will not retain such information beyond the period necessary to fulfil that purpose.
6. Recipients of Your Personal Information
We do not sell your personal information to third parties. We may share your personal information with the following categories of recipients in the circumstances described.
6.1 Service Providers
We engage third-party service providers who process personal information on our behalf to help us operate the Site and manage enquiries. These providers are permitted to use your information only in accordance with our instructions and are required to maintain appropriate security measures. Categories of service providers include:
- Website hosting and infrastructure providers
- Email delivery and communication platforms
- Web analytics providers (where you have consented to analytics cookies)
- IT support and security monitoring providers
6.2 Professional Advisers
We may share personal information with our lawyers, accountants, auditors and insurers where necessary for the provision of professional services to .
6.3 Regulatory and Law Enforcement Authorities
We may disclose personal information to government bodies, regulators, law enforcement agencies or courts where we are required to do so by applicable law, a court order, or a lawful request from a public authority.
6.4 Business Transfers
If is involved in a merger, acquisition, asset sale or restructuring, your personal information may be transferred to the relevant successor entity as part of that transaction. We will notify you of any such change by updating this policy and, where appropriate, by direct communication.
7. International Transfers of Personal Information
is based in New Zealand. Some of our service providers are located in other countries, which means that your personal information may be transferred to and processed in countries outside New Zealand. Where such transfers occur, we take steps to ensure that appropriate safeguards are in place and that the transfer is consistent with the requirements of the Privacy Act 2020, including the Information Privacy Principles governing trans-border data flows.
These safeguards may include contractual clauses that require the overseas recipient to protect the information to a standard comparable to New Zealand law, or reliance on the recipient being located in a country whose privacy laws provide comparable protections.
You may request further information about the safeguards applicable to a specific transfer by contacting us at privacy@quoravellienne.com.
8. Retention of Personal Information
We retain personal information only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The principles we apply are as follows:
| Category of information | Retention period |
|---|---|
| Reservation request data (enquiry not converted to a booking) | Up to 12 months from the date of enquiry, or until you ask us to delete it sooner |
| Reservation request data (enquiry converted to a booking) | Retained in accordance with the retention schedule applicable to confirmed reservations, including any legally required minimum retention period for financial or tax records |
| General correspondence and email | Up to 2 years from the date of last correspondence, unless a longer period is required by law or necessary to resolve a dispute |
| Technical and server log data | Up to 12 months from the date of collection, after which logs are deleted or anonymised |
| Cookie consent records | Up to 12 months from the date the preference was set, refreshed if you update your preferences |
| Analytics data (aggregated or pseudonymised) | Up to 26 months in aggregated or pseudonymised form; raw session data is subject to the technical data retention period above |
When personal information is no longer needed, we take reasonable steps to destroy it securely or to de-identify it so that it can no longer be linked to you.
9. Security of Personal Information
We take the security of your personal information seriously and maintain reasonable technical and organisational measures designed to protect it against unauthorised access, disclosure, alteration or destruction. These measures include:
- Encryption of data in transit using industry-standard Transport Layer Security (TLS)
- Access controls that restrict access to personal information to staff and service providers who need it to perform their functions
- Regular review of our information systems and security practices
- Secure storage and data management procedures for records containing personal information
While we take all reasonable precautions, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee the absolute security of information transmitted to or from the Site. If you believe that your personal information has been compromised, please contact us immediately at privacy@quoravellienne.com.
In the event of a notifiable privacy breach affecting your personal information, we will comply with our notification obligations under the Privacy Act 2020, including notifying the Office of the Privacy Commissioner and, where required, affected individuals.
10. Your Privacy Rights
Under the Privacy Act 2020 (New Zealand) and applicable privacy principles, you have the following rights in relation to your personal information held by us. We will respond to any request within the timeframes required by law.
10.1 Right of Access
You have the right to request confirmation of whether we hold personal information about you and, if so, to receive a copy of that information along with details of how it is used. We will provide this information free of charge in most cases.
10.2 Right to Correction
You have the right to request that we correct any personal information we hold about you that is inaccurate, incomplete, misleading or out of date. Where we are unable to make the correction you request, we will note your request alongside the relevant record.
10.3 Right to Erasure
You may ask us to delete your personal information where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and no other legal basis applies, or where the information has been unlawfully processed. We will assess each request in light of our legal obligations; in some cases, we may be required to retain information despite your request.
10.4 Right to Restriction of Processing
You may ask us to restrict the processing of your personal information in certain circumstances, for example while the accuracy of the information is being verified or while an objection to processing is being assessed.
10.5 Right to Object
Where we rely on legitimate interests as our legal basis for processing, you have the right to object to that processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or unless the processing is necessary for the establishment, exercise or defence of legal claims.
10.6 Right to Withdraw Consent
Where we process your personal information based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. To withdraw consent for optional cookies, use the cookie settings link in the Site footer. For other consent-based processing, contact us at privacy@quoravellienne.com.
10.7 How to Exercise Your Rights
To exercise any of the rights listed above, please send a written request to us by email at privacy@quoravellienne.com or by post to:
Privacy OfficerWe may ask you to verify your identity before processing your request, in order to ensure that we do not disclose or modify information belonging to another person. We will respond to your request within 20 working days of receipt, as required by the Privacy Act 2020, and will notify you if we require additional time or if we are unable to fulfil your request.
11. Casino Access and Responsible Gaming
Access to the casino facilities at Quoravellienne is restricted to persons aged 18 years or over. Where you submit an enquiry relating to casino access or gaming facilities through the Site, we may process the information you provide to assess your eligibility in line with this minimum age requirement and applicable New Zealand legislation governing gaming.
The Department of Internal Affairs (New Zealand) publishes guidance on responsible gambling and operates resources to support individuals who wish to set limits on their gaming activity. Information about self-exclusion tools, problem gambling support services and your rights under New Zealand gaming law is available through the Department's published materials. We encourage anyone who has concerns about gambling to consult those publicly available resources.
12. Links to Third-Party Websites
The Site may contain links to external websites operated by third parties. This Privacy Policy applies only to the Site at quoravellienne.com. We have no control over and accept no responsibility for the privacy practices of any third-party website. We encourage you to review the privacy policy of any external website you visit before providing personal information to it.
13. Children
The Site is not directed at children under the age of 18 and we do not knowingly collect personal information from anyone under 18. If you believe that a child has provided us with personal information without appropriate parental or guardian consent, please contact us at privacy@quoravellienne.com so that we may take appropriate steps to delete that information.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Your continued use of the Site after any changes have been published constitutes your acknowledgement of the updated policy.
15. Complaints
If you have a concern about the way we handle your personal information and you are not satisfied with our response to your request or complaint, you have the right to lodge a complaint with the Office of the Privacy Commissioner of New Zealand. The Office of the Privacy Commissioner is the independent authority responsible for overseeing compliance with the Privacy Act 2020 and provides a free complaints process for individuals.
Contact details and complaint guidance are available on the Office of the Privacy Commissioner's official website. We ask that you contact us first at privacy@quoravellienne.com so that we have the opportunity to address your concern before it is escalated to the regulator.
16. Contact Us
If you have any questions about this Privacy Policy or about the way we handle your personal information, please contact our Privacy Officer using any of the following methods:
| privacy@quoravellienne.com | |
| Postal address | Privacy Officer, , |
We aim to acknowledge all privacy enquiries promptly and to provide a substantive response within 20 working days.