Privacy Policy
Company No. 9572841 | GST No. 224-957-186
Effective date: 1 June 2025
This Privacy Policy explains how ("we", "us", "our") collects, uses, discloses and protects personal information obtained through the website kalvessiapremiumstay.com (the "Website"). We are committed to handling your personal information in accordance with the Privacy Act 2020 (New Zealand) and its Information Privacy Principles.
Please read this policy carefully before using the Website or submitting personal information to us. By continuing to use the Website you acknowledge that you have read and understood this policy.
1. Data Controller
The data controller responsible for personal information collected through this Website is:
| Legal entity | |
|---|---|
| Registered address | |
| Company number | 9572841 |
| GST number | 224-957-186 |
| Privacy enquiries | privacy@kalvessiapremiumstay.com |
All enquiries, requests and complaints regarding your personal information should be directed to the address or email above.
2. Personal Information We Collect
We collect personal information only to the extent necessary to provide you with the services and functionality available through the Website. The categories of personal information we may collect are set out below.
2.1 Contact and Reservation-Request Data
When you submit an enquiry, reservation request, or any other form on the Website, we collect the information you provide, which may include:
- Full name
- Email address
- Telephone number
- Postal address
- Arrival and departure dates
- Room or suite preferences and special requests
- Number and age range of guests (for room-allocation purposes)
- Any additional information you choose to include in a free-text message field
2.2 Device and Technical Data
When you visit the Website our servers and analytics tools automatically record certain technical information, including:
- Internet Protocol (IP) address
- Browser type and version
- Operating system and device type
- Referring URL and exit pages
- Pages viewed and time spent on each page
- Date and time of access
- General geographic location derived from IP address (country and city level only)
2.3 Cookie and Consent Data
We use cookies and similar tracking technologies on the Website. When you first visit the Website a consent notice is displayed. We record your consent choice, the date and time it was given, the version of the policy in force at that time, and the specific categories of cookies you accepted or declined. For full details of the cookies we use and how to manage your preferences please see Section 7 of this policy.
2.4 Special-Category Personal Data
We do not deliberately seek to collect special-category personal data through this Website. If you voluntarily include such information in a free-text field of a reservation request or enquiry, we will treat it with the additional care required by applicable privacy law and will use it solely to fulfil the specific request to which it relates.
2.5 Casino Age-Verification Data
New Zealand law requires that no person under 18 years of age enters or remains in a casino gaming area. Where the Website provides any online form or process relating to casino access, we may ask you to confirm that you are aged 18 or over. We collect and retain this confirmation as part of our legal compliance obligations.
3. How We Collect Personal Information
We collect personal information through the following means:
- Directly from you — when you complete a contact form, reservation-request form, newsletter sign-up, or any other interactive element on the Website.
- Automatically — through server logs, cookies, and analytics tools when you browse the Website.
- From your device — through information transmitted by your browser or device as a standard part of internet communication.
We do not purchase personal information from third-party data brokers for use in connection with this Website.
4. Purposes of Collection and Use
We use the personal information we collect for the following purposes:
| Purpose | Types of personal information used | Legal basis |
|---|---|---|
| Responding to your enquiries and reservation requests | Contact and reservation-request data | Necessary to take steps at your request prior to entering a contract; our legitimate interest in responding to prospective guests |
| Processing and managing accommodation bookings | Contact and reservation-request data | Performance of a contract with you |
| Sending booking confirmations and pre-arrival communications | Contact and reservation-request data | Performance of a contract with you |
| Verifying minimum casino age (18+) | Age-verification confirmation | Compliance with a legal obligation under New Zealand gaming law |
| Operating, maintaining and improving the Website | Device and technical data; cookie data | Our legitimate interest in ensuring the Website functions correctly and is continuously improved |
| Website analytics and performance measurement | Device and technical data; cookie data | Your consent (where required) or our legitimate interest in understanding how visitors use the Website |
| Personalising your Website experience | Cookie and consent data; technical data | Your consent |
| Sending promotional communications about our property and offers | Contact data (email) | Your consent; or our legitimate interest where a prior relationship exists and you have not opted out |
| Security monitoring and fraud prevention | Device and technical data; IP address | Our legitimate interest in protecting our systems and guests |
| Compliance with legal obligations and regulatory requirements | All categories as relevant | Compliance with a legal obligation |
| Establishing, exercising or defending legal claims | All categories as relevant | Our legitimate interest in protecting our legal rights |
We will not use your personal information for any purpose that is incompatible with the purposes listed above without first informing you and, where required, obtaining your consent.
5. Legal Bases for Processing
Under the Privacy Act 2020 (New Zealand), we are required to have a lawful reason for collecting and using your personal information. The legal bases we rely upon are:
- Contract — processing is necessary for the performance of a contract to which you are a party, or to take steps at your request before entering into a contract (for example, processing your reservation request).
- Legal obligation — processing is necessary for us to comply with a legal obligation, including obligations under New Zealand gaming legislation requiring us to restrict casino access to persons aged 18 and over.
- Legitimate interests — processing is necessary for the purposes of our legitimate interests, provided those interests are not overridden by your interests or fundamental rights. Where we rely on legitimate interests we have carried out a balancing assessment.
- Consent — where you have given us clear, specific and informed consent to a particular processing activity (for example, the placement of non-essential cookies or the sending of promotional emails). You may withdraw consent at any time without detriment; withdrawal does not affect the lawfulness of processing carried out before withdrawal.
7. Disclosure of Personal Information
We may share your personal information with the following categories of recipients, strictly for the purposes described in this policy:
7.1 Service Providers and Processors
We engage carefully selected third-party service providers who process personal information on our behalf and under our instructions. These include providers of:
- Website hosting and content delivery infrastructure
- Reservation and property-management software
- Email delivery and communications platforms
- Website analytics services
- IT support and cybersecurity services
- Customer relationship management software
All such providers are bound by contractual obligations that require them to keep your information confidential, use it only as directed by us, and maintain appropriate security measures.
7.2 Professional Advisers
We may disclose personal information to our legal advisers, accountants and auditors where necessary for the provision of professional services, subject to duties of confidentiality.
7.3 Regulatory and Law Enforcement Authorities
We may disclose personal information to government bodies, regulators, law enforcement agencies or courts where we are required to do so by law, court order or regulatory direction, or where we reasonably believe disclosure is necessary to protect our rights or the safety of others.
7.4 Business Transfers
In the event of a merger, acquisition, restructuring, sale of assets or insolvency administration involving , personal information held by us may be transferred to the relevant successor entity, subject to equivalent privacy protections.
7.5 No Sale of Personal Information
We do not sell, rent or trade your personal information to any third party for that party's own marketing or commercial purposes.
8. International Transfers of Personal Information
Some of our service providers operate systems or infrastructure located outside New Zealand. Where personal information is transferred to a country that does not have privacy laws offering comparable safeguards to those in New Zealand, we take steps to ensure that appropriate protections are in place before the transfer occurs. These steps may include:
- Entering into data-processing agreements that incorporate standard contractual clauses or equivalent contractual protections;
- Transferring only to recipients in countries recognised by the New Zealand Privacy Commissioner as providing comparable privacy protections; or
- Obtaining your explicit consent to the transfer where no other adequate safeguard is available.
You may request further information about the safeguards applicable to any specific international transfer by contacting us at privacy@kalvessiapremiumstay.com.
9. Retention of Personal Information
We retain personal information only for as long as is necessary to fulfil the purposes for which it was collected or as required by applicable law, regulation or legitimate business need. The table below sets out our general retention periods:
| Category of personal information | Retention period | Reason |
|---|---|---|
| Enquiry and contact-form data (no booking made) | 12 months from the date of enquiry | To allow us to follow up and resolve any outstanding matter |
| Reservation-request and booking data | 7 years from the date of the stay or the date the reservation was cancelled | Legal and financial record-keeping obligations under New Zealand law |
| Age-verification confirmations | For the duration of the relevant transaction or interaction, plus 7 years | Compliance with gaming legislation requirements |
| Website analytics and technical log data | Up to 26 months from the date of collection | Performance monitoring and security review |
| Cookie consent records | 3 years from the date consent was given or last updated | Evidence of lawful processing |
| Marketing preferences and promotional communications | Until you unsubscribe or withdraw consent, plus 3 years for records of consent | Consent management and compliance |
At the end of the applicable retention period, personal information is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.
10. Security of Personal Information
We take the security of your personal information seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, disclosure, alteration, loss or destruction. Our measures include:
- Encryption of data in transit using Transport Layer Security (TLS) technology;
- Access controls limiting access to personal information to those staff and contractors who have a business need to access it, subject to confidentiality obligations;
- Regular review of our information security practices and systems;
- Staff training on data protection and information security obligations;
- Procedures for identifying, reporting and responding to personal information breaches in accordance with the Privacy Act 2020 notification requirements.
No method of transmission over the internet or electronic storage is completely secure. While we use commercially reasonable means to protect your personal information, we cannot guarantee absolute security. If you become aware of any security concern relating to the Website or your personal information, please notify us immediately at privacy@kalvessiapremiumstay.com.
11. Your Privacy Rights
Under the Privacy Act 2020 (New Zealand) you have the following rights in respect of personal information we hold about you:
11.1 Right of Access
You have the right to ask us whether we hold personal information about you and, if so, to request a copy of that information and to be told the purposes for which it is held, the source from which it was obtained, and any recipients to whom it has been disclosed.
11.2 Right of Correction
You have the right to request that we correct any personal information we hold about you that is inaccurate, out of date, incomplete, irrelevant or misleading. Where we decline to make a correction, you may ask us to attach a statement of correction to the information.
11.3 Right to Withdraw Consent
Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.
11.4 Right to Object to Direct Marketing
You have the right to ask us at any time to stop sending you promotional communications. You may do so by clicking the unsubscribe link in any marketing email or by contacting us at privacy@kalvessiapremiumstay.com. We will action your request promptly.
11.5 Right to Make a Complaint
If you believe we have breached your privacy rights, you may make a complaint to us in the first instance (see Section 12). You also have the right to complain directly to the Office of the Privacy Commissioner of New Zealand.
11.6 How to Exercise Your Rights
To exercise any of the rights listed above, please submit your request in writing to:
Privacy Officer
Email: privacy@kalvessiapremiumstay.com
We will acknowledge your request within five working days and respond substantively within 20 working days of receipt, as required by the Privacy Act 2020. In complex cases we may extend this period by a further 20 working days, and we will notify you if this is necessary.
We may need to verify your identity before processing certain requests to ensure that personal information is not disclosed to an unauthorised person.
12. Complaints
If you have a concern or complaint about the way we have handled your personal information, we encourage you to contact us in the first instance so that we have an opportunity to resolve the matter directly:
Privacy Officer
Email: privacy@kalvessiapremiumstay.com
We will acknowledge receipt of your complaint within five working days and endeavour to resolve it within 20 working days. If you remain dissatisfied with our response, or if you wish to proceed directly, you may contact the Office of the Privacy Commissioner of New Zealand:
Office of the Privacy Commissioner
PO Box 10094, The Terrace, Wellington 6143, New Zealand
Website: www.privacy.org.nz
13. Third-Party Websites and Links
The Website may contain links to third-party websites that are not operated or controlled by . This Privacy Policy applies solely to the Website. We have no responsibility for the content, privacy practices or policies of any linked third-party website, and we encourage you to review the privacy policy of any external site you visit.
14. Children and Minors
The Website is not directed at persons under the age of 18. We do not knowingly collect personal information from anyone under 18 through this Website. If you believe that a person under 18 has provided personal information to us without appropriate consent, please contact us at privacy@kalvessiapremiumstay.com and we will take prompt steps to delete that information.
Consistent with New Zealand gaming legislation, the minimum age to access the casino facilities at Kalvessiapremiumstay is 18 years.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or for other operational reasons. When we make material changes we will update the effective date at the top of this page and, where appropriate, notify you by email or by displaying a prominent notice on the Website.
We encourage you to review this page periodically to stay informed about how we protect your personal information. Your continued use of the Website after any update constitutes your acknowledgement of the revised policy.
16. Contact Us
If you have any questions, concerns or requests relating to this Privacy Policy or our privacy practices, please contact our Privacy Officer:
— Privacy Officer
Email: privacy@kalvessiapremiumstay.com
We are committed to addressing your enquiry promptly and in accordance with our obligations under the Privacy Act 2020 (New Zealand).