Privacy Policy

1. Administrator and contact

The organisation responsible for personal information processed through this website and our guest services is the company identified below. In New Zealand privacy terminology, we may act as an “agency”; where the GDPR applies, we may act as a “controller”.

Please use the displayed email address for privacy enquiries, access requests, correction requests or questions about this Policy. Phone and email details are shown as plain text and are not configured as direct communication links on this local website build.

2. Scope of this Policy

This Policy applies to personal information collected when you browse the website, request accommodation information, contact guest services, make an enquiry about dining or wellness, plan an event, ask about casino hotel facilities, or otherwise interact with Delquarian Royal Stay. Separate notices may be provided where a particular service requires additional information.

The website is primarily directed to people considering hospitality services in New Zealand. Casino access is restricted to eligible guests aged 20 or over. We do not intentionally use this website to collect gambling account credentials or online wagering information.

3. Legal framework

We handle personal information in accordance with the New Zealand Privacy Act 2020 and its Information Privacy Principles. These principles regulate why information may be collected, where it is collected from, what individuals must be told, security, access, correction, accuracy, retention, use, disclosure, overseas disclosure and unique identifiers.

From 1 May 2026, Information Privacy Principle 3A adds notification obligations for certain indirect collections of personal information. Where we obtain personal information from another source and an exception does not apply, we will take reasonable steps to provide the information required by applicable law.

If the GDPR or UK GDPR applies because of the circumstances of an individual interaction, we will also rely on an appropriate lawful basis and honour applicable rights subject to legal limits.

4. Information we may collect

Depending on your interaction, we may collect identity and contact information, reservation or enquiry details, dates of stay, room preferences, accessibility requests, event requirements, dining preferences, wellness booking details, correspondence, feedback, and information reasonably necessary to deliver requested services.

For casino hotel enquiries, we may record whether a person has asked about age-restricted facilities, but this website does not require visitors to submit gambling histories, betting limits or financial wagering information.

Technical information may include browser type, device information, approximate network information, pages requested, timestamps, language preferences and security logs. In the fully local version of this project, no third-party analytics or remote tracking resources are loaded.

5. How information is collected

We generally collect personal information directly from you when you complete a form, correspond with us, make a service request or provide details during a guest interaction. We may also receive information from an authorised representative, travel organiser, event organiser or service provider when lawful and reasonably necessary.

When information is collected indirectly, we assess the source, purpose and notice requirements under New Zealand privacy law, including IPP 3A where applicable.

6. Purposes of processing

We may use personal information to respond to enquiries, manage accommodation and casino hotel service requests, coordinate wellness and dining bookings, plan events, provide guest support, maintain safety and security, verify eligibility for age-restricted areas, comply with legal obligations, handle complaints, improve service quality and protect our systems.

We do not use personal information for an unrelated purpose unless that use is permitted by law, reasonably connected with the original purpose, authorised by the individual, or otherwise supported by an applicable legal basis.

7. GDPR lawful bases where applicable

Where the GDPR applies, processing may be based on steps requested before entering a contract, performance of a contract, compliance with legal obligations, legitimate interests that are not overridden by individual rights, consent where required, or another lawful basis recognised by applicable law.

If we rely on consent, you may withdraw it for future processing at any time. Withdrawal does not make prior lawful processing unlawful.

8. Cookies and local storage

This local website build does not load advertising networks, external analytics, remote fonts or third-party tracking scripts. Essential browser storage may be used only where necessary for basic website functionality. Further information appears in the Cookie Policy.

If future versions add non-essential cookies or comparable technologies, appropriate notice and consent controls must be implemented before those technologies are activated where law requires consent.

9. Disclosure of personal information

We may disclose information to staff and service providers who need it to perform hospitality, reservation, security, technical, professional or operational functions. We require recipients to handle information consistently with applicable privacy and confidentiality requirements.

We may also disclose information where authorised by the individual, required or permitted by law, necessary to protect safety or legal rights, or otherwise allowed under the New Zealand Privacy Act 2020. We do not sell personal information to advertisers.

10. Overseas disclosures

Where information is transferred outside New Zealand, we consider Information Privacy Principle 12 and other applicable requirements. Appropriate contractual, organisational or legal safeguards may be used where required.

Where the GDPR applies to an international transfer, we will use an available lawful transfer mechanism when one is required.

11. Security

We use reasonable administrative, technical and physical safeguards appropriate to the nature of the information and the risks involved. Measures may include access controls, staff confidentiality requirements, secure system configuration, restricted data handling and incident response procedures.

No method of storage or transmission is completely risk-free. We therefore review safeguards and limit access to people who need information for legitimate duties.

12. Retention

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, to meet contractual or operational needs, to resolve disputes, and to comply with legal or accounting obligations. Retention periods vary by category of information.

When information is no longer required, we take reasonable steps to delete, anonymise or securely dispose of it, subject to lawful retention duties.

13. Access and correction rights in New Zealand

Subject to applicable exceptions, individuals may ask whether we hold personal information about them and may request access to that information. Individuals may also ask us to correct personal information they believe is inaccurate, incomplete, out of date or misleading.

If a requested correction is not made, New Zealand law may allow an individual to provide a statement of correction for attachment to the relevant information. We may need to verify identity before processing a request.

14. Additional rights where GDPR applies

Depending on the legal basis and circumstances, GDPR rights may include access, rectification, erasure, restriction, objection, data portability, withdrawal of consent and rights relating to certain automated decisions. These rights are not absolute and may be limited by law.

You may also have the right to complain to a competent supervisory authority. In New Zealand, privacy concerns may be raised with the Office of the Privacy Commissioner after or alongside appropriate direct engagement with us.

15. Direct marketing

Commercial electronic messages with a New Zealand link are subject to the Unsolicited Electronic Messages Act 2007. Where we send marketing communications, we will use an appropriate consent basis, identify the sender and provide a functional way to stop future marketing messages as required.

Service communications that are necessary to administer a requested booking or enquiry are different from optional marketing communications.

16. Children and age-restricted services

The website may provide general hospitality information that can be viewed by adults planning family travel, but casino facilities are not available to persons under 20. We do not knowingly invite children to submit information for casino access.

If we learn that personal information has been collected inappropriately from a child, we will assess and address the issue in accordance with applicable law.

17. Privacy breaches

We maintain procedures for assessing suspected privacy incidents. Where a privacy breach is notifiable under New Zealand law or another applicable regime, we will take the steps required by law, which may include notification to the relevant regulator and affected individuals.

18. Changes to this Policy

We may update this Privacy Policy to reflect legal, operational or service changes. The version published on the website will display the latest effective date. Material changes may be highlighted where reasonably appropriate.

Casino hotel service context

Casino references in this policy concern the age-restricted entertainment area associated with the hotel.

Casino access is separate from ordinary accommodation, dining, wellness and event services.

Casino guests must comply with applicable New Zealand age and venue requirements.

Casino participation is optional and is not required to use other hotel facilities.

Casino information on this website is provided for hospitality planning purposes.

Casino services are subject to responsible entertainment and guest wellbeing standards.

Casino guest information is reviewed alongside the wider hotel service framework.