Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

References to "we", "us" or "our" throughout this Policy mean .

2. Scope of This Policy

This Policy applies solely to personal data processed through belvarianstay.com. It covers visitors who browse the Website, individuals who submit a contact or reservation enquiry, and individuals who interact with any consent or preference mechanism offered on the Website.

Personal data collected during an in-person stay, at the casino floor, or through any separate loyalty or membership programme is governed by the notices provided at those respective points of collection and is outside the scope of this document.

3. Personal Data We Collect

3.1 Contact and Reservation-Request Data

When you complete a contact form, a room-enquiry form or a reservation-request form on the Website, we collect the information you voluntarily provide. This typically includes:

• Full name
• Email address
• Telephone number (if provided)
• Intended arrival and departure dates
• Room-type or package preference
• Number of guests
• Special requests or accessibility requirements you choose to disclose
• Any other free-text content you include in your message

Providing the fields marked as required on any form is necessary for us to process your enquiry. Optional fields are clearly labelled; you may leave them blank without affecting our ability to respond.

3.2 Device and Technical Data

When you visit the Website, our servers and analytics tools automatically record certain technical information, including:

• IP address (stored in truncated or anonymised form where technically possible)
• Browser type and version
• Operating system
• Referring URL
• Pages visited on the Website and time spent on each page
• Date and time of your visit
• Clickstream data (the sequence of pages you navigate)

3.3 Consent and Cookie Preference Data

If the Website presents a cookie-consent or preference centre, we record the choices you make — including which categories of cookies you accept or decline and the date and time of your consent or withdrawal — so that we can honour your preferences and demonstrate our compliance with applicable privacy law.

3.4 Special-Category Personal Data

We do not intentionally seek to collect special-category personal data through the Website. If you voluntarily include such data in a free-text field (for example, in a special-requests box), we will process it only to the extent necessary to fulfil the specific request you have made, and we will handle it with additional care in accordance with applicable law.

4. Purposes of Processing and Legal Bases

The table below sets out each purpose for which we process your personal data, the categories of data involved and the legal basis we rely on under the Privacy Act 2020 (New Zealand) and, where applicable, other privacy frameworks.

4.1 Withdrawing Consent

Where we rely on your consent as the legal basis for processing, you may withdraw that consent at any time by contacting us at info@belvarianstay.com or by using any unsubscribe mechanism included in a marketing communication. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5. Cookies and Similar Technologies

The Website uses cookies and similar technologies to deliver its core functionality, remember your preferences and, subject to your consent, analyse how visitors interact with our pages. The categories of cookies we use are:

You may manage your cookie preferences at any time by adjusting the settings in your browser or by revisiting the cookie-preference centre on the Website. Please note that disabling certain cookies may affect the functionality of some Website features.

6. Disclosure of Personal Data

6.1 Internal Access

Access to your personal data within is restricted to staff and management who need it to carry out the purposes described in this Policy. All personnel with access to personal data are subject to confidentiality obligations.

6.2 Third-Party Service Providers

We engage trusted third-party service providers to support the operation of the Website and our communications with you. These providers process personal data only on our behalf and under our documented instructions. Categories of providers include:

• Website hosting and cloud infrastructure providers
• Website analytics service providers
• Email delivery and communications platform providers
• Reservation and property-management system providers
• Customer relationship management (CRM) platform providers
• IT security and monitoring services

We require all service providers to maintain appropriate technical and organisational security measures and to process personal data only in accordance with our instructions and applicable privacy law.

6.3 Legal and Regulatory Disclosure

We may disclose personal data to government authorities, law-enforcement agencies or courts where we are required to do so by law, court order or other binding legal process, or where disclosure is necessary to protect the rights, property or safety of , our guests or others.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or part of our business assets, personal data held by us may be transferred to the relevant successor entity. We will notify you of any such transfer and any consequential changes to this Policy as required by law.

6.5 No Sale of Personal Data

We do not sell, rent or otherwise trade your personal data to third parties for their own independent marketing or commercial purposes.

7. International Transfers of Personal Data

Some of the third-party service providers we engage are based outside New Zealand, which means that your personal data may be transferred to, stored in or processed in a country other than New Zealand. Where such transfers occur, we take steps to ensure that your personal data receives an adequate level of protection, including:

• Transferring data only to countries or organisations that the Privacy Commissioner has recognised as providing comparable privacy safeguards to those in New Zealand;
• Entering into contractual arrangements with service providers that require them to protect personal data to a standard at least equivalent to that required under New Zealand law; or
• Relying on other lawful transfer mechanisms available under the Privacy Act 2020 and associated regulations.

You may request further information about the safeguards we apply to international transfers by contacting us at info@belvarianstay.com.

8. Retention of Personal Data

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required or permitted by applicable law. The table below provides indicative retention periods for the main categories of data processed through the Website.

When personal data is no longer required, we securely delete or anonymise it in accordance with our internal data-management procedures.

9. Security of Personal Data

We implement and maintain appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, disclosure or destruction. These measures include:

• Transmission of data between your browser and our Website over encrypted connections (HTTPS / TLS);
• Access controls and authentication requirements for systems that hold personal data;
• Regular reviews of our information-security practices and the security measures of our service providers;
• Staff awareness and training on data-protection obligations; and
• Documented procedures for identifying, assessing and responding to personal data breaches.

While we take these precautions, no method of transmission over the internet or electronic storage is completely secure. If you have reason to believe that your interaction with us has been compromised, please notify us promptly at info@belvarianstay.com.

10. Your Privacy Rights

Under the Privacy Act 2020 (New Zealand) and other applicable privacy legislation, you have the following rights in relation to personal data we hold about you:

10.1 Right of Access

You may request confirmation of whether we hold personal data about you and, if so, a copy of that data together with information about how it is used.

10.2 Right of Correction

If you believe that personal data we hold about you is inaccurate, incomplete, misleading or out of date, you may ask us to correct it. Where we disagree with a requested correction, we will note your objection alongside the data and inform you of our reasons.

10.3 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

10.4 Right to Object

You may object to processing carried out on the basis of our legitimate interests where you believe that your interests or fundamental rights override ours. We will consider your objection and respond accordingly.

10.5 Right to Erasure

In certain circumstances you may request that we delete personal data we hold about you — for example, where the data is no longer necessary for the purpose for which it was collected and no other lawful basis exists for retaining it.

10.6 Right to Restriction of Processing

In certain circumstances you may request that we restrict the processing of your personal data — for example, while we verify the accuracy of data you have contested, or while your objection to processing is under consideration.

10.7 Right to Data Portability

Where technically feasible and where processing is carried out by automated means on the basis of your consent or a contractual relationship, you may request that we provide personal data you have given us in a structured, commonly used and machine-readable format.

10.8 How to Exercise Your Rights

To exercise any of the rights described above, please send a written request to:

We will acknowledge your request promptly and respond within 20 working days of receipt, as required under the Privacy Act 2020. We may ask you to provide reasonable proof of identity before processing your request. There is generally no fee for exercising these rights, although we reserve the right to charge a reasonable fee for manifestly unfounded or excessive requests.

11. Casino and Responsible Gambling Resources

Our property includes a casino. Entry to the casino is restricted to persons aged 21 and over. Belvarian Stay does not collect personal data through the Website for the purpose of facilitating access to the casino.

The Department of Internal Affairs administers gambling-related legislation in New Zealand and publishes guidance and self-exclusion resources for individuals who wish to limit their gambling. If you or someone you know would like access to independent responsible-gambling information, the Department of Internal Affairs website provides publicly available guidance and information on available support services.

12. Children's Privacy

The Website is not directed at children under the age of 18, and we do not knowingly collect personal data from individuals under that age. If we become aware that we have inadvertently collected personal data from a child under 18 without appropriate parental or guardian consent, we will take prompt steps to delete that data. If you believe we may hold data about a child, please contact us at info@belvarianstay.com.

13. Links to Third-Party Websites

The Website may contain links to external websites or services operated by third parties. This Privacy Policy applies only to belvarianstay.com. We are not responsible for the privacy practices or the content of any third-party website, and we encourage you to review the privacy policy of any external site you visit.

14. Complaints

If you have a concern about the way we have handled your personal data, we encourage you to contact us in the first instance so that we have the opportunity to address your concern directly:

We will acknowledge receipt of your complaint and work with you to resolve it as quickly as possible.

If you are not satisfied with our response, or if you prefer to raise your concern directly with the regulator, you have the right to lodge a complaint with the Office of the Privacy Commissioner of New Zealand, which is the independent authority responsible for overseeing compliance with the Privacy Act 2020 and related legislation. The Office of the Privacy Commissioner provides guidance on how to make a complaint on its official website at www.privacy.org.nz.

15. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of New Zealand, including the Privacy Act 2020 and any regulations made under it. Any dispute arising out of or in connection with this Policy or our processing of your personal data shall be subject to the exclusive jurisdiction of the courts of New Zealand, without prejudice to your right to bring a complaint before the Office of the Privacy Commissioner.

16. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our processing activities, applicable law or regulatory guidance. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, bring the changes to your attention by a notice on the Website or by direct communication.

We encourage you to review this page periodically to stay informed about how we protect your personal data. Continued use of the Website after the publication of a revised Policy constitutes your acknowledgement of the updated terms.

17. Contact Us

For any questions, concerns or requests relating to this Privacy Policy or our processing of your personal data, please contact us: