Privacy Policy
Last updated: August 31, 2026
Please read this page carefully. It is written for the Trevessian Royal Manor website and should be read together with the other legal pages linked in the footer.
1. Administrator and contact
This Privacy Policy explains how Trevessian Royal Manor Limited (“Trevessian Royal Manor”, “we”, “us” or “our”) handles personal information connected with this website and related enquiries. Our contact address is 17 Puketiro Road, Glen Eden, Auckland 0602, New Zealand .
For New Zealand users, we act in accordance with the Privacy Act 2020 and the Information Privacy Principles. Where the EU General Data Protection Regulation or UK GDPR applies because of the location of a user or the nature of processing, we also apply the relevant GDPR requirements, including lawful basis, transparency, data minimisation, purpose limitation, accuracy, storage limitation, integrity, confidentiality and accountability.
2. Scope
This Policy applies to personal information collected through the website, enquiry forms and ordinary communications initiated through the contact details displayed on the website. It does not automatically apply to an independent third-party service that has its own privacy notice.
3. Information we may collect
Depending on how you use the website, we may collect identifiers and contact details such as your name and email address; information you choose to include in an enquiry; preferred dates or service interests; technical information such as browser type, approximate device characteristics, language, page interactions and security logs; and records necessary to manage requests, complaints or legal obligations.
We do not ask users to provide unnecessary special-category personal data through ordinary website forms. Please avoid including sensitive information unless it is genuinely required for a specific request and an appropriate channel has been agreed.
4. How information is collected
Information may be collected directly from you when you complete a form or communicate with us; automatically from essential website operations and security logs; or from a person who is authorised to make an enquiry on your behalf. We aim to collect information fairly and transparently and only where it is reasonably connected with a stated purpose.
5. Purposes of processing
We may use personal information to respond to enquiries; provide requested information about accommodation, dining, events, relaxation facilities and casino hotel entertainment; administer and improve website functionality; maintain security and prevent misuse; keep appropriate business records; comply with law; establish or defend legal claims; and communicate about a request you initiated.
We do not use personal information for unrelated purposes that would be incompatible with the reason it was collected unless a new lawful basis applies or consent is obtained where required.
6. Lawful bases under GDPR
Where GDPR applies, processing may rely on one or more lawful bases: steps requested before entering a contract or performance of a contract; compliance with a legal obligation; our legitimate interests in operating a secure and useful website, responding to enquiries and managing our services where those interests are not overridden by individual rights; or consent for specific optional processing where consent is the appropriate basis.
If processing is based on consent, consent may be withdrawn at any time for future processing. Withdrawal does not affect processing that was lawful before withdrawal.
7. New Zealand privacy principles
For New Zealand users, we seek to collect only information that is necessary for a lawful function, explain why information is being collected, keep information reasonably accurate, apply safeguards appropriate to its sensitivity, avoid keeping it longer than required, and provide access and correction rights subject to statutory exceptions.
8. Cookies and browser storage
The website may use essential cookies or browser storage needed for basic functionality, security or user preferences. Optional technologies will be used only where a lawful basis exists and consent is obtained where required. Detailed information about categories, purposes, retention and browser controls is provided in the Cookie Policy.
9. Sharing and recipients
We may share personal information with personnel who need it for a legitimate business purpose; professional advisers under confidentiality duties; infrastructure, security or communication providers acting under appropriate contractual restrictions; or public authorities where disclosure is required or authorised by law.
We do not sell personal information. We do not disclose personal information to advertisers in exchange for payment.
10. International transfers
Because users may contact us from outside New Zealand, information may in some circumstances be accessed or processed across borders. Where GDPR transfer restrictions apply, we use an appropriate transfer mechanism such as an adequacy decision, approved contractual safeguards, or another lawful derogation when applicable. For New Zealand disclosures, we consider the overseas-disclosure requirements of the Privacy Act 2020.
11. Data retention
We retain personal information only for as long as reasonably required for the purpose for which it was collected, to maintain necessary business records, to resolve disputes and to meet legal obligations. Enquiry information that does not lead to an ongoing relationship is periodically reviewed and deleted or anonymised when there is no longer a valid reason to keep it.
Retention periods may differ depending on the type of record, the need to demonstrate compliance, limitation periods and statutory record-keeping obligations.
12. Security
We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, loss or misuse. Measures may include access controls, least-privilege practices, secure configuration, logging, software maintenance and staff confidentiality obligations.
No internet transmission or storage method can guarantee absolute security. If a qualifying privacy breach occurs, we will assess notification duties under applicable law and notify affected individuals and regulators where required.
13. Your rights under New Zealand law
Subject to statutory exceptions, individuals may request access to personal information we hold about them and request correction of inaccurate information. A request should provide enough information for identity and the relevant records to be verified. We will respond within the timeframes required by applicable law.
14. GDPR rights where applicable
Where GDPR applies, you may have rights to access, rectification, erasure, restriction, data portability, objection to certain processing, and withdrawal of consent. You may also have rights relating to decisions based solely on automated processing where the legal conditions for those rights are met.
These rights are not absolute. We may need to retain or continue processing information where a legal obligation, legal claim, overriding lawful ground or other statutory exception applies.
15. Complaints
We encourage you to contact us first if you have a privacy concern so that we can investigate it. New Zealand users may also have the right to complain to the Office of the Privacy Commissioner. Individuals in the EEA or United Kingdom may have the right to complain to the data-protection authority competent for their location where GDPR or UK GDPR applies.
16. Children and age-restricted areas
The general hotel information on the website is intended for a broad audience, but age-restricted casino entertainment is not directed to persons below the applicable legal admission age. We do not knowingly use website forms to build profiles of children for advertising purposes.
17. Automated decision-making and profiling
We do not use ordinary website enquiry information to make solely automated decisions that produce legal or similarly significant effects. If this changes, we will provide the additional information required by applicable law before the relevant processing begins.
18. Marketing preferences
If optional direct communications are offered, they will be sent only where a lawful basis exists. Where consent is required, you can withdraw that consent. Service communications that are necessary to answer an enquiry or administer an existing arrangement are distinct from optional marketing.
19. Accuracy and your responsibilities
Please provide accurate information when contacting us and let us know if material details change. We may take reasonable steps to verify identity before responding to a privacy-rights request so that information is not disclosed to the wrong person.
20. Changes to this policy
We may update this Privacy Policy to reflect changes in law, website operation or our information-handling practices. The current version and update date will be published on this page. Material changes will be presented in a reasonably clear manner.
21. Contact for privacy requests
Privacy questions, access requests and correction requests may be directed to the contact information displayed on the website. The responsible legal entity is Trevessian Royal Manor Limited , and its contact address is 17 Puketiro Road, Glen Eden, Auckland 0602, New Zealand .