Privacy Policy

1. Scope and privacy framework

This Privacy Policy explains how Malquorianluxeretreat Limited handles personal information when you use this website, contact our team, submit an enquiry, request a reservation, register interest in an event, or otherwise interact with our hospitality and gaming services. The policy is intended to reflect the New Zealand Privacy Act 2020 and its Information Privacy Principles. Where the GDPR applies to a person in the European Economic Area, we also describe the additional rights and safeguards that may be relevant.

This website is informational and enquiry-based. It is not intended to replace the identity, eligibility, security, responsible gaming or regulatory checks that may be required before a person enters or uses regulated gaming facilities.

2. Administrator and contact

The organisation responsible for the website and the handling of personal information described here is Malquorianluxeretreat Limited, located at 84 Victoria Street, Wellington 6011, New Zealand. Privacy enquiries may be sent as plain text to info@malquorianluxeretreat.com or directed to our team by telephone at +64 4 889 2746.

3. Information we may collect

Depending on how you interact with us, we may collect your name, email address, telephone number, requested dates, number of guests, event details, preferred gaming or hospitality arrangements, correspondence, and any other information you choose to provide in an enquiry form.

Technical information may include browser type, device information, approximate network location, referring pages, pages viewed, interaction data, and security logs. We aim to collect only information that is reasonably necessary for a lawful business, safety, security, compliance or service purpose.

4. Purposes of collection and use

We may use personal information to respond to enquiries, coordinate reservations or event requests, provide requested information, manage customer service, improve accessibility and website performance, maintain site security, prevent misuse, keep appropriate business records, and comply with legal or regulatory obligations.

If you request marketing communications, we may use your contact details to send relevant updates. You may withdraw from marketing communications at any time. We do not treat consent to marketing as a condition of receiving ordinary customer service.

5. Sources and notification

We generally collect personal information directly from you. If information is obtained indirectly, we will handle notification obligations in accordance with applicable New Zealand privacy requirements, including Information Privacy Principle 3A where it applies. We may also receive information from authorised representatives, booking partners or service providers when necessary to fulfil a request.

6. Lawful bases where GDPR applies

Where the GDPR applies, processing may be based on steps requested before entering a contract, performance of a contract, compliance with a legal obligation, legitimate interests that are not overridden by your rights, or consent where consent is the appropriate legal basis. If processing relies on consent, you may withdraw that consent for future processing.

7. Disclosure and service providers

We may disclose personal information to service providers that support hosting, security, communications, reservations, professional advice, analytics, fraud prevention or operational administration, but only to the extent reasonably necessary for the relevant purpose. We may also disclose information where required or permitted by law, to protect safety or legal rights, or in connection with a legitimate corporate transaction subject to appropriate safeguards.

We do not authorise service providers to use personal information for unrelated independent purposes merely because they receive it from us.

8. Overseas disclosure and transfers

If personal information is disclosed outside New Zealand, we take reasonable steps to address the requirements of the Privacy Act 2020, including the rules governing overseas disclosure. Where the GDPR applies to an international transfer, we use an available lawful transfer mechanism and appropriate safeguards where required.

9. Data retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, to resolve enquiries, maintain appropriate records, satisfy legal or regulatory requirements, protect legal rights, or address disputes. Retention periods vary according to the type of record and the reason it is held. Information that is no longer required is deleted, anonymised or securely disposed of where reasonably practicable.

10. Security

We use reasonable administrative, technical and organisational safeguards designed to protect personal information against loss, unauthorised access, misuse, alteration or disclosure. No internet transmission or storage method can be guaranteed to be completely secure, so users should avoid sending unnecessary sensitive information through general website forms.

11. Access and correction

Subject to applicable law, you may request access to personal information we hold about you and ask for correction if it is inaccurate, incomplete or out of date. We may need to verify your identity before acting on a request. If a correction request cannot be granted in full, applicable law may provide for a statement of correction to be associated with the relevant information.

12. Additional GDPR rights

Where the GDPR applies, you may have rights to erasure, restriction of processing, objection, data portability, and the right not to be subject to certain decisions based solely on automated processing. These rights are not absolute and may be limited by lawful exemptions or competing obligations. You may also have the right to lodge a complaint with an appropriate supervisory authority.

13. Privacy complaints

If you have a privacy concern, contact us first so we can review it. People in New Zealand may also have the right to raise a complaint with the Office of the Privacy Commissioner. Nothing in this policy limits any statutory complaint right available under applicable law.

14. Children and casino age restrictions

This website is not directed to children for regulated gaming participation. New Zealand casino gambling areas are restricted to persons aged 20 years or older. Website visitors should not submit information on behalf of an underage person for the purpose of arranging access to regulated casino gambling.

15. Changes to this policy

We may update this Privacy Policy to reflect changes in our services, legal requirements, security practices or website functionality. The current version will be published on this page with an updated effective date. Material changes may be highlighted where appropriate.