Privacy Policy

1. Data Controller

The entity responsible for your personal information collected through this Website is:

If you have any questions or concerns about how your personal information is handled, please contact us at the email address above and we will respond as promptly as possible.

2. Personal Information We Collect

We collect personal information only to the extent necessary for the purposes described in this policy. The categories of information we collect through the Website are set out below.

2.1 Contact and Reservation-Request Information

When you submit an enquiry, reservation request, or contact form through the Website, we collect the information you provide directly, which may include:

• Full name
• Email address
• Telephone number
• Postal address (where provided)
• Preferred arrival and departure dates
• Room or accommodation preferences
• Number of guests
• Special requests or accessibility requirements you choose to disclose
• Any other information you voluntarily include in a free-text field

We draw your attention to the fact that free-text fields may occasionally contain what is known as special-category personal data. You should share only information that is relevant to your reservation request. Where you do provide such information, we will handle it with appropriate care.

2.2 Device, Technical and Usage Information

When you access the Website, our servers and associated technologies automatically record certain technical data about your device and browsing session. This may include:

• IP address
• Browser type and version
• Operating system
• Device type (desktop, tablet, mobile)
• Referring URL and exit URL
• Pages viewed and links clicked within the Website
• Date and time of access
• Time spent on individual pages

This technical information is collected automatically as a routine part of website operation and is used in aggregate to maintain and improve the Website.

2.3 Cookie and Consent Data

The Website uses cookies and similar tracking technologies. A cookie is a small text file placed on your device when you visit a website. We use the following categories of cookies:

When you first visit the Website, a cookie-consent notice will be displayed. You may accept all cookies, accept only strictly necessary cookies, or manage your preferences in more detail. Your consent choices are recorded and stored so that your preferences are respected on subsequent visits. You may withdraw or adjust your consent at any time by accessing the cookie settings on the Website, or by clearing your browser cookies and making a new selection on your next visit.

Please note that restricting certain cookies may affect the functionality and user experience of the Website.

3. Purposes and Legal Bases for Processing

We process your personal information only where there is a lawful basis for doing so. The table below sets out our purposes and the corresponding basis under the Privacy Act 2020 and, where applicable, principles of fair information handling.

Where we rely on our legitimate interests as a legal basis, we have considered those interests against your privacy rights and we are satisfied that our interests do not override your fundamental rights and freedoms. You have the right to object to processing carried out on this basis; please see Section 8 for further details.

Where we rely on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of any processing carried out before withdrawal.

4. Disclosure of Your Personal Information

We do not sell, rent or trade your personal information to third parties for their own marketing purposes. We may share your information with the following categories of recipients only to the extent necessary for the purposes described in this policy.

4.1 Service Providers and Processors

We engage third-party service providers who process personal information on our behalf and under our instructions. These include providers of:

• Website hosting and infrastructure services
• Email delivery and communication platforms
• Website analytics and performance monitoring tools
• Reservation management and property management systems
• Information security and fraud-prevention services

Our service providers are bound by appropriate contractual obligations and are not permitted to use your information for any purpose other than providing services to us.

4.2 Professional Advisers

We may share your personal information with our legal advisers, accountants, auditors or insurers where necessary in connection with the provision of professional services to us, subject to appropriate confidentiality obligations.

4.3 Regulatory and Law Enforcement Authorities

We may disclose personal information to government authorities, regulators or law enforcement agencies where we are required to do so by law, by court order, or where such disclosure is necessary to protect our rights or the rights and safety of others.

4.4 Business Transfers

If we are involved in a merger, acquisition, restructuring or sale of all or part of our business or assets, your personal information may be transferred as part of that transaction. We will notify you of any such transfer and of any material changes to this Privacy Policy that may result.

5. International Transfers of Personal Information

Our primary operations are based in New Zealand. However, some of the third-party service providers we use may store or process personal information outside New Zealand, including in countries such as Australia, the United States or member states of the European Economic Area.

Where personal information is transferred to a country that does not provide a comparable level of privacy protection to that available in New Zealand, we take steps to ensure that appropriate safeguards are in place before any transfer occurs. Such safeguards may include:

• Contractual clauses that require the recipient to protect the information to a standard comparable to the Privacy Act 2020;
• Transferring only to recipients in countries that the Office of the Privacy Commissioner of New Zealand recognises as providing comparable privacy protections; or
• Other lawful transfer mechanisms as may be applicable.

You may contact us at info@tremorianroyalinn.com to request further information about the safeguards we rely on for any specific international transfer.

6. Retention of Personal Information

We retain personal information only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply to information collected through the Website:

When personal information is no longer required, we will securely delete or destroy it, or render it permanently anonymous so that it can no longer be associated with you.

7. Security of Personal Information

We take the security of your personal information seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, disclosure, alteration, accidental loss or destruction. These measures include:

• Encryption of data transmitted between your browser and our Website using Transport Layer Security (TLS);
• Access controls that restrict access to personal information to those employees and service providers who need it to perform their duties;
• Policies and procedures governing the handling, storage and disposal of personal information;
• Regular review of our information security practices.

While we employ these safeguards, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security, and we encourage you to take care when transmitting personal information online. If you become aware of any potential security concern relating to our Website or your personal information, please notify us immediately at info@tremorianroyalinn.com.

In the event of a privacy breach that is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and affected individuals in accordance with the mandatory notification requirements of the Privacy Act 2020.

8. Your Privacy Rights

Under the Privacy Act 2020, you have a number of rights in relation to the personal information we hold about you. These rights are set out below.

8.1 Right of Access

You have the right to request access to the personal information we hold about you. We will provide you with a copy of that information, subject to any lawful grounds for withholding it that are set out in the Privacy Act 2020.

8.2 Right of Correction

If you believe that personal information we hold about you is inaccurate, incomplete, misleading or not up to date, you may request that we correct it. Where we agree that correction is warranted, we will make the correction promptly. Where we do not agree, you have the right to request that we attach a statement of the correction sought to the relevant record.

8.3 Right to Withdraw Consent

Where we are processing your personal information on the basis of your consent (for example, in relation to analytics or functionality cookies), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. You may withdraw consent for cookies through the cookie settings on the Website.

8.4 Right to Object

Where we are processing your personal information on the basis of our legitimate interests, you have the right to object to that processing. We will consider your objection and, unless we have compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims, we will cease the processing concerned.

8.5 Right to Erasure

In certain circumstances you may request that we delete or destroy personal information we hold about you. This right is subject to our obligations under applicable law and any overriding legitimate interests or legal claims. We will assess each request on its merits and respond accordingly.

8.6 Right to Restriction of Processing

In certain circumstances you may request that we restrict the processing of your personal information — for example, while a correction request is being assessed, or where you have objected to processing and a determination is pending.

8.7 How to Exercise Your Rights

To exercise any of the rights described above, please contact us by email at info@tremorianroyalinn.com, clearly describing your request and providing sufficient information to allow us to identify you. We will respond to your request within the timeframes required by the Privacy Act 2020 (generally 20 working days from receipt of a valid request). We may ask you to verify your identity before acting on your request to ensure the security of your information.

We will not charge a fee for handling an access or correction request unless the request is excessive or repetitive, in which case we will notify you of any applicable fee before proceeding.

9. Responsible Gaming Information

Our casino facilities are available only to guests who are 18 years of age or older. We do not use this Website to collect personal information for the purpose of targeting or profiling visitors in relation to gaming activities.

The Department of Internal Affairs administers New Zealand's gambling legislation and publishes public guidance, self-exclusion resources and problem gambling support information for New Zealand residents. These resources are available through the Department of Internal Affairs and the Problem Gambling Foundation of New Zealand. We encourage anyone who may be experiencing difficulties related to gambling to access the publicly available support resources provided by those organisations.

10. Third-Party Websites and Links

The Website may contain links to external websites operated by third parties. This Privacy Policy applies only to the Website at tremorianroyalinn.com and does not govern the privacy practices of any linked third-party website. We are not responsible for the content or privacy practices of those websites and we encourage you to review the privacy policies of any external websites you visit.

11. Children and Minors

This Website is not directed at persons under the age of 18. We do not knowingly collect personal information from persons under 18. If you are under 18, please do not submit any personal information through this Website. If we become aware that we have inadvertently collected personal information from a person under 18, we will take steps to delete that information as soon as reasonably practicable. If you believe we may have collected information from a person under 18, please contact us at info@tremorianroyalinn.com.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Website, applicable law or regulatory guidance. When we make material changes, we will update the effective date shown at the top of this page and, where appropriate, notify you by a prominent notice on the Website or by email. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

Continued use of the Website after the updated policy has been published constitutes your acknowledgement of the revised terms.

13. Complaints and Regulatory Contact

If you have a concern or complaint about the way we have handled your personal information, we encourage you to contact us in the first instance so that we have the opportunity to address your concern directly.

13.1 Contacting Us

Please submit any privacy complaint or concern in writing to:

We will acknowledge your complaint promptly and aim to provide a substantive response within 20 working days. If we require additional time to investigate a complex matter, we will keep you informed of progress.

13.2 Office of the Privacy Commissioner

If you are not satisfied with our response, or if you wish to raise a concern directly with the New Zealand privacy regulator, you have the right to contact the Office of the Privacy Commissioner (OPC). The OPC is the independent statutory body responsible for overseeing the Privacy Act 2020 in New Zealand. The OPC can receive complaints, provide guidance to individuals about their privacy rights, and investigate alleged interference with privacy.

The Office of the Privacy Commissioner can be reached at:

14. Contact Us

For any questions, requests or correspondence relating to this Privacy Policy or the handling of your personal information, please contact us at:

We are committed to handling all privacy enquiries fairly, transparently and in a timely manner.