Privacy Policy
Last updated: 1 June 2025
1. Introduction
("we", "us" or "our") operates the website selvarengrandlodge.com (the "Website") on behalf of Selvaren Grand Lodge, located at . We are registered under company number 9429049826173.
We are committed to protecting your personal information and handling it responsibly in accordance with the Privacy Act 2020 (New Zealand) and its Information Privacy Principles ("IPPs"). This Privacy Policy explains what personal information we collect through this Website, why we collect it, how we use and protect it, and what rights you have in relation to it.
Please read this policy carefully before using the Website or submitting any personal information to us. By continuing to use the Website you acknowledge that you have read and understood its terms.
2. Data Controller
The entity responsible for your personal information collected through this Website is:
| Legal name | |
|---|---|
| Trading as | Selvaren Grand Lodge |
| Registered address | |
| Company number | 9429049826173 |
| GST number | 9429049826173 |
| Privacy enquiries | info@selvarengrandlodge.com |
3. Personal Information We Collect
We collect personal information only to the extent necessary for the purposes described in this policy. The categories of information we may collect through this Website are set out below.
3.1 Contact and Reservation-Request Information
When you submit an enquiry, reservation request, or general contact form through the Website, we collect the information you voluntarily provide, which may include:
- Full name
- Email address
- Telephone number
- Postal or billing address
- Arrival and departure dates
- Room or suite preferences
- Number and composition of guests in your party
- Special requests or accessibility requirements you choose to share
- Correspondence and any other information you include in your message
3.2 Device, Browsing and Technical Information
When you visit the Website, our servers and any analytics tools we have deployed automatically record certain technical data, which may include:
- Internet Protocol (IP) address
- Browser type and version
- Operating system
- Referring URL and pages visited on the Website
- Date and time of your visit and session duration
- Device type and screen resolution
This technical information is used in aggregate or pseudonymous form to maintain, improve and secure the Website.
3.3 Cookie and Consent Data
The Website uses cookies and similar tracking technologies. When you first visit the Website you will be presented with a consent notice allowing you to accept, decline or manage non-essential cookies. We record your preference so that the Website respects your choice on subsequent visits. Please refer to Section 7 (Cookies) for full details.
3.4 Special-Category Personal Data
We do not seek to collect special-category personal data through this Website. If you voluntarily include such information within a free-text field (for example, within a special requests field), we will handle it with an enhanced level of care and will process it only to fulfil the purpose for which you provided it.
3.5 Information Relating to Casino Access
Where a reservation request or enquiry relates to casino facilities at Selvaren Grand Lodge, we note that access to those facilities is restricted to persons aged 18 years and over. We may ask for confirmation of age eligibility at the point of enquiry. No additional personal data beyond that described in Section 3.1 is collected through the Website in connection with casino enquiries.
4. Purposes and Legal Bases for Processing
We process your personal information for the purposes and on the legal bases described in the table below. Under the Privacy Act 2020, the primary requirement is that information must be collected for a lawful purpose directly related to our functions or activities, and the collection must be necessary for that purpose.
| Purpose | Personal information used | Lawful basis |
|---|---|---|
| Responding to enquiries and processing reservation requests | Contact details, stay preferences, correspondence | Performance of a contract or pre-contractual steps at your request |
| Confirming eligibility for casino facilities (age verification) | Age confirmation data provided by you | Compliance with our legal obligations and our legitimate interest in operating lawfully |
| Website operation, security and fraud prevention | Device and technical data, IP address | Our legitimate interest in maintaining a secure and functioning website |
| Analytics and Website improvement | Aggregated or pseudonymous browsing data, cookie data | Your consent (where required) or our legitimate interest in improving our online services |
| Sending promotional communications about Selvaren Grand Lodge | Name, email address | Your consent, which you may withdraw at any time |
| Compliance with legal and regulatory obligations | Any personal information relevant to the obligation | Compliance with applicable law |
| Establishing, exercising or defending legal claims | Any personal information relevant to the claim | Our legitimate interest in protecting our legal rights |
Where we rely on legitimate interests, we have balanced those interests against your rights and freedoms and are satisfied that our interests do not override them. Where we rely on consent, you are free to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
5. Disclosure of Personal Information
We do not sell, rent or trade your personal information. We may share it with the following categories of recipients where necessary and proportionate:
5.1 Service Providers
We engage carefully selected third-party service providers who process personal information on our behalf and under our instruction. These providers may include:
- Website hosting and infrastructure providers
- Email delivery and communication platforms
- Reservation management system providers
- Analytics and website optimisation services (subject to your cookie consent choices)
- Information security and fraud-prevention services
All service providers are required to implement appropriate technical and organisational security measures and to use personal information only as directed by us and as permitted by applicable law.
5.2 Legal and Regulatory Authorities
We may disclose personal information to government agencies, law enforcement bodies or regulators where we are required or authorised to do so by New Zealand law, court order or other legal obligation.
5.3 Business Transfers
If is involved in a merger, acquisition, sale of assets or similar transaction, personal information we hold may be transferred as part of that transaction. We will notify you of any such change in control through a prominent notice on the Website or by direct communication where practicable.
5.4 With Your Consent
We may share your information with other parties where you have given us your express consent to do so.
6. International Transfers of Personal Information
Selvaren Grand Lodge is based in New Zealand and this Website is operated from New Zealand. Some of our service providers are located in, or route data through, countries outside New Zealand. Where personal information is transferred to a country that does not provide a comparable level of privacy protection to that offered by the Privacy Act 2020, we take steps to ensure appropriate safeguards are in place, such as contractual protections consistent with the IPPs, before authorising any such transfer.
If you wish to obtain further information about the safeguards we use for international transfers, please contact us at info@selvarengrandlodge.com.
8. Retention of Personal Information
We retain personal information only for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal and contractual obligations, or as required by applicable law. The general principles guiding our retention periods are set out below:
| Category of information | General retention approach |
|---|---|
| Reservation request and guest correspondence | Retained for the duration of the reservation process and for a reasonable period thereafter to manage any follow-up enquiries, complaints or legal claims |
| Marketing preferences and consent records | Retained until you withdraw consent and for a further period as required by law to demonstrate compliance |
| Website technical and server log data | Retained in identifiable form for a short operational period; then anonymised or deleted |
| Cookie consent records | Retained for the period necessary to honour your preference and to demonstrate consent |
| Financial and transaction records | Retained for the period required by New Zealand tax and accounting legislation |
When personal information is no longer required, we securely delete or anonymise it in accordance with our internal data lifecycle procedures.
9. Security of Personal Information
We take the security of your personal information seriously. We implement appropriate technical and organisational measures designed to protect personal information against unauthorised access, disclosure, alteration, loss or destruction. These measures include:
- Encrypted transmission of data using Transport Layer Security (TLS) technology where supported by your browser
- Access controls limiting personal information to staff and service providers who require it to carry out their responsibilities
- Regular review of our information security practices
- Staff training on privacy and data-handling obligations
While we take every reasonable step to protect your information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, and we encourage you to exercise care when sharing personal information online.
If you believe your personal information has been compromised, or if you become aware of any security vulnerability on our Website, please notify us immediately at info@selvarengrandlodge.com.
10. Your Rights
Under the Privacy Act 2020 you have the right to request access to personal information we hold about you and to request correction of that information. We describe these and related rights below.
10.1 Right of Access
You may request confirmation of whether we hold personal information about you and, if so, access to that information. We will respond to access requests as soon as reasonably practicable and no later than the timeframes prescribed by the Privacy Act 2020. We may ask you to verify your identity before fulfilling your request.
10.2 Right of Correction
If you believe that personal information we hold about you is inaccurate, out of date, incomplete, irrelevant or misleading, you may ask us to correct it. Where we agree that the information should be corrected, we will do so promptly. Where we disagree, we will explain our reasons and, upon your request, attach a statement of the correction sought to the information.
10.3 Withdrawal of Consent
Where we process your personal information on the basis of consent — for example, for marketing communications or non-essential cookies — you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of any processing carried out before withdrawal. You can withdraw consent for marketing by following the unsubscribe link in any marketing email or by contacting us directly.
10.4 Objection and Restriction
You may object to us processing your personal information for certain purposes, including direct marketing. We will consider your objection and, where it is well-founded, cease or restrict the relevant processing.
10.5 How to Exercise Your Rights
To exercise any of the rights described above, please contact our Privacy Officer using the details in Section 12. We may ask you to provide reasonable evidence of your identity to protect your information from unauthorised access.
11. Responsible Gaming and Privacy
Selvaren Grand Lodge is committed to the promotion of responsible gaming. The Department of Internal Affairs (DIA) is the New Zealand government agency responsible for publishing guidance on responsible gambling, administering self-exclusion programmes and providing information about support resources for individuals and their families. The DIA provides publicly accessible guidance and self-exclusion tools through its official channels.
If you contact us in connection with responsible gaming resources or self-exclusion enquiries, any personal information you provide will be handled with the utmost confidentiality and used only for the purpose of responding to your request and, where applicable, administering any self-exclusion arrangement in accordance with applicable requirements.
Access to gaming facilities at Selvaren Grand Lodge is restricted to persons aged 18 years and over.
12. Complaints
If you have a concern or complaint about the way in which we have handled your personal information, we encourage you to contact us in the first instance so that we have the opportunity to address your concern.
12.1 Internal Complaints Process
Please send your complaint in writing to our Privacy Officer at info@selvarengrandlodge.com or by post to:
Privacy OfficerWe will acknowledge your complaint promptly and aim to provide a substantive response within 20 working days of receipt. Where the matter is complex and requires additional time, we will advise you of this and keep you informed of our progress.
12.2 Office of the Privacy Commissioner
If you are not satisfied with our response, or if you would prefer to raise your concern directly with the regulator, you have the right to lodge a complaint with the Office of the Privacy Commissioner (OPC), the independent authority responsible for upholding information privacy rights in New Zealand. The OPC provides guidance, investigates complaints and publishes information about privacy rights and obligations. You can contact the OPC through its official website at www.privacy.org.nz.
13. Contact Us
If you have any questions, concerns or requests relating to this Privacy Policy or our handling of your personal information, please contact our Privacy Officer:
Privacy Officer —Selvaren Grand Lodge
Email: info@selvarengrandlodge.com
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, the Website, applicable law or regulatory guidance. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, bring the changes to your attention by a prominent notice on the Website or by direct communication.
We encourage you to review this policy periodically so that you remain informed about how we protect your personal information. Your continued use of the Website after a revised policy has been published constitutes your acknowledgement of the updated terms.