Privacy Policy

1. Who is responsible for your information

Ferquessa Luxe Manor Limited is the organisation responsible for personal information handled through the website and the resort contact routes described here. The website identifies the business address as . Privacy questions and requests may be sent to info@ferquessaluxemanor.com. If a request concerns a reservation or another service handled by a specific team, it may be routed internally to the staff member who needs the information to respond.

2. Scope of this policy

This policy covers information associated with visits to ferquessaluxemanor.com and information you choose to provide through the contact methods published on the site. The website does not provide user accounts, an online casino account, online wagering, a payment checkout, or a web-based reservation submission form. The visible booking strip is a stay-planning feature: it lets you select check-in, check-out, guest count and an optional promo code, stores those choices in your own browser, and directs you to the contact page when you continue.

3. Information that may be processed

Website and technical data. Like most websites, the hosting or delivery environment may process information needed to deliver pages securely, such as IP address, date and time of a request, requested URL, browser or device information, referring page, and basic security or error logs. This information is generally used to provide the service, protect it from misuse, diagnose faults and maintain security.

Stay-planning data stored in your browser. The site can store the check-in date, check-out date, number of guests and promo-code field from the booking strip in local browser storage under the key casino_booking_state_v2. This is designed to preserve your selections on the same device and browser. The website's current front-end code does not transmit those saved values to Ferquessa Luxe Manor merely because they are stored locally.

Consent preference stored in your browser. When you choose “Accept optional cookies” or “Essential only” in the consent banner, the site records that choice in local browser storage under casino_consent_v2 so the banner does not repeatedly ask the same question.

Communications. If you contact the resort by email or telephone, we may receive the contact information and details you provide, such as your name, email address, phone number, preferred dates, guest requirements, accessibility requests, questions, and the content of your correspondence. Please avoid sending payment-card data, passwords, identity documents or sensitive information unless a member of staff specifically requests it through an appropriate channel for a legitimate purpose.

4. Why information is used and the legal basis

Personal information may be used to answer enquiries, discuss availability, take steps at your request before a booking, provide guest services, keep appropriate records of communications, operate and secure the website, prevent abuse, troubleshoot technical issues, comply with legal obligations, and establish or defend legal claims. Where the GDPR applies, the legal basis will depend on the context and may include taking steps before entering a contract or performing a contract, compliance with a legal obligation, legitimate interests in operating a secure and effective hospitality website and responding to guests, or consent where a particular optional processing activity genuinely requires consent.

We do not describe consent as the legal basis for processing that is necessary to answer a request or administer an agreed service. Where processing is based on consent, you may withdraw that consent for future processing at any time without affecting processing already carried out lawfully.

5. Booking enquiries and reservations

Submitting the booking strip on this website opens the contact page using a standard GET request. The selected stay parameters may therefore appear in the page URL in your browser history. The site does not treat that action alone as a confirmed reservation and does not process payment through the website. A reservation is only formed when availability, price and applicable booking terms are confirmed through the relevant reservation process. If you later provide reservation information by email, telephone or another authorised channel, that information may be handled separately as needed to respond to you and administer the stay.

6. Cookies, local storage and analytics

The website's current application code uses localStorage for the consent preference and booking-strip state described above. It does not currently contain Google Analytics, Meta Pixel, advertising tags or other behavioural advertising trackers, and the consent choice does not by itself activate an analytics or marketing service. More detail, including the names of the current browser-storage keys and how to clear them, appears in the Cookie Policy. Hosting, security, browser or network providers may use their own strictly necessary technical mechanisms outside the visible application code where required to deliver the service.

7. When information may be shared

Personal information is not sold. It may be disclosed only where reasonably necessary to organisations that support the website or resort operations, such as hosting, IT, communications, professional advisers or service providers involved in responding to a request, and only to the extent relevant to their role. Information may also be disclosed where required by law, regulation, court order, lawful authority, or where reasonably necessary to protect legal rights, safety, security or the integrity of the service.

Service providers that process personal information on behalf of the business should be subject to appropriate confidentiality, security and data-protection obligations. If information is shared with an independent controller, that organisation is responsible for its own processing under applicable law.

8. International transfers

Some service providers may operate or store information outside New Zealand. Where a cross-border disclosure is made, Ferquessa Luxe Manor Limited will take reasonable steps required by applicable law to ensure an appropriate level of protection. Under New Zealand's Privacy Act 2020, overseas disclosures are subject to Information Privacy Principle 12. Where the GDPR applies to a restricted transfer, an appropriate transfer mechanism and supplementary safeguards will be used when legally required.

9. How long information is kept

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including to respond to enquiries, administer a booking or guest-service relationship, meet accounting or legal obligations, resolve disputes, and maintain appropriate business records. Retention periods differ depending on the type of record and the legal reason for keeping it. LocalStorage values remain on your device until the website code replaces them, you clear site data, or browser settings remove them.

10. Security

Reasonable technical and organisational measures are used to protect personal information against accidental loss, unauthorised access, alteration, disclosure or misuse. No website, email system or internet transmission can be guaranteed to be completely secure. You should use appropriate care when sending information by email and should not send payment-card details or other high-risk information through ordinary email unless specifically instructed to use a secure channel.

11. Your privacy rights

Depending on where you are located and which law applies, you may have rights to request access to personal information, correction of inaccurate information, deletion in certain circumstances, restriction of processing, data portability, objection to particular processing, and information about how your data is used. Under the GDPR, some rights apply only in defined circumstances and are not absolute. You may also withdraw consent where consent is the legal basis for processing.

To make a request, email info@ferquessaluxemanor.com and describe the information or processing concerned. We may ask for information reasonably necessary to verify identity and protect personal information from unauthorised disclosure. Requests will be handled within the timeframe required by the law that applies.

12. Complaints and supervisory authorities

If you believe your privacy has been mishandled, please contact us first so the issue can be reviewed. In New Zealand, you may also be able to complain to the Office of the Privacy Commissioner. If the GDPR applies to your situation, you may have the right to lodge a complaint with the data-protection supervisory authority in the EEA country of your habitual residence, place of work or place of the alleged infringement.

13. Children and casino-related information

This website is directed to a general adult hospitality audience and does not offer online gambling. New Zealand law restricts entry to and gambling in casino gambling areas to people aged 20 or over. We do not knowingly use the website to solicit personal information from children for gambling-related purposes. Parents or guardians who believe a minor has provided personal information inappropriately may contact us to request review and appropriate action.

14. Changes to this policy

We may update this policy when the website, business processes or applicable legal requirements change. The current version will be published on this page with a revised “Last updated” date. Material changes affecting how personal information is handled may be communicated by an additional notice where appropriate.