Privacy Policy
Last updated: 19 June 2025
1. Introduction
("we", "us" or "our") operates the website offlinequessaguide.com (the "Website"), which provides information about and facilitates enquiries and reservation requests for Offline Quessa, a physical hotel-casino property located in Auckland, New Zealand.
We are committed to protecting the personal data of everyone who visits or interacts with our Website. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, how long we keep it, and what rights you have in relation to it.
Please read this policy carefully before using the Website or submitting any personal data through it. By continuing to browse the Website, you acknowledge that you have read and understood this policy.
2. Data Controller
The data controller responsible for your personal data collected through this Website is:
| Legal entity | |
|---|---|
| Registered address | |
| Company registration number | 8973416 |
| VAT / GST number | 134-682-517 |
| Privacy contact email | info@offlinequessaguide.com |
If you have any questions, concerns or requests relating to this Privacy Policy or to the personal data we hold about you, please contact us at the privacy contact email address listed above.
3. Personal Data We Collect
We collect personal data in the following categories when you use our Website:
3.1 Contact and Reservation-Request Data
When you submit an enquiry, reservation request, or any other form on the Website, we collect the information you provide directly, which may include:
- Full name
- Email address
- Telephone number
- Preferred arrival and departure dates
- Room or accommodation type preference
- Number of guests
- Special requests or additional information you choose to include in a free-text field
We remind you not to include unnecessary sensitive information in free-text fields. Where you voluntarily provide special-category personal data, we will process it only to the extent strictly necessary to fulfil your specific request.
3.2 Device and Technical Data
When you visit the Website, our servers and any analytics or functional technologies in use automatically record certain technical information about your device and browsing session, including:
- Internet Protocol (IP) address
- Browser type and version
- Operating system
- Referring website or source URL
- Pages viewed and time spent on those pages
- Date and time of access
- Device type and screen resolution
3.3 Cookie and Consent Data
We use cookies and similar tracking technologies on the Website. When you first visit the Website, a cookie-consent mechanism presents you with choices about which categories of cookies you are willing to accept. We record your preferences so that we can honour them on subsequent visits. The categories of cookies we may use are described in Section 8 (Cookies) below.
3.4 Correspondence Data
If you contact us directly by email or through any contact form on the Website, we retain a record of that correspondence, including any personal data contained within it, so that we can respond to you and maintain an accurate record of our communications.
4. Purposes and Legal Bases for Processing
We process your personal data only for specified, explicit and legitimate purposes. The table below sets out each processing purpose and the legal basis on which we rely.
| Purpose | Categories of data used | Legal basis |
|---|---|---|
| Responding to and processing reservation requests and enquiries submitted through the Website | Contact and reservation-request data; correspondence data | Performance of a contract or steps taken at your request prior to entering into a contract |
| Communicating with you about your reservation request or enquiry | Contact and reservation-request data; correspondence data | Performance of a contract or steps taken at your request prior to entering into a contract; our legitimate interests in maintaining effective guest communications |
| Operating, maintaining and improving the Website and ensuring its security and stability | Device and technical data | Our legitimate interests in administering the Website and protecting it against misuse, fraud and technical failures |
| Analysing how visitors use the Website in order to improve content and functionality | Device and technical data; cookie and consent data | Your consent (where analytics cookies are used); our legitimate interests (where processing relies on aggregated, non-identifiable data) |
| Remembering your cookie preferences | Cookie and consent data | Compliance with our legal obligations to honour your consent choices; our legitimate interests in managing cookie compliance |
| Complying with applicable legal and regulatory obligations | Any category of data where required by law | Compliance with a legal obligation |
| Establishing, exercising or defending legal claims | Any category of data relevant to the claim | Our legitimate interests in protecting our legal rights and position |
| Age verification in connection with casino enquiries (minimum age: 18 years) | Contact and reservation-request data; any age-verification data provided | Compliance with a legal obligation; our legitimate interests in preventing access to casino facilities by persons under the legal minimum age |
Where we rely on legitimate interests as a legal basis, we have carried out a balancing assessment and are satisfied that our interests do not override your fundamental rights and freedoms. You may request further information about that assessment by contacting us at info@offlinequessaguide.com.
Where we rely on consent as a legal basis, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
5. Recipients of Personal Data
We do not sell your personal data. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this policy:
5.1 Internal Staff
Authorised employees and contractors of who require access to personal data in order to perform their duties, including reservations staff, IT support and management.
5.2 Service Providers and Data Processors
Third-party companies that provide services to us and that process personal data on our behalf under written data-processing agreements. These may include:
- Website hosting and infrastructure providers
- Email delivery and communication platform providers
- Website analytics providers
- Customer relationship management (CRM) software providers
- IT security and maintenance providers
All such processors are contractually required to process personal data only on our documented instructions, to maintain appropriate security measures and to comply with applicable privacy law.
5.3 Regulatory and Law-Enforcement Authorities
We may disclose personal data to government bodies, regulators, law-enforcement agencies or courts where we are required to do so by law, court order or regulatory obligation, or where doing so is necessary to protect the safety of individuals or to defend our legal rights.
5.4 Professional Advisers
Legal counsel, accountants and other professional advisers where necessary in connection with the provision of their professional services to us, and subject to applicable professional confidentiality obligations.
5.5 Business Transfers
In the event of a merger, acquisition, restructuring, sale of assets or similar corporate transaction, your personal data may be transferred to the relevant successor or acquiring entity as part of that transaction. We will notify you of any such transfer and any resulting change in data-controller identity by updating this policy.
6. International Transfers of Personal Data
We are based in New Zealand. Some of our service providers and technology platforms may be based in, or operate servers located in, countries outside New Zealand. Where personal data is transferred to a country that does not provide an equivalent level of privacy protection, we take appropriate safeguards to protect your data, which may include:
- Transferring only to countries that have been recognised by the New Zealand Privacy Commissioner as providing comparable safeguards;
- Entering into data-transfer agreements that incorporate standard contractual clauses or equivalent contractual protections;
- Applying additional technical and organisational measures where necessary.
You may request further information about the safeguards we apply to international transfers by contacting us at info@offlinequessaguide.com.
7. Retention of Personal Data
We retain personal data only for as long as is necessary for the purposes for which it was collected, and in accordance with our legal and regulatory obligations. The table below sets out our general retention periods:
| Category of personal data | Retention period |
|---|---|
| Contact and reservation-request data (including fulfilled or declined requests) | Seven (7) years from the date of the last interaction, to satisfy our obligations under New Zealand tax and commercial record-keeping requirements |
| Correspondence data (enquiries not resulting in a reservation) | Two (2) years from the date of our final response, unless a legal claim arises |
| Device and technical data (server logs) | Up to twelve (12) months from collection, unless required for security investigations or legal proceedings |
| Cookie and consent records | Duration of the cookie as set in our cookie settings, plus a record of your consent for up to three (3) years to demonstrate compliance |
| Data retained for legal-claim purposes | Until the relevant limitation period has expired or the claim is finally resolved, whichever is later |
Once personal data is no longer required, we securely delete or anonymise it so that it can no longer be associated with you.
9. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, loss or destruction. These measures are proportionate to the nature of the data and the risks involved, and are regularly reviewed and updated.
Our security measures include, among other things, access controls that restrict personal data to authorised personnel, secure transmission protocols for data sent over public networks, and processes for identifying and responding to any personal data breach in accordance with applicable law.
While we take all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for keeping any access credentials you use in connection with the Website confidential.
10. Your Privacy Rights
Under New Zealand's Privacy Act 2020 and, where applicable, other privacy legislation, you have rights in relation to the personal data we hold about you. These rights are set out below.
10.1 Right of Access
You have the right to request confirmation of whether we hold personal data about you and, if so, to receive a copy of that data and information about how it is processed.
10.2 Right to Correction
You have the right to request that we correct any inaccurate or incomplete personal data we hold about you. We will take reasonable steps to correct the data and, where appropriate, notify any third parties to whom we have disclosed it.
10.3 Right to Erasure
In certain circumstances, you may request that we delete personal data we hold about you. We will honour such requests where we are not required by law or legitimate business necessity to retain the data.
10.4 Right to Restrict Processing
You may request that we restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or where you have objected to processing and we are assessing that objection.
10.5 Right to Object
Where we process your personal data on the basis of our legitimate interests, you have the right to object to that processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or unless the processing is necessary for the establishment, exercise or defence of legal claims.
10.6 Right to Withdraw Consent
Where we rely on your consent to process personal data, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal. You can withdraw consent for cookies at any time through the cookie-consent tool on the Website, or for other consent-based processing by contacting us directly.
10.7 How to Exercise Your Rights
To exercise any of the rights described in this section, please submit a written request to: info@offlinequessaguide.com
We will respond to your request within the timeframe required by applicable law. We may need to verify your identity before processing your request, and we will let you know if we require any additional information from you. We do not charge a fee for exercising your rights, unless your request is manifestly unfounded or excessive, in which case we may charge a reasonable fee or decline to respond.
11. Complaints
If you believe that we have not handled your personal data in accordance with this Privacy Policy or applicable privacy law, we encourage you to contact us in the first instance so that we can investigate and attempt to resolve your concern:
Email:
info@offlinequessaguide.com
Postal address:
If you are not satisfied with our response, or if you wish to raise a concern directly with the relevant supervisory authority, you have the right to lodge a complaint with the Office of the Privacy Commissioner of New Zealand:
- Office of the Privacy Commissioner
- Website: www.privacy.org.nz
- PO Box 10094, The Terrace, Wellington 6143, New Zealand
12. Links to Third-Party Websites
The Website may contain links to external websites operated by third parties. This Privacy Policy applies only to the Website operated by at offlinequessaguide.com. We are not responsible for the privacy practices of any third-party website, and we encourage you to review the privacy policy of any external site you visit.
13. Age Requirements
The Website is not directed at persons under the age of 18. We do not knowingly collect personal data from anyone under 18 years of age. Access to and use of the casino facilities at Offline Quessa is restricted to persons aged 18 years and over. If you believe we have inadvertently collected personal data relating to a person under 18, please contact us at info@offlinequessaguide.com so that we can arrange for that data to be deleted.
14. Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our processing activities, applicable law or industry best practice. Any changes will be published on this page, and the "Last updated" date at the top of this policy will be revised accordingly. We encourage you to review this page periodically to stay informed about how we protect your personal data.
Where changes are material, we will take reasonable steps to bring them to your attention, which may include displaying a prominent notice on the Website.
15. Contact Us
For any questions, requests or concerns regarding this Privacy Policy or the personal data we process, please contact us:
| info@offlinequessaguide.com | |
| Postal address | , |