Legal

Privacy policy

In force 1 March 2026 · Privacy Act 2020 · Windshore Place Hospitality Limited

1. Who we are

Windshore Place Hospitality Limited (NZBN 9429047318856) of 74 Oriental Parade, Wellington 6011, New Zealand, trading as Windshore Place, is the agency responsible for the personal information described here. This policy is written to the Privacy Act 2020 and its thirteen information privacy principles. It is not written to the GDPR, which does not govern us; if you are writing from Europe we will still answer you.

Privacy questions go to [email protected], marked for the privacy officer, or by post to the address above.

2. What we collect

• When you write to us through this site — your name, email address, telephone number if you give one, the type of enquiry, the date and number of guests, and whatever you write in the message. We also record the moment the form was submitted, because a form returned in under three seconds is a robot and we discard it.
• When you stay — the reservation, arrival and departure dates, room preferences, a card held for incidentals, dietary requirements you tell us, and anything relevant you ask us to note.
• When you eat, drink or use the spa — the booking and what was ordered, for the bill.
• When you enter the Windward Room — see section 4.
• Automatically — our web server logs the request, the time, the page, the browser string and a truncated IP address, kept for thirty days for security and nothing else. If you consent to analytics cookies, aggregate page counts as well; see the cookie policy.

We do not ask for and do not want: your ethnicity, your health beyond a dietary or accessibility need you choose to tell us, your religion, or anything about your finances beyond what settling a bill requires.

3. Why we collect it

• To answer what you asked and to hold the room, table or treatment.
• To run the stay properly, including the requests you made.
• To take payment and keep the accounting records the Inland Revenue requires.
• To meet our obligations under the Gambling Act 2003, the Anti-Money Laundering and Countering Financing of Terrorism Act 2009, and the Sale and Supply of Alcohol Act 2012.
• To keep guests and staff safe.
• To send you the seasonal letter, if — and only if — you ticked the box asking for it.

We do not sell personal information. We have never sold personal information and we are not looking for an offer.

4. Information from the gaming lounge

The Windward Room is regulated, and some of what happens there is recorded because the law says it must be.

• Identification at the door is sighted and the check is logged — the date, the time and the fact that a document of a given type was accepted. We do not photocopy or scan your identification at the door, and we do not keep the document number.
• Self-exclusion orders are held securely, seen only by the staff who must see them to make the order work, and kept for as long as the Gambling Act requires and no longer. They are never shared with any other business, and never with family or employers.
• Transactions above the reporting thresholds in the AML/CFT Act are recorded with identification, as that Act requires. Those records may be reported to the Financial Intelligence Unit of the New Zealand Police, and we are not permitted to tell you when a report is made.
• The Windward Card is optional and free. It records visits so that package entitlements can be applied. It does not record what you played or what you staked, and you can close it at the desk in a minute, at which point the record is deleted.

5. Cameras

Closed-circuit cameras cover the entrances, the lobby, the lifts, the corridors, the cage and the gaming floor. They do not cover guest rooms, bathrooms, changing rooms, the pool hall or the treatment rooms. Signs are posted at every entrance to a covered area.

Footage is held for thirty-one days and then overwritten, unless it has been retained for an incident, a complaint, an insurance matter, or at the request of the Police or the Department of Internal Affairs. Access while it is held is limited to the general manager, the duty managers and the surveillance operator, and every viewing is logged.

6. Who else sees it

Only where it is necessary, and only as much as is necessary:

• Our booking, payment and email providers, under contracts that bind them to use it only for us.
• Our bank and card processors, for the transaction. We never see or store a full card number.
• The Department of Internal Affairs, the New Zealand Police, the Inland Revenue, or a court, where the law requires it or a warrant compels it.
• Our accountants and, if a dispute arises, our lawyers and insurers.
• A supplier you have asked us to book on your behalf — a driver, a tour, a restaurant elsewhere in the city — and then only the name and the time.

7. Where it is held

Reservation, accounting and gaming records are held on servers in New Zealand. Our email provider stores mail in Australia. Where any provider holds information outside New Zealand, it is held under contractual protections comparable to the Privacy Act, as principle 12 requires.

8. How long we keep it

• Enquiries that do not become bookings — twelve months.
• Reservation and stay records — seven years, which is what the Tax Administration Act requires of the invoices attached to them.
• Camera footage — thirty-one days, unless retained for an incident.
• Door and self-exclusion records — as the Gambling Act requires.
• Marketing list — until you unsubscribe, and then we keep only the fact that you unsubscribed, so that we do not write to you again by accident.
• Web server logs — thirty days.

9. Your rights

Under principles 6 and 7 of the Privacy Act 2020 you may ask for a copy of the personal information we hold about you, and you may ask us to correct it.

• Write to [email protected], marked for the privacy officer. We may ask you to confirm who you are before we send anything.
• We answer within twenty working days, as the Act requires, and there is no charge.
• If we decline any part of a request, we will tell you which part, why, and that you may take it to the Privacy Commissioner.
• If we cannot agree that something is wrong, you may ask us to attach your statement of correction to the record, and we will.

10. Marketing

The seasonal letter goes out five or six times a year and only to people who asked for it. The box on our form is not ticked when you arrive at it. Every letter carries an unsubscribe link that works immediately, and you can also simply reply and say stop. Under the Unsolicited Electronic Messages Act 2007 we do not send commercial email to anyone who has not consented.

We do not send gambling promotions by email, text or post to anyone who holds a self-exclusion order with us, and we remove them from every list the day the order is made.

11. Children

This website is for adults booking accommodation and is not directed at children. We collect information about children only where a parent or guardian gives it as part of a booking — a name, an age for a cot or a rollaway, a dietary requirement. We do not knowingly collect anything else, and nobody under 20 may use the gaming lounge or receive anything connected to it.

12. Complaints

Tell us first, at [email protected] or on +64 4 894 2100. We acknowledge in five working days and answer within twenty.

If you are not satisfied, you may complain to the Office of the Privacy Commissioner — privacy.org.nz, 0800 803 909, or PO Box 10094, Wellington 6143. You do not need our permission and you do not need to come to us first.

Windshore Place Hospitality Limited · NZBN 9429047318856 · 74 Oriental Parade, Wellington 6011