In force 1 March 2026 · this is version 4
01 — Who this is aboutUs, and the law we work under
Mooring Place Hospitality Ltd, NZBN 9429048163374, trading as The Mooring Place at 342 Wakefield Quay, Nelson 7011, New Zealand, is the agency responsible for the personal information described here. We handle it under the Privacy Act 2020 and its thirteen information privacy principles.
This policy covers the website, the enquiry form, bookings taken by phone or email, your stay, the restaurants, Tasman Bathhouse, events, and entry to the The Compass Room. It is written to be read rather than to be defensible, so if anything in it is unclear, ask and we will answer plainly.
02 — What we collect
The information, and why we have it
| Enquiries | Your name, email, phone if you give it, the dates and what the enquiry is about, and anything you write in the message box. Collected so a person can answer you. |
|---|---|
| Bookings | The above, plus the room, the rate, arrival and departure, who is travelling with you, and payment card details handled by our payment provider — we never see or store the full card number. |
| During a stay | Restaurant and bar charges, bathhouse bookings, room service, parking, and anything you asked us to arrange. |
| Preferences | Dietary requirements, accessibility needs, a quiet floor, an allergy. Held because a hotel that forgets these is worse at its job. |
| The gaming lounge | That your identification was sighted and that you are 20 or over. If you self-exclude, we hold your name, a photograph you provide, and the term — for the sole purpose of honouring the exclusion. |
| CCTV | Public areas, the car park and the gaming lounge, as required for a gaming venue. Overwritten on a rolling 31-day cycle unless an incident is under investigation. |
| The website | Server logs — IP address, browser, pages, timestamps. Kept 90 days. Analytics only if you agreed on the cookie banner. See the cookie policy. |
We ask for what we need and no more. There is no field on our form whose only purpose is to build a profile of you.
03 — What we do with it
Use, and the limits on it
We use personal information to:
- answer your enquiry and take, hold and honour your booking;
- run the stay — the room, the table, the treatment, the shuttle;
- take payment and issue receipts and invoices;
- meet obligations under the Gambling Act 2003, including age verification and self-exclusion;
- keep guests and staff safe, and to investigate incidents;
- meet tax and companies law record-keeping requirements; and
- send marketing — only if you ticked the box, and every message carries a one-click unsubscribe that works immediately.
We do not sell personal information. We do not trade guest lists. We do not pass anything to advertisers, and nothing you write in the message box on the enquiry form is used for anything except answering it.
04 — Who else sees it
Disclosure
Personal information is shared only with:
- our own staff, and only those who need it to do the job in front of them;
- the payment provider that processes card transactions;
- the email and hosting providers that carry our correspondence and run this website;
- a booking channel, where you booked through one — in which case their privacy policy also applies to you;
- professional advisers under a duty of confidence; and
- the Police, the Department of Internal Affairs or another agency where the law requires it, or where there is a serious threat to somebody's safety.
Some of those providers hold data on servers outside New Zealand, mainly in Australia. Where that happens we satisfy ourselves, as information privacy principle 12 requires, that comparable safeguards apply before anything is sent.
05 — Keeping and losing it
Storage, retention, and what happens if something goes wrong
Information is held on access-controlled systems, encrypted in transit. Paper — the registration cards, the self-exclusion file — is locked in the manager's office. Only staff who need access have it, and access is removed the day somebody leaves.
| Enquiries that came to nothing | 12 months |
|---|---|
| Booking and stay records | 7 years — the Inland Revenue requirement |
| CCTV | 31 days, rolling, unless an incident is being investigated |
| Self-exclusion records | The term of the exclusion, plus 2 years |
| Marketing consent | Until you unsubscribe, then a suppression entry so we do not write to you again by accident |
| Server logs | 90 days |
If a privacy breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Privacy Commissioner as the Act requires, promptly and in plain words — what happened, what was exposed, and what we are doing about it.
06 — Your rights
Seeing it, and correcting it
Under principles 6 and 7 you may ask what we hold about you, ask for a copy, and ask us to correct it. Write to [email protected], marked for the privacy officer, or to 342 Wakefield Quay, Nelson 7011.
We will confirm receipt, may ask you to verify your identity — sensibly, not obstructively — and will answer within 20 working days. There is no charge. If we decline any part of a request we will tell you which part, and why, and what you can do about it.
If we cannot resolve a complaint to your satisfaction, take it to the Office of the Privacy Commissioner: privacy.org.nz, 0800 803 909. You do not need our permission to do that and it costs you nothing.
07 — Changes
When this document changes
We update this policy when what we do changes, and we date every version. Material changes are notified to anyone on the marketing list and posted here for at least 30 days before they take effect. Continuing to use the site after that means the current version applies.
Questions go to [email protected] or +64 3 546 8820, any hour.