Privacy Policy
What we collect, why we collect it, who sees it, how long we keep it, and what you can ask us to do about it.
Last updated: 1 July 2026 · Greenwynd Hospitality Ltd · NZBN 9429048317265
1. Who we are
Greenwynd Hospitality Ltd (NZBN 9429048317265) operates the Greenwynd hotel and resort at 47 Fernhill Road, Queenstown 9300, Otago, New Zealand. In this policy, "we", "us" and "Greenwynd" mean that company, and "you" means anyone whose personal information we hold — guests, restaurant and bar customers, gaming lounge visitors, event organisers, suppliers and website visitors.
We handle personal information in accordance with the Privacy Act 2020 and the thirteen Information Privacy Principles it sets out. If you are contacting us from overseas, note that New Zealand privacy law applies to how we handle your information.
2. What we collect
2.1 When you book or stay
- Name, email address, postal address and telephone number.
- Arrival and departure dates, room type, rate and the details of your booking.
- Payment card details, processed by our payment provider — we do not store full card numbers on our own systems.
- Identity document details where we are required to verify who you are at check-in.
- Preferences you tell us about: floor, pillow, dietary requirements, accessibility needs, occasions.
- The history of your stays with us, and what you spent on rooms, dining and services.
2.2 When you visit the gaming lounge
- Confirmation that you are aged 20 or over, taken from photo identification sighted at the door. We do not retain a copy of the document unless there is a specific reason to, such as an exclusion order.
- Where you have asked for a self-exclusion, the minimum details needed to enforce it, including a photograph. This information is held securely, used for no other purpose, and destroyed when the exclusion ends.
- Records we are required to keep under the Gambling Act 2003 and anti-money-laundering law, including transaction records above prescribed thresholds.
2.3 Security cameras
CCTV operates in public areas of the hotel, at entrances, at the cage and throughout the gaming lounge. Signs are displayed where cameras are in use. Footage is retained for 31 days and then overwritten, except where it has been retained for an investigation or is required to be kept by law. There are no cameras in guest rooms, bathrooms or treatment rooms.
2.4 When you use this website
- What you submit through our enquiry forms.
- Standard technical information: IP address, browser and device type, referring page, and the pages you viewed.
- Analytics and marketing data, only where you have consented through our cookie banner. See our Cookie Policy.
3. Why we collect it
| Purpose | What this covers |
|---|---|
| Providing what you booked | Managing reservations, check-in and check-out, restaurant and spa bookings, event delivery, billing and payment. |
| Guest care | Recording preferences, handling special requests, responding to enquiries and complaints. |
| Legal obligations | Age verification, host responsibility and exclusion records, anti-money-laundering reporting, tax and accounting records, health and safety. |
| Safety and security | CCTV, protecting guests, staff and property, investigating incidents. |
| Improving the hotel | Aggregated analysis of how our rooms and services are used and how our website performs. |
| Marketing | Sending offers and news, where you have opted in. You can withdraw at any time. |
We do not sell personal information, and we do not use it to make automated decisions that have a legal or similarly significant effect on you.
4. Who we share it with
- Service providers — our property management system, payment processor, email provider and IT support, each bound to use the information only for the service they provide to us.
- Partners you asked us to book — transfer operators, ski fields, tour and activity operators, restaurants in town. We pass on only what the booking needs.
- Regulators and law enforcement — the Department of Internal Affairs, the Police, or others where we are required or permitted by law to disclose.
- Professional advisers — our lawyers, accountants and insurers where necessary.
Some providers store data on servers outside New Zealand, including in Australia and the European Union. Before disclosing information overseas we satisfy ourselves that comparable safeguards are in place, as required by Information Privacy Principle 12.
5. How long we keep it
| Information | Retention |
|---|---|
| Booking and stay records | 7 years (tax and accounting requirements) |
| Enquiries that did not lead to a booking | 12 months |
| Marketing consent records | Until you withdraw, plus 2 years |
| CCTV footage | 31 days, unless retained for an investigation |
| Self-exclusion records | Duration of the exclusion, then destroyed |
| Anti-money-laundering records | 5 years, as required by law |
6. Your rights
Under the Privacy Act 2020 you may:
- ask whether we hold personal information about you, and ask for a copy of it;
- ask us to correct it if it is wrong, or attach a statement of correction if we disagree;
- withdraw your consent to marketing at any time, by using the unsubscribe link or writing to us;
- ask us to delete information we no longer have a lawful reason to keep;
- complain to us, and then to the Office of the Privacy Commissioner if you are not satisfied.
Write to [email protected]. We respond within 20 working days, as the Act requires. There is no charge for a request, though we may charge for a second copy of the same information.
7. Keeping information safe
We hold personal information on access-controlled systems, encrypted in transit and at rest, with access limited to staff who need it for their role. Paper records are kept in locked storage. Staff receive privacy training on induction. If a privacy breach occurs that is likely to cause serious harm, we will notify the affected people and the Office of the Privacy Commissioner as required by the Act.
8. Children
Children are welcome as hotel guests. We collect a child's name and age only where a parent or guardian provides it as part of a booking, and we do not market to children. Nobody under 20 may enter the gaming lounge.
9. Changes to this policy
We review this policy annually and whenever our practices or the law change. The current version is always published here, with the date it was last updated at the top of the page.
10. Contact and complaints
Privacy Officer, Greenwynd Hospitality Ltd
47 Fernhill Road, Queenstown 9300, Otago, New Zealand
[email protected] · +64 3 442 8170
If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner: privacy.org.nz, 0800 803 909.