Coral Stay

Privacy Policy

Coral Stay is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal information when you interact with our hotel, website, and services.

This policy applies to guests, website visitors, and individuals who contact us. It covers information collected online and offline during your stay or interactions. We may update this policy from time to time; the latest version will always be available on our website.

Effective date 7 September 2026

Who We Are

Coral Stay is a coastal boutique hotel located at 189 Marine Parade, Napier, New Zealand. We are the data controller responsible for your personal information.

You can contact us at [email protected] or +64 6 555 2847. Our privacy practices align with the New Zealand Privacy Act 2020.

Information We Collect

We collect information you provide directly, information collected automatically, and information from third parties.

  • Directly provided: name, contact details, payment information, booking preferences, dietary requirements, and any communications with us.
  • Automatically collected: IP address, browser type, device information, pages visited, and cookies.
  • From third parties: travel agents, booking platforms, and analytics providers.

Sensitive Information

We may collect sensitive information such as health or dietary details only when necessary to provide our services, and with your consent. This may include accessibility needs or food allergies. We handle sensitive information with heightened care and only use it for the purpose it was provided.

How We Use Your Information

We use your personal information to provide and improve our services, communicate with you, and meet legal obligations.

  • To process bookings and payments.
  • To personalize your stay and respond to requests.
  • To send transactional emails and, with consent, marketing communications.
  • To improve our website and services through analytics.
  • To comply with legal and regulatory requirements.

Legal Bases

We process personal information based on contract performance, legitimate interests, consent, and legal obligations. Contract: fulfilling your booking. Legitimate interests: improving services and preventing fraud. Consent: marketing communications and certain cookies. Legal obligation: record-keeping and tax compliance.

Cookies and Analytics

What Are Cookies?

Cookies are small text files placed on your device to help the website function and to collect analytics data.

  • We use essential cookies to enable core functionality such as booking forms.
  • We use analytics cookies to understand how visitors use our site and improve the experience.
  • You can control cookies through your browser settings.

Analytics Services

We use third-party analytics services, such as Google Analytics, to collect aggregated information about website traffic and usage patterns. These services may use cookies and similar technologies. The information collected is used to improve our website and services. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

Data Sharing and Disclosure

Third-Party Service Providers

We share personal information with trusted service providers who assist us in operating our hotel and website.

  • Payment processors for secure transactions.
  • Booking platform providers.
  • IT and hosting providers.
  • Marketing and analytics services.
  • Professional advisers such as lawyers and accountants.

Legal Disclosures

We may disclose personal information when required by law or to protect our rights and safety. This includes responding to lawful requests by public authorities, enforcing our terms and conditions, and protecting the security of our guests and property.

Data Security and Retention

Security Measures

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

  • Encryption of data in transit and at rest.
  • Access controls and staff training.
  • Regular security assessments.

Retention Periods

We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Booking and payment records are kept for tax and accounting purposes. Marketing preferences are retained until you unsubscribe. Website analytics data is typically retained for 26 months.

Your Rights and Choices

Under the New Zealand Privacy Act 2020, you have the right to access, correct, and request deletion of your personal information.

  • Right to access: You can request a copy of the personal information we hold about you.
  • Right to correction: You can ask us to correct inaccurate or incomplete information.
  • Right to deletion: You can request that we delete your personal information, subject to legal obligations.
  • Right to object: You can object to certain processing activities.
  • Right to withdraw consent: You can withdraw consent at any time for processing based on consent.

How to Exercise Your Rights

To exercise any of these rights, please contact us using the details provided in the Contact Us section below. We will respond to your request within a reasonable timeframe. We may need to verify your identity before processing your request.

International Data Transfers

Some of our service providers may be located outside New Zealand, which means your personal information may be transferred to and processed in other countries. We take steps to ensure that any international transfers are protected by appropriate safeguards. This may include using service providers that adhere to recognized privacy frameworks.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. The latest version will always be available on our website. We will indicate the effective date at the top of the policy. Material changes may be communicated via email or a notice on our website.

Effective date: 7 September 2026

Contact Us

If you have any questions or concerns about this privacy policy or our data practices, please contact us using the details below.