Cookie Policy
Last updated: 1 January 2025
This Cookie Policy explains how , registered at ("we", "us", or "our"), uses cookies and similar tracking technologies on the official website of Taveliroyal Hotel, Auckland (the "Website"). Please read this policy carefully to understand what cookies are, how we use them, and the choices available to you.
For any questions regarding this Cookie Policy or our data practices, you may contact us at privacy@taveliroyalhotel.com.
1. What Are Cookies?
Cookies are small text files that are placed on your device (computer, smartphone, tablet, or other internet-enabled device) when you visit a website. They are widely used by website operators to make websites work more efficiently, to provide functionality, and to gather information about how visitors interact with the site.
Cookies may be set by the website you are visiting (known as "first-party cookies") or by third parties, such as analytics providers, advertising networks, or social media platforms (known as "third-party cookies").
Cookies can be classified by their lifespan:
- Session cookies — These are temporary cookies that expire when you close your browser. They are used to maintain your session while you navigate the Website.
- Persistent cookies — These remain on your device for a set period of time (or until you delete them manually) and are reactivated each time you return to the Website.
In addition to cookies, we may use similar technologies such as web beacons, pixel tags, local storage objects, and scripts that function in a comparable way. All references to "cookies" in this policy include these similar technologies unless stated otherwise.
2. Who Sets Cookies on This Website?
Cookies on this Website are placed by:
- (first-party cookies) — placed directly by us to operate and improve the Website.
- Third-party service providers — placed by trusted partners whose services we integrate into the Website, such as analytics providers, security services, and advertising networks. These third parties are governed by their own privacy and cookie policies.
3. Types of Cookies We Use
We categorise the cookies used on this Website into the following types:
3.1 Strictly Necessary (Essential) Cookies
These cookies are essential for the operation of the Website. They enable you to navigate the site and use its features, such as accessing secure areas, completing reservations, and using the hotel-casino booking system. Without these cookies, services you have requested — such as logging in to your account or submitting a reservation form — cannot be provided.
Because these cookies are strictly necessary to deliver the Website and services you request, they do not require your prior consent under applicable law. However, you may still disable them through your browser settings; please be aware that doing so may severely affect the functionality of the Website.
| Cookie Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| __cf_bm | Cloudflare | Used by Cloudflare to distinguish between humans and bots. This cookie supports Cloudflare's Bot Management service to protect the Website from malicious automated traffic and DDoS attacks. | First-party (set by Cloudflare on behalf of the site) | 30 minutes |
| __cflb | Cloudflare | Used by Cloudflare for load balancing to distribute visitor traffic across multiple servers, ensuring Website performance and availability. | First-party | Session or persistent (varies) |
| cf_clearance | Cloudflare | Stores the result of passing a Cloudflare security challenge (e.g., CAPTCHA or browser integrity check). Allows the visitor to browse without repeated security checks. | First-party | 1 year |
| PHPSESSID / JSESSIONID | A standard session cookie used to maintain your user session across pages, enabling features such as the reservation cart and login state. | First-party | Session | |
| cookie_consent | Stores your cookie consent preferences so that the consent banner is not displayed on every page visit. | First-party | 12 months | |
| csrf_token | A security token used to prevent Cross-Site Request Forgery (CSRF) attacks when you submit forms on the Website. | First-party | Session |
3.2 Analytics and Performance Cookies
These cookies collect information about how visitors use the Website — for example, which pages are visited most often and whether visitors receive error messages from web pages. All information collected by these cookies is aggregated and therefore anonymous. These cookies help us understand visitor behaviour and improve the performance and user experience of the Website.
Analytics cookies are only placed on your device with your prior consent, unless they are configured in a fully anonymised mode that does not constitute personal data processing under applicable law.
| Cookie Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| _ga | Google Analytics (Google LLC) | Registers a unique identifier used to generate statistical data on how visitors use the Website. Used to distinguish users. | First-party (set by Google) | 2 years |
| _ga_<container-id> | Google Analytics (Google LLC) | Used by Google Analytics 4 (GA4) to persist session state and distinguish users. Contains a unique identifier for the GA4 property. | First-party (set by Google) | 2 years |
| _gid | Google Analytics (Google LLC) | Registers a unique identifier used to generate statistical data on how visitors use the Website. This cookie expires after 24 hours. | First-party (set by Google) | 24 hours |
| _gat / _gat_UA-XXXXXXX | Google Analytics (Google LLC) | Used to throttle the request rate, limiting the collection of data on high-traffic websites. | First-party (set by Google) | 1 minute |
| _gac_<property-id> | Google Analytics / Google Ads (Google LLC) | Contains information about the campaign that led the user to the Website. Used by Google Analytics and Google Ads to measure conversion rates. | First-party (set by Google) | 90 days |
Google Analytics data may be transferred to and processed on servers in the United States and other countries. Google LLC is certified under applicable data transfer frameworks. For more information on how Google uses data collected through Analytics, please visit https://policies.google.com/privacy . You may opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on .
3.3 Marketing and Advertising Cookies
These cookies are used to track visitors across websites for the purpose of displaying relevant advertisements. They are also used to limit the number of times you see an advertisement and to measure the effectiveness of advertising campaigns. Marketing cookies are set by third-party advertising networks and social media platforms with our permission. These cookies may link your browsing activity across different websites and devices.
Marketing cookies are only placed with your explicit prior consent.
| Cookie Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| _fbp | Meta Platforms, Inc. (Facebook Pixel) | Used by Meta (Facebook) to deliver, measure, and improve the relevance of advertisements. Tracks visits across websites to build a profile of user interests for targeted advertising. | Third-party | 3 months |
| _fbc | Meta Platforms, Inc. (Facebook Pixel) | Stores the last ad click attribution for a visitor. Used by the Facebook Pixel to attribute conversions (e.g., completed bookings) to Facebook ad campaigns. | Third-party | 3 months |
| fr | Meta Platforms, Inc. | Used by Facebook to deliver advertising products such as real-time bidding. Contains a unique browser and user ID combination for targeted advertising. | Third-party | 3 months |
| _gcl_au | Google LLC (Google Ads / Conversion Linker) | Used by Google AdSense and Google Ads to experiment with advertisement efficiency and to store and track conversions from Google Ads. | First-party (set by Google) | 3 months |
| IDE | Google LLC (DoubleClick / Google Display Network) | Used by Google's DoubleClick platform to register and report the user's actions after viewing or clicking one of the advertiser's advertisements for the purpose of measuring the efficacy of an advertisement. | Third-party | 13 months |
| NID | Google LLC | Registers a unique ID that identifies a returning user's device. The ID is used for targeted advertisements from Google. | Third-party | 6 months |
| _pin_unauth / _pinterest_ct_ua | Pinterest, Inc. (Pinterest Tag) | Used by the Pinterest Tag to track visitor behaviour on the Website and to attribute visits and conversions to Pinterest advertising campaigns. | Third-party | 1 year |
| _tt_enable_cookie / _ttp | TikTok (ByteDance Ltd.) (TikTok Pixel) | Used by TikTok's advertising pixel to track conversions from TikTok ads and to build a profile of user interests for targeted advertising on the TikTok platform. | Third-party | 13 months |
3.4 Functional Cookies
Functional cookies allow the Website to remember choices you make (such as your preferred language, currency, room type preferences, or whether you are a loyalty programme member) and provide enhanced, more personalised features. These cookies may also be used to provide services you have requested, such as watching video content or live chat support.
| Cookie Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| lang | Remembers the user's preferred language selection so that the correct language version of the Website is displayed on subsequent visits. | First-party | 12 months | |
| currency_pref | Stores the user's preferred display currency (e.g., NZD, AUD, USD) for the room and casino package booking engine. | First-party | 12 months | |
| intercom-session-* / intercom-id-* | Intercom, Inc. | Used to identify returning users and maintain a live chat session with our guest support team. Enables continuity of conversation across sessions. | Third-party | Session / 8 months |
4. Your Consent
In accordance with applicable New Zealand privacy legislation, including the Privacy Act 2020, and, where applicable, international standards such as the General Data Protection Regulation (GDPR) for visitors from the European Economic Area or the United Kingdom, we will only place non-essential cookies on your device if you have given your informed, freely given, specific, and unambiguous consent.
When you first visit our Website, a cookie consent banner will be displayed. You may:
- Accept all cookies — consent to the use of all categories of cookies described in this policy.
- Manage preferences — customise which categories of cookies you consent to (e.g., accept analytics cookies but decline marketing cookies).
- Reject non-essential cookies — only strictly necessary cookies will be placed on your device.
Your consent preferences are stored in a consent cookie on your device for up to 12 months. After this period, or if you clear your cookies, you will be asked for your consent again.
You may withdraw or change your consent at any time by clicking the "Cookie Settings" link available in the footer of every page on the Website, or by contacting us at privacy@taveliroyalhotel.com. Please note that withdrawing your consent does not affect the lawfulness of processing that has taken place prior to your withdrawal.
5. Managing and Controlling Cookies
In addition to the consent options provided by our Website, you have several options for managing, restricting, or deleting cookies through your web browser and other tools.
5.1 Browser Settings
Most web browsers allow you to control cookies through their settings. You can typically:
- View what cookies are stored on your device and delete them individually.
- Block third-party cookies.
- Block cookies from specific websites.
- Block all cookies from being set.
- Delete all cookies when you close your browser.
Please refer to your browser's help documentation for instructions on how to manage cookie settings:
Please note that if you choose to disable or delete cookies, some parts of the Website — including the hotel and casino reservation system — may not function as intended.
5.2 Opt-Out Tools Provided by Third Parties
Many of our third-party service providers offer direct opt-out mechanisms:
- Google Analytics: Install the Google Analytics Opt-out Browser Add-on .
- Google Ads / DoubleClick: Manage personalised advertising preferences via Google Ads Settings .
- Meta (Facebook) Pixel: Adjust your advertising preferences at Facebook Ad Preferences .
- Cloudflare: For information about how Cloudflare handles data, please visit the Cloudflare Privacy Policy .
- Industry-wide opt-outs: You may opt out of interest-based advertising from participating companies via the Network Advertising Initiative (NAI) or the Digital Advertising Alliance (DAA) .
5.3 Do Not Track (DNT)
Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not wish to be tracked. As there is no universally accepted standard for how websites should respond to DNT signals, our Website does not currently alter its behaviour in response to a DNT request. However, you may use the consent management tools described in this policy to limit non-essential tracking.
6. Cookies and the Casino Features of This Website
The Website includes online features related to the casino services offered at Taveliroyal Hotel. In addition to the cookies described above, certain casino-related features — including age verification prompts, responsible gambling tools, player session management, and loyalty programme dashboards — may rely on cookies and session storage. These are necessary to comply with applicable New Zealand gambling regulations and responsible gaming obligations and may therefore be classified as strictly necessary cookies that do not require your consent.
If you have questions about how cookies are used in connection with casino services, please contact us at privacy@taveliroyalhotel.com.
7. International Data Transfers
Some of the third-party cookie providers listed in this policy may transfer and process data collected via cookies outside of New Zealand, including in the United States and other countries. Where such transfers occur, we take reasonable steps to ensure that appropriate safeguards are in place in accordance with the Privacy Act 2020 and any applicable international data protection principles. You are encouraged to review the privacy and cookie policies of third-party providers for further information about how they handle your data.
8. Children's Privacy
The Website is not directed at children under the age of 18. We do not knowingly collect personal data from children through cookies or any other means. Given the nature of our hotel-casino services, users are expected to be of legal age. If you believe that a child has provided personal information to us via the Website, please contact us immediately at privacy@taveliroyalhotel.com.
9. Changes to This Cookie Policy
We may update this Cookie Policy from time to time to reflect changes in the cookies and tracking technologies we use, changes in applicable law, or for other operational, legal, or regulatory reasons. The updated policy will be posted on this page with a revised "Last updated" date at the top of the document.
Where changes are material, we will take reasonable steps to notify you — for example, by displaying a prominent notice on the Website or by resetting the cookie consent banner so that you can review and re-confirm your preferences. We encourage you to review this Cookie Policy periodically to stay informed about how we use cookies.
10. Privacy Policy
This Cookie Policy should be read in conjunction with our full Privacy Policy, which provides comprehensive information about how collects, uses, stores, and protects your personal data, including data collected through the cookies described in this document. The Privacy Policy also sets out your rights as a data subject under the New Zealand Privacy Act 2020 and other applicable legislation.
11. Contact Us
If you have any questions, concerns, or requests relating to this Cookie Policy or to our use of cookies and similar technologies, please contact us using the details below:
- Legal entity:
- Registered address:
- Privacy enquiries email: privacy@taveliroyalhotel.com
We endeavour to respond to all privacy and cookie-related enquiries within a reasonable timeframe and in any event within 20 working days, as required under the New Zealand Privacy Act 2020.