Cookie Policy

Last updated: 1 July 2025

This Cookie Policy explains how , registered at , operating the website and online services for Varorolodge Haven (collectively, "we", "us" or "our"), uses cookies and similar tracking technologies when you visit our website at varorolodgehaven.com (the "Site"). Please read this policy carefully to understand what cookies are, how we use them, and the choices available to you.

This Cookie Policy should be read together with our Privacy Policy, which provides further information about how we collect, use and protect your personal data. If you have any questions, please contact us at privacy@varorolodgehaven.com.

1. What Are Cookies?

Cookies are small text files that are placed on your device (computer, tablet, smartphone or other internet-enabled device) when you visit a website. They are widely used to make websites work efficiently, to improve user experience, and to provide information to website owners.

Cookies allow a website to recognise your device and remember certain information about your visit, such as your preferred language, login status, items in a booking cart, and other settings. Some cookies are deleted when you close your browser (known as "session cookies"), while others remain on your device for a specified period or until you delete them (known as "persistent cookies").

In addition to cookies, we may also use similar technologies such as:

  • Web beacons (pixel tags): Tiny transparent images embedded in web pages or emails that allow us to track whether a page has been viewed or an email has been opened.
  • Local storage objects (LSOs): Data stored locally in your browser that persists beyond a single session.
  • Scripts and tracking pixels: Small pieces of code placed on our Site that collect information about your browsing behaviour.

References to "cookies" in this policy include all such similar technologies unless otherwise stated.

2. Who Sets Cookies on This Site?

Cookies on the Varorolodge Haven website are set either by us (first-party cookies) or by third-party service providers we work with (third-party cookies). First-party cookies are set directly by and can only be read by our Site. Third-party cookies are set by external organisations and are governed by those organisations' own privacy and cookie policies.

3. Types of Cookies We Use

We categorise the cookies used on our Site into the following types based on their purpose:

3.1 Strictly Necessary (Essential) Cookies

These cookies are essential for the Site to function correctly. They enable core features such as page navigation, secure areas, booking forms, and account authentication. Without these cookies, certain services or features of our Site cannot be provided. Because these cookies are strictly necessary for the operation of the Site, they do not require your consent under applicable law; however, you can disable them via your browser settings, though this may significantly affect your ability to use the Site.

Cookie Name Provider Purpose Duration
__cf_bm Cloudflare, Inc. This cookie is set by Cloudflare's bot management solution to distinguish between humans and automated traffic. It helps protect the Site from malicious bots and DDoS attacks, ensuring the security and availability of the Site for genuine users. 30 minutes
cf_clearance Cloudflare, Inc. Stored by Cloudflare to record that a visitor has successfully passed a security challenge (e.g. a CAPTCHA or browser integrity check), preventing the challenge from being presented again during the same session. 1 year
__cflb Cloudflare, Inc. Used by Cloudflare for load balancing purposes to distribute visitor traffic across multiple servers, ensuring optimal Site performance and availability. Session
PHPSESSID / session_id A session cookie that maintains your session state across pages during your visit, for example retaining your booking preferences and login status. Session
cookie_consent Records your cookie consent preferences so that we do not ask for your consent again on subsequent visits. 12 months
XSRF-TOKEN A security cookie used to prevent cross-site request forgery (CSRF) attacks by verifying that form submissions originate from our Site. Session

3.2 Analytics and Performance Cookies

These cookies collect information about how visitors use our Site — for example, which pages are visited most often, how long visitors spend on each page, and any error messages they encounter. All information collected by these cookies is aggregated and therefore anonymous. The data helps us understand how our Site is performing and allows us to improve it. These cookies require your consent before they are placed on your device.

Cookie Name Provider Purpose Duration
_ga Google LLC (Google Analytics) The primary Google Analytics cookie. It is used to distinguish unique users by assigning a randomly generated number as a client identifier. It is included in each page request on the Site and used to calculate visitor, session, and campaign data for analytics reports. 2 years
_ga_[container-id] Google LLC (Google Analytics 4) Used by Google Analytics 4 to persist session state and count page views and events within a session. The container ID is specific to the Varorolodge Haven property configuration. 2 years
_gid Google LLC (Google Analytics) Registers a unique identifier used to generate statistical data about how visitors use the Site. This cookie helps differentiate sessions from the same user. 24 hours
_gat / _gat_UA-XXXXXX Google LLC (Google Analytics) Used to throttle the request rate to Google Analytics — limiting data collection on high-traffic sites. It helps ensure analytics tracking operates efficiently. 1 minute
_gac_[property-id] Google LLC (Google Analytics / Google Ads) Contains information about the campaign that directed the user to the Site. It is used to measure the effectiveness of marketing campaigns and attribute conversions to specific advertising sources. 90 days
_hjSessionUser_[id] Hotjar Ltd (if applicable) Set by Hotjar to ensure data from subsequent visits to the Site is attributed to the same user ID. This allows us to analyse user journeys and identify usability improvements. 1 year
_hjSession_[id] Hotjar Ltd (if applicable) Holds current session data for Hotjar analytics, including page views, funnels, and heatmaps during a single browsing session. 30 minutes

3.3 Marketing and Advertising Cookies (Targeting Cookies)

These cookies are used to deliver advertisements and promotional content that are relevant to you and your interests. They track your browsing habits across websites and remember that you have visited our Site so that advertisers can show you targeted advertisements on other platforms. They also help us measure the effectiveness of our advertising campaigns. These cookies require your explicit consent before being placed on your device.

Cookie Name Provider Purpose Duration
_fbp Meta Platforms, Inc. (Facebook/Instagram Pixel) Used by Meta (Facebook) to deliver, measure and improve the relevance of advertisements on the Facebook and Instagram platforms. The Facebook Pixel tracks visitor actions (such as page views and booking completions) to enable conversion tracking, optimisation, and remarketing audiences. 3 months
_fbc Meta Platforms, Inc. (Facebook/Instagram Pixel) Stores click identifiers from Facebook ads that directed a visitor to our Site. Used to attribute conversions to specific Facebook advertising campaigns. 3 months
fr Meta Platforms, Inc. Used by Facebook for advertising delivery and measurement. It enables Facebook to serve relevant ads on and off Facebook by recognising browsers across different websites. 3 months
_gcl_au Google LLC (Google Ads / AdSense) Used by Google AdSense to experiment with advertisement efficiency across websites using Google services. It records whether visitors clicked on an advertisement before arriving at the Site, enabling conversion measurement for Google Ads campaigns. 3 months
IDE Google LLC (DoubleClick / Google Display & Video 360) Used by Google's DoubleClick platform to register and report the user's actions after viewing or clicking one of the advertiser's advertisements for the purpose of measuring the efficacy of an advertisement and to present targeted advertisements to the user. 1 year
NID / CONSENT Google LLC Used by Google to remember your preferences and other information (e.g. preferred language, how many search results to display, whether to have Google's SafeSearch filter turned on) and to show personalised advertisements in Google services and across the web. 6 months
muc_ads / personalization_id Twitter / X Corp. Set by Twitter/X to integrate and share features for social media, to track conversions, and to build a profile of your interests for the purpose of displaying targeted advertisements on Twitter/X. 2 years
li_fat_id / bcookie / lidc LinkedIn Corporation Used by LinkedIn's Insight Tag to enable conversion tracking, retargeting, and analytics for LinkedIn advertising campaigns. These cookies track visitors who arrive via LinkedIn advertisements and record campaign-related interactions on our Site. 1–2 years
_tt_enable_cookie / _ttp TikTok Inc. (TikTok Pixel) Set by TikTok's advertising pixel to measure the effectiveness of TikTok advertising campaigns, track conversions from TikTok ads, and build remarketing audiences on the TikTok platform. 13 months

3.4 Functional Cookies

Functional cookies allow the Site to remember choices you make (such as your preferred language, currency, room type preferences, or whether you wish to receive our newsletter) and provide enhanced, more personalised features. These cookies may also be used to provide services you have requested, such as watching a video or using a live chat feature. The information these cookies collect may be anonymised and cannot track your browsing activity on other websites. These cookies require your consent before being placed on your device.

Cookie Name Provider Purpose Duration
lang / locale Remembers your preferred language and regional settings so that the Site is displayed in your chosen language on return visits. 12 months
currency_pref Stores your preferred currency for displaying room rates and pricing information throughout the booking process. 12 months
intercom-id / intercom-session Intercom, Inc. (if applicable) Used to enable live chat functionality on the Site, allowing you to communicate with our customer service team. These cookies store your chat session information and preferences. 9 months / Session

4. Your Cookie Consent

When you first visit the Varorolodge Haven website, a cookie consent banner will be displayed. This banner allows you to:

  • Accept all cookies: Consent to the use of all categories of cookies described in this policy, including analytics, marketing, and functional cookies.
  • Reject non-essential cookies: Decline all cookies except those that are strictly necessary for the operation of the Site.
  • Manage your preferences: Choose which specific categories of cookies you consent to, by toggling individual cookie categories on or off.

Your consent preferences will be stored in your browser so that we do not ask for your consent again on subsequent visits. However, you may change or withdraw your consent at any time (see Section 5 below).

Please note that strictly necessary cookies do not require your consent and will be placed on your device regardless of your preferences, as they are essential for the Site to function.

If you do not make an active choice on the consent banner, only strictly necessary cookies will be activated. We will not infer your consent from inaction.

Our cookie consent management is governed by applicable New Zealand privacy law, including the Privacy Act 2020 (NZ), and we follow guidance from the Office of the Privacy Commissioner of New Zealand. Where our services are accessed by individuals in the European Economic Area or the United Kingdom, we also apply the relevant requirements under the General Data Protection Regulation (GDPR) and the UK GDPR respectively.

5. How to Manage and Control Cookies

You have several options for managing and controlling the cookies placed on your device. Please note that disabling or deleting certain cookies may affect the functionality of our Site and your user experience.

5.1 Cookie Preference Centre

You can manage your cookie preferences at any time by clicking the "Cookie Settings" link found in the footer of our website. This will open our Cookie Preference Centre where you can review and update your preferences for each cookie category.

5.2 Browser Settings

Most web browsers allow you to control cookies through their settings. You can typically:

  • View cookies that have been stored on your device and delete them individually or in bulk.
  • Block all cookies from being placed on your device.
  • Block third-party cookies specifically while allowing first-party cookies.
  • Configure your browser to alert you when a cookie is about to be placed.

Please consult the help documentation for your specific browser for instructions:

5.3 Opt-Out Tools Provided by Third Parties

Many of our third-party partners offer their own opt-out mechanisms. You can use the following tools to manage your preferences with specific providers:

5.4 Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not wish to have your online activities tracked. As there is currently no universal standard for how websites should respond to DNT signals, our Site does not currently respond to DNT signals. However, you can use the cookie management tools described above to control tracking on our Site.

6. Third-Party Cookies and Links to Third-Party Websites

Our Site may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and their cookie practices, and this Cookie Policy does not apply to them. We encourage you to read the privacy and cookie policies of any third-party website you visit.

The third parties whose cookies we use on this Site include (but are not limited to):

7. Data Transfers

Some of the cookies used on our Site are operated by third parties based outside New Zealand, including in the United States and the European Union. When personal data is collected through these cookies and transferred to servers in other countries, we take steps to ensure that appropriate safeguards are in place, including reliance on standard contractual clauses, adequacy decisions, or other legally recognised transfer mechanisms, in accordance with the New Zealand Privacy Act 2020 and applicable international data protection law.

8. Retention of Cookie Data

The data collected through cookies is retained for varying periods depending on the type and purpose of each cookie, as set out in the tables in Section 3 above. Session cookies expire when you close your browser. Persistent cookies are stored for a fixed period, after which they are automatically deleted. You may delete cookies from your device at any time using your browser settings or our Cookie Preference Centre.

Where cookie data constitutes personal data and is processed by us (as a first-party data controller), we retain that data for no longer than is necessary for the purposes described in this policy and our Privacy Policy.

9. Cookies and the Casino and Gaming Services

As Varorolodge Haven operates gaming and casino services, certain additional cookies may be deployed in connection with these services to:

  • Authenticate and maintain your player account session securely.
  • Support responsible gambling features, including session time limits, deposit limits, and self-exclusion preferences.
  • Comply with regulatory requirements applicable to casino operators in New Zealand, including age verification processes.
  • Detect and prevent fraudulent activity and ensure compliance with anti-money laundering obligations.

Cookies used strictly for these regulatory and security purposes are treated as strictly necessary and do not require your consent. Any cookies used for analytics or marketing in connection with gaming services are subject to the same consent requirements as described in this policy.

10. Children's Privacy

Our Site and services are not directed at children under the age of 18. We do not knowingly collect personal data from children through cookies or any other means. If you believe that a child has provided personal information to us, please contact us at privacy@varorolodgehaven.com and we will take steps to delete that information.

11. Updates to This Cookie Policy

We may update this Cookie Policy from time to time to reflect changes in the cookies we use, changes in applicable law, or for other operational, legal, or regulatory reasons. Any changes will be posted on this page with an updated "Last updated" date at the top of the policy. Where changes are significant, we will provide a more prominent notice, for example by displaying a banner on our Site or sending you a notification by email.

We encourage you to review this Cookie Policy periodically to stay informed about how we use cookies and related technologies. Your continued use of our Site after any changes to this policy constitutes your acknowledgement of the updated policy.

12. Privacy Policy

For further information about how collects, uses, discloses, stores and protects your personal data — including your rights under the New Zealand Privacy Act 2020 to access, correct, or request deletion of your personal information — please read our full Privacy Policy.

13. Contact Us

If you have any questions, concerns or complaints about this Cookie Policy or our use of cookies, please contact us using the details below:

You also have the right to make a complaint to the Office of the Privacy Commissioner of New Zealand if you believe your privacy rights have been infringed: