Privacy Policy

1. Introduction

("we", "us", "our" or "the Hotel") operates the website at dravellorprestigehotel.com and is responsible, as data controller, for the personal data collected through that website. We are committed to protecting the privacy and security of everyone who visits our website, submits an enquiry or makes a reservation request online.

This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, with whom we may share it, and what rights you hold under applicable Canadian privacy law — in particular the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, provincial privacy legislation.

Please read this policy carefully before providing any personal data through our website. By using our website you acknowledge that you have read and understood this policy. If you do not agree with any part of it, please discontinue use of the website.

2. Data Controller

The data controller for all personal data collected through this website is:

All questions, requests or complaints relating to the use of your personal data should be directed to us using the contact details above. We will acknowledge your communication promptly and respond within the timeframe required by applicable law.

3. Personal Data We Collect

We collect only the personal data necessary for the purposes described in this policy. The categories of data we may collect through this website are set out below.

3.1 Contact and Reservation-Request Data

When you complete an online enquiry form, reservation-request form or any other contact form on our website, we may collect:

• Full name
• Email address
• Telephone number
• Postal or billing address
• Arrival and departure dates
• Room-type and occupancy preferences
• Special requests or accessibility requirements you choose to share with us
• Any other information you include in the free-text fields of our forms

3.2 Device and Technical Data

When you visit our website, our servers and web-analytics tools automatically record certain technical information about your device and browsing session, including:

• Internet Protocol (IP) address (which may be truncated or anonymised)
• Browser type and version
• Operating system and device type
• Referring URL and exit pages
• Pages viewed, time spent on each page and click-path through the site
• Date and time of access
• Language settings

3.3 Cookie and Consent Data

When you first visit our website, we present a consent notice that allows you to manage your cookie preferences. We record the choices you make — including the categories of cookies you accept or decline — along with the date and time of your consent and the version of the policy in force at that time. This consent record is retained so that we can demonstrate compliance and so that your preferences are respected on subsequent visits.

For full details of the cookies we use and how to manage them, please see Section 7 (Cookies and Similar Technologies) below.

3.4 Correspondence Data

If you contact us by email or through our website's messaging function, we retain the content of your message together with your contact details and any attachments you send. This enables us to manage and respond to your enquiry effectively.

3.5 Special-Category Personal Data

We do not actively seek to collect special-category personal data through this website. If you voluntarily include such information in a free-text field — for example, as part of an accessibility or dietary request — we will treat it with a higher standard of care and use it only to fulfil your specific request. You are not obliged to provide it.

3.6 Age Verification for Casino-Related Enquiries

Access to the casino facilities at Dravellor Prestige Hotel is restricted to guests who are at least 21 years of age . Where a website form relates to casino access, events or promotions, we may collect a date of birth or an age confirmation for the sole purpose of verifying that the minimum age requirement is met. We do not use this data for any other purpose.

4. How We Use Your Personal Data

We use the personal data we collect for the purposes and on the legal bases set out in the table below. Under PIPEDA we rely on your meaningful consent or, where applicable, a legitimate business purpose as described.

We will not use your personal data in a manner that is incompatible with the purposes for which it was collected without first obtaining your consent or as otherwise permitted by law.

5. Recipients of Your Personal Data

We do not sell, rent or trade your personal data. We may share it with the categories of recipients described below, each of whom is required to handle it in a manner consistent with this policy and applicable privacy law.

5.1 Service Providers and Processors

We engage carefully selected third-party service providers who process personal data on our behalf for the purposes described in this policy. These include:

• Reservation and property-management system providers — to manage accommodation bookings and guest preferences
• Email and messaging infrastructure providers — to deliver communications to and from you
• Web-hosting and content-delivery providers — to operate and serve our website securely
• Analytics service providers — to help us understand how our website is used (subject to your cookie consent)
• IT security and fraud-prevention providers — to protect the integrity of our systems and website

All service providers are bound by written data-processing agreements that limit their use of your data to the specific purposes for which they are engaged and require them to apply appropriate security measures.

5.2 Professional Advisers

We may share personal data with legal advisers, auditors or accountants where necessary for the purposes of obtaining professional advice, defending or prosecuting legal claims, or meeting regulatory obligations.

5.3 Regulatory and Law-Enforcement Authorities

We may disclose personal data to government bodies, law-enforcement agencies or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, property or safety of the Hotel, its guests or the public.

5.4 Business Transfers

In the event of a merger, acquisition, reorganisation or sale of all or part of our business, personal data held by the Hotel may be transferred to the relevant successor entity. We will notify you of any such transfer and of any consequent changes to this policy before your data is subjected to different privacy practices.

6. International Transfers of Personal Data

is based in Canada. Some of our service providers maintain infrastructure or personnel outside Canada. Where personal data is transferred outside Canada, we take steps to ensure that an adequate level of protection is applied, consistent with Canadian privacy law. Such steps may include:

• Transferring data only to countries or organisations that the Office of the Privacy Commissioner of Canada recognises as providing comparable privacy protections;
• Entering into contractual arrangements with service providers that require them to apply equivalent standards of data protection;
• Applying technical and organisational safeguards to protect data in transit and at rest.

You may request further information about the safeguards applicable to any particular transfer by contacting us at info@dravellorprestigehotel.com .

7. Cookies and Similar Technologies

Our website uses cookies and similar technologies to enable core functionality, remember your preferences, understand how visitors use the site and, where you have consented, to support marketing activities. A cookie is a small text file placed on your device by our web server. It does not harm your device and does not give us access to any other data on it.

7.1 Categories of Cookies We Use

7.2 Managing Your Cookie Preferences

When you first visit our website, a consent banner allows you to accept or decline non-essential cookies by category. You may update your preferences at any time by accessing the cookie-settings control available in the footer of every page. In addition, most browsers allow you to refuse or delete cookies through their settings menus; please consult your browser's help documentation for guidance. Please note that disabling certain cookies may affect your experience of the website.

8. Data Retention

We retain personal data only for as long as is necessary for the purposes for which it was collected and in accordance with our legal and regulatory obligations. Our general retention standards are as follows:

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data must be retained beyond these periods to comply with a specific legal obligation or to defend a legal claim, it will be held in a restricted-access environment and used only for that purpose.

9. Security of Your Personal Data

We take the security of your personal data seriously and have implemented a range of technical and organisational measures designed to protect it against unauthorised access, loss, alteration, disclosure or destruction. These measures include:

• Encryption of data in transit using Transport Layer Security (TLS) protocols;
• Encryption of sensitive data at rest;
• Access controls that restrict access to personal data to authorised personnel on a need-to-know basis;
• Regular review of our information-security practices and procedures;
• Staff training on data-protection obligations and information-security awareness;
• Contractual requirements on service providers to maintain equivalent security standards.

Despite these measures, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to use commercially reasonable means to protect your data, we cannot guarantee its absolute security. If you have reason to believe that your interaction with us is no longer secure, please notify us immediately at info@dravellorprestigehotel.com .

In the event of a data breach that poses a real risk of significant harm, we will notify the Office of the Privacy Commissioner of Canada and, where required, affected individuals, in accordance with our obligations under PIPEDA.

10. Your Privacy Rights

Under Canadian privacy law you have a number of rights with respect to your personal data. We are committed to honouring those rights and will respond to valid requests without undue delay and within the timeframes required by law.

10.1 Right of Access

You have the right to request confirmation of whether we hold personal data about you, and to receive a copy of that data together with information about how it is used. We will provide this information free of charge in most circumstances.

10.2 Right to Correction

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to ask us to correct or update it. Where we have shared the inaccurate data with third parties, we will take reasonable steps to inform them of the correction.

10.3 Right to Withdraw Consent

Where we process your personal data on the basis of your consent — for example, for marketing communications or non-essential cookies — you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal. To withdraw consent for marketing emails, you may use the unsubscribe link included in each message or contact us directly. To withdraw cookie consent, please use the cookie-settings control in the footer of our website.

10.4 Right to Complain

If you are not satisfied with how we handle your personal data or respond to your request, you have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada (OPC) . The OPC is Canada's independent privacy regulator and provides published guidance, information for individuals and a complaint process. You may contact the OPC at:

• Website: www.priv.gc.ca
• Toll-free (Canada): 1-800-282-1376
• Address: 30 Victoria Street, Gatineau, Quebec, K1A 1H3, Canada

Residents of Nova Scotia may also be able to seek recourse through the Nova Scotia Freedom of Information and Protection of Privacy Office where applicable provincial legislation applies.

We encourage you to contact us first before raising a complaint with a regulator, as we are committed to resolving concerns directly and promptly.

10.5 Submitting a Privacy Request

To exercise any of the rights described above, please submit your request in writing to:

To protect your privacy and security, we may ask you to verify your identity before processing your request. We will not use the information you provide for verification for any purpose other than confirming your identity.

11. Responsible Gaming and Privacy

The casino facilities at Dravellor Prestige Hotel are open only to guests aged 21 or older . Where you provide age-related information for the purpose of casino access or related enquiries, that information is used solely to verify eligibility and is not processed for any other purpose.

The Nova Scotia Gaming Corporation publishes public guidance and self-exclusion resources for individuals who wish to manage their gaming activity. These resources are independent of the Hotel and we have no role in their administration. For information, please visit the Nova Scotia Gaming Corporation's official website.

12. Links to Third-Party Websites

Our website may contain links to third-party websites, social-media platforms or services that are not operated by us. This Privacy Policy applies only to dravellorprestigehotel.com . We have no control over, and accept no responsibility for, the privacy practices or content of any third-party website. We encourage you to review the privacy policy of any site you visit via a link from our website.

13. Children's Privacy

Our website is not directed at children under the age of 13, and we do not knowingly collect personal data from individuals under that age. If you believe that a child under 13 has provided personal data to us through this website, please contact us at info@dravellorprestigehotel.com and we will take prompt steps to delete that information.

14. Changes to This Privacy Policy

We review this Privacy Policy periodically to reflect changes in our practices, applicable law or the services we offer through our website. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, provide additional notice — for example, by displaying a notice on our homepage or by sending you an email if we hold your contact details and the change affects data we process about you.

We encourage you to review this policy each time you visit our website so that you remain informed about how we protect your personal data. Your continued use of the website after changes are posted constitutes your acknowledgement of the updated policy.

15. Contact Us

All questions, concerns or requests relating to this Privacy Policy or our data-handling practices should be addressed to our Privacy Officer:

We aim to respond to all privacy enquiries within 30 days of receipt. Where a request is particularly complex or a high volume of requests is being processed, we may extend this period by a further 30 days and will inform you accordingly.