1. Who we are
This website, royalveyra.com, is operated by Royal Veyra Casino & Hotel ("Royal Veyra", "we", "us"), which is the controller of the personal data described in this policy. Contact for any privacy matter: info@royalveyra.com.
Postal address: Royal Veyra House, Fleet Street, London EC4Y 1AA, United Kingdom
2. What this policy covers
This policy covers personal data processed through this website and through enquiries you send us by e-mail or phone. Data processed at the hotel itself — for example, registration at check-in or the ID check at the entrance to the gaming floor — is covered by separate notices available at the reception.
3. What data we process
- Technical data. Our hosting server records standard log data when you visit: IP address, date and time, the page requested, browser type and referring page.
- Cookie and consent data. A small cookie that stores your cookie choices. Analytics or advertising cookies are used only if you allow them (see section 6).
- Enquiry data. If you contact us, we receive your name, e-mail address or phone number, your preferred dates, the number of guests and whatever else you choose to tell us — for example, dietary or accessibility needs.
We do not take payments on this website and we never ask for card details by e-mail.
4. Why we process data and on what legal basis
| Purpose | Data | Legal basis (GDPR / UK GDPR) |
|---|---|---|
| Delivering the website, keeping it secure and preventing abuse (for example, blocking automated attacks) | Technical data | Legitimate interests (Art. 6(1)(f)) |
| Remembering your cookie choices | Consent cookie | Legal obligation and legitimate interests |
| Answering enquiries and preparing a reservation you ask for | Enquiry data | Steps at your request before entering into a contract (Art. 6(1)(b)) |
| Handling special requests such as dietary or accessibility needs | Information you choose to share | Your explicit consent (Art. 9(2)(a)), which you can withdraw at any time |
| Measuring visits and advertising performance, if enabled | Cookie identifiers, technical data | Consent (Art. 6(1)(a)) — you can withdraw it at any time |
5. Who receives data
- Our hosting provider, which stores the website and server logs.
- Our e-mail provider, which delivers and stores our correspondence.
- Google, only if you consent to analytics or advertising cookies.
- Authorities, if we are legally required to disclose information.
We do not sell personal data and we do not share it with gaming or betting companies.
6. Cookies
We use a necessary cookie to remember your cookie choices. Analytics and advertising cookies (for example, from Google) are loaded only after you accept them. You can change your choice at any time via "Cookie settings" at the bottom of every page. Details are in our Cookie Policy.
7. International transfers
Some providers (for example, Google) may process data outside the European Economic Area or the United Kingdom. Where this happens, transfers are protected by recognised safeguards such as the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
8. How long we keep data
- Server logs: up to 30 days, unless needed longer to investigate a security incident.
- Cookie choice: up to 6 months, after which we ask again.
- Enquiries that do not lead to a booking: up to 12 months after our last reply.
- Enquiries that lead to a booking: for as long as needed to provide the stay and to meet legal and accounting obligations.
9. Security
The website is served over HTTPS, access to the server is restricted and automated protection blocks repeated attempts to break into the site. Only team members who need enquiry data to do their work can see it.
10. Your rights
Depending on where you live, you may have the right to access your data, to have it corrected or deleted, to restrict or object to processing, to receive a copy in a portable format and to withdraw consent at any time without affecting earlier processing. To exercise these rights, write to info@royalveyra.com. We will respond within one month.
You also have the right to complain to a data protection authority — in the United Kingdom, the Information Commissioner's Office (ICO), or the authority in the country where you live or work.
11. Children
This website is intended for adults planning a stay. We do not knowingly collect data from children under 16. The gaming floor is open only to adults aged 18 and over.
12. Automated decisions
We do not make decisions about you based solely on automated processing.
13. Changes to this policy
We may update this policy when our website, our services or the law change. The date at the top of the page shows the latest version.