Privacy Policy

1. Agency & Data Controller

This Privacy Policy applies to personal information collected by DiscoverAotearoa Ltd (NZBN: 9429048392011), an independent travel advisory agency based in Auckland, New Zealand. For inquiries regarding data protection, email us at [email protected].

2. Scope & Applicability

We respect your privacy rights under the New Zealand Information Privacy Principles (IPPs) set out in the Privacy Act 2020. This document details how we collect, hold, use, and disclose personal information collected via our website.

3. Information We Collect

Voluntarily Provided Data: Name, email address, phone number, travel dates, and personal preferences submitted through contact forms.
Automated Data Collection: IP address, device specs, browser type, referring URL, and browsing sessions via essential and analytical cookies.

4. Purpose & Legal Basis (Table)

Purpose	Data Collected	Legal Basis (NZ Privacy Act 2020)
Itinerary Consulting & Booking	Name, email, travel dates, messages	IPP 1 & 2 (Directly necessary for services)
Website Optimization	IP address, cookies, analytics signals	User Consent (Opt-in analytics)
Legal Compliance	Transaction records	Statutory duty under NZ laws

5. Cookies & Google Consent Mode v2

Our website utilizes Google Consent Mode v2. By default, marketing and performance analytics tracking remains disabled (denied) until you grant permission via our cookie banner.

6. Disclosure To Third Parties

We do not sell, rent, or trade your personal information. We disclose data solely to third-party travel suppliers (tour operators, accommodations) to execute requested bookings or when required by New Zealand law enforcement.

7. Overseas Data Transfers

When booking overseas partners or using cloud hosting infrastructure, your information may be transferred across borders with comparable privacy safeguards.

8. Data Retention

We retain contact inquiry information for up to 24 months, after which data is securely anonymized or destroyed.

9. Your Rights & NZ Privacy Commissioner

You have the right to request access to and correction of any personal information held by us under IPPs 6 and 7. If you are unsatisfied with our response, you may lodge a complaint with the Office of the New Zealand Privacy Commissioner (OPC) at www.privacy.org.nz.

10. Security Measures

We implement SSL encryption, secure server firewalls, and strict access management protocols to protect against unauthorized access or loss.

11. Children's Privacy

Our site is directed to adult travelers (aged 18+). We do not knowingly collect personal information from individuals under 16 without parental consent.

12. External Links

We are not responsible for the privacy practices or content of third-party external websites linked in our blog or guides.

13. Policy Updates

We reserve the right to modify this privacy statement at any time. Updates take immediate effect upon website publication.

14. Contact Information

DiscoverAotearoa Ltd
Auckland, New Zealand
Email: [email protected]