Legal Information

Privacy Policy

Governed by the New Zealand Privacy Act 2020 • Last Updated: March 2025

1. Who We Are (Data Controller)

This website and related expedition planning services are operated by JourneyAotearoa Ltd (New Zealand Company Registration). We operate our public digital presence and email communication exclusively through official domain contact: [email protected]. We do not provide physical counter visits or telephone sales desks, maintaining direct online support.

2. Scope of this Policy

This Privacy Policy describes how JourneyAotearoa collects, safeguards, and utilizes personal information when you access our guides, complete consultation forms, or communicate with our editorial team, in accordance with the Information Privacy Principles (IPPs) of the New Zealand Privacy Act 2020 and relevant international standards.

3. Data We Collect

We categorize the personal information we handle into three tiers:

Directly Provided Data: Name, personal email address, voluntary traveler phone number, duration preferences, and custom trip inquiries submitted via our forms.
Automatically Collected Telemetry: Anonymized or pseudo-anonymized IP address, device operating system, browser type, referral URLs, and pages viewed during browsing sessions.
Analytical & Marketing Signals: Aggregated audience performance markers collected through Google Consent Mode v2 only after user selection.

4. Purpose and Legal Grounds for Processing

Processing Purpose	Categories of Data	NZ Privacy Act & Global Legal Basis
Trip Consultation & Itinerary Preparation	Name, email, travel dates, trip message	IPP 1-4 (Direct Collection for Necessary Service) / Legitimate Interest
Site Security & Abuse Prevention	IP address, HTTP request headers	IPP 5 (Security Storage) / Legal Obligation
Audience Aggregation & Content Quality	Pages visited, session duration, cookie IDs	Express Opt-In Consent (Consent Mode v2)

5. Cookies & Google Consent Mode v2

Before any non-essential analytics or advertising scripts execute on your device, our Google Consent Mode v2 framework sets signals to denied. Visitors may accept all, reject non-essential tags, or customise preferences. Your consent choice is stored locally in your browser and may be updated at any moment via the permanent "Cookie Settings" button located in our website footer.

6. Third-Party Disclosures & Non-Sale of Data

We never sell, rent, or trade your personal data. Information is shared solely with vetted technical sub-processors (cloud hosting infrastructure, managed email relays) under strict contractual confidentiality, or where compelled by statutory New Zealand law enforcement authorities.

7. Cross-Border Data Flows

When data is transmitted outside New Zealand (such as securely encrypted cloud data centres overseas), we ensure compliance with Information Privacy Principle 12, validating that offshore recipients provide comparable safeguards.

8. Data Retention Periods

General inquiries and itinerary planning correspondence are retained for up to 24 months to facilitate follow-up expeditions, after which records are permanently deleted or irreversibly anonymized.

9. Your Statutory Rights & Privacy Commissioner

Under the New Zealand Privacy Act 2020, you hold unambiguous rights to request access to any personal data we hold about you and request correction of inaccurate details. You may also withdraw prior marketing consent. If you have concerns regarding our compliance, you may lodge a complaint directly with the Office of the Privacy Commissioner (OPC) New Zealand (privacy.org.nz).

10. Children’s Privacy

Our travel guides and consultation services are intended for individuals aged 16 years and older. We do not knowingly solicit or collect data from minors.

11. Contact the Data Officer

To exercise your information rights, email our designated privacy team at [email protected] with the subject line "Privacy Act Inquiry".