Privacy Policy

1. Data Controller Identity

This privacy notice applies to all platforms, consultations, and digital journals operated by Haast Journeys Ltd (NZBN: 9429051882012), a private company registered in New Zealand. Our dedicated contact for all privacy inquiries and data protection requests is: [email protected].

2. Scope of Policy

This policy details how Haast Journeys collects, processes, protects, and discloses personal information when you visit haastjourneys.co.nz, inquire about custom overland itineraries, subscribe to field journals, or correspond with our editorial team. We adhere strictly to the New Zealand Privacy Act 2020, the Information Privacy Principles (IPPs), and where applicable to international travelers, the General Data Protection Regulation (GDPR).

3. Information We Collect

We restrict data collection to what is strictly necessary to formulate route advice and deliver content:

Directly Supplied Data: Name, email address, optional contact telephone number, and expedition notes submitted via our inquiry forms.
Automatically Collected Telemetry: Anonymized IP addresses, browser engine, operating system, pages viewed, time spent on articles, and referring URLs.
Cookie Identifiers: Anonymous identifiers logged strictly through our Google Consent Mode v2 configuration based upon your expressed choices.

4. Purpose of Processing and Lawful Grounds

Purpose of Processing	Data Categories	Lawful Grounds (NZ Privacy Act / GDPR)
Responding to itinerary inquiries & route briefs	Name, email, phone, trip details	IPP 1-4 / Performance of service requested
Maintaining server security and bot defense	IP address, HTTP request headers	Legitimate interests & network integrity
Evaluating journal readership trends	Aggregated analytics tokens	Consent via Google Consent Mode v2 banner

5. Google Consent Mode v2 & Cookie Governance

When you arrive on our site, non-essential cookies relating to analytics, advertising, and user personalization remain strictly denied by default until you render an explicit choice. You can customize your preferences at any time via our Cookie Banner or the persistent link in the footer. We do not sell, rent, or trade your personal information to third-party data brokers under any circumstances.

6. International Data Transfers

Where personal information is processed on hosting servers located outside New Zealand or your country of residence (such as cloud database providers), we ensure comparable safeguards are in place in compliance with Information Privacy Principle 12 of the NZ Privacy Act 2020 and standard contractual clauses.

7. Data Retention

Inquiry correspondence is retained for 24 months to support recurring travelers with seasonal updates, after which it is irreversibly redacted or destroyed. Analytical logs without identifiers are preserved in aggregate form indefinitely.

8. Your Statutory Rights & Supervisory Authority

Under the New Zealand Privacy Act 2020, you possess the right to confirm whether we hold personal information about you, to access that information, and to request correction if inaccurate. If you reside in the EEA or UK, you may also have rights to erasure, data portability, and processing restriction.

To exercise any right, contact our privacy desk at [email protected]. If you believe your privacy concerns have not been addressed adequately, you hold the right to lodge a complaint with the Office of the Privacy Commissioner (New Zealand) via privacy.org.nz.

9. Protection of Minors

In New Zealand, we do not knowingly solicit or collect data from children under the age of 16 without parental consent. If we learn such data has been submitted, it is purged immediately.