Privacy Policy

We may collect the following personal information about you depending on your interactions with us and your use of our products and services:

• Identifiers and contact information, such as your full name, email address, postal address, telephone numbers and other information you provide to us when you contact us.
• Transactional information, such as details about your purchase or use of our products and services and your payment information (including your credit or debit card details).
• Your image (in photographs and video) and voice collected automatically by monitoring and surveillance recordings at our facilities and services.
• Internet or other electronic network activity information (i.e., technical information when you access or use our websites), such as your IP address, device ID, browser type, operating system, device type, data about the pages you access on our websites or the functionalities used on our websites, language preferences, email bounce backs, click-throughs, general geographic information, and clickstream data.
• Communications that we exchange with you, including when you contact or correspond with us for customer support or otherwise interact with us by telephone, online, email, or in-person.
• Marketing information, such as your preferences for receiving promotional communications about our products and services and details about how you engage with our communications and advertisements.
• Professional and career-related information and other information you submit to us when applying for a career opportunity, which may include your education and employment history, your resume, letters of reference, references, and any additional information provided by you in an application form or correspondence.
• Any other information that you or another person or organisation on your behalf provide to us.
• Inferences drawn from your personal information, such as your preferences and interests.

(a) Directly from you

We may collect your personal information directly from you. For example, when you:

• register for or apply to purchase or use our products or services, including when you sign required applications, releases, and waivers;
• purchase or use our products or services;
• subscribe to our newsletters or other commercial electronic communications;
• contact, correspond or otherwise communicate with us, including when you request customer support, make an enquiry or complaint, apply for employment, or report an incident or problem with our products or services.

If you give us the personal information of another individual, then you must take all measures, including obtaining the individual’s valid consent, to ensure that you have the lawful right to collect and disclose the information to us and for us to collect, use, disclose and retain the personal information as explained in this Privacy Policy.

(b) Indirectly from you

We may collect your personal information from other persons or organisations where permitted by law or where you have authorised collection from those other persons or organisations, including:

• persons and organisations that purchase our products and services on your behalf or for your use; and
• resellers, travel agents, tour operators, and customer group organisers.

(c) Collection at facilities/services

We collect information regarding access to and use of our facilities and services. The information may be collected manually or using automated technologies (including monitoring and surveillance systems). Some of the information automatically collected by technological means at our facilities and services is non-personal information (because the information does not identify an individual), and we will handle that non-personal information as explained in section 13 of this Privacy Policy unless applicable law requires otherwise.

(d) Collection through website, emails, and advertisements

Our websites, email messages, and advertisements may use technologies (e.g.,cookies, web beacons, tokens, pixels or tags, and analytics engines) to automatically collect information about your access to and use of our websites and services and your actions regarding email messages and advertisements. Some of those technologies may be operated by independent organisations, such as Google and Meta.

Some of the information automatically collected by technological means is non-personal information (because the information does not identify an individual), and we will deal with that non-personal information as explained in section 13 of this Privacy Policy unless applicable law requires otherwise.

For more information about the technologies we use to collect information through our websites, email messages, and advertisements, and how you can manage your choices, see section 8 of this Privacy Policy.

(e) From independent or public sources

You agree that we may collect your personal information from independent sources, including:

• social media (e.g., Twitter, Facebook and LinkedIn) and review sites and services (e.g., Google, Trip Advisor, YonderHQ); and
• organisations that perform background checks on job applicants.

(f) Combining personal information

We may combine your personal information collected by us or on our behalf through the various sources described in this section 5.

(a) General business and legal compliance purposes

We may collect and use your personal information for our general business and legal compliance purposes relating to or arising from our relationship and dealings with you and to provide you with products and services, including:

• processing your transactions with us and providing our products and services to you;
• providing you with receipts, statements, and other documents and information regarding your purchase or use of our products and services and as otherwise required by contractual or legal obligations;
• monitoring the use of our facilities and services, maintaining the security of our facilities and services; and maintaining the safety of the public, our customers, and our employees;
• contacting and corresponding with you regarding your transactions and your use of our products and services and to provide you with customer care services;
• processing and responding to your enquiries, requests, and other communications (including to process your career application);
• providing you with information (including by email and other electronic messages) regarding our business, products and services and other products and services that might be of interest to you;
• complying with, and assessing compliance with, applicable laws, contractual and legal obligations, and our internal policies and procedures;
• preventing, detecting, and investigating fraudulent, harmful, unauthorised, unethical, or illegal activity, including cyberattacks and identity theft; and
• protecting and enforcing our rights, interests, and remedies (including the enforcement of releases and waivers) and the rights, interests, and remedies of our customers and other persons and organisations.

(b) Improving our business, products and services

We may collect and use your personal information to understand and analyse your use of our products and services with a view to improving our products and services and developing new products and services. If required by applicable law, we will use de-identified information for those purposes, so the information does not identify you directly.

Examples of our research and data analytics include:

• analysing customer demographics;
• analysing the use of our facilities and services and related equipment and technologies; and
• using web analytics services to analyse the use of our websites.

(c) Advertising and marketing purposes

We may collect and use your personal information to provide you with customised information, offers, and promotions regarding our products and services and other products and services that might be of interest to you, through our websites and other websites, social media, and online services.

We may engage third-party advertising and social media companies to display advertisements for our products and services on websites, social media, and other online services. Those companies may use cookies and similar technologies to collect information about you and your interaction over time on their websites and online services and other websites and online services, and use that information to display advertisements that might be of interest to you. We may also share information about our customers with those companies to facilitate interest-based advertising to our customers and similar users on other websites and online services. You can learn more about your choices for limiting interest-based advertising in section 8 of this Privacy Policy.

(d) Non-personal information

We may collect and use your personal information to create non-personal information (i.e.,information that does not identify you, directly or indirectly) in accordance with applicable laws, and we may then use, disclose and retain the non-personal information as explained in section 13 of this Privacy Policy.

(e) Service providers

We may transfer or disclose your personal information to our service providers (i.e.,organisations that provide services to us) to assist us to use your personal information as explained in this Privacy Policy and as otherwise permitted by applicable law, including to help us: (i) operate our business; (ii) provide our products and services to you; (iii) process and administer release of liability waivers; (iv) provide, operate and maintain our information technology systems and services; (v) operate our websites; (vi) process reservations; (vii) process payments and complete transactions; (viii) create, print and deliver emails and documents; (ix) detect and deter fraud; (x) provide customer care services; (xi) conduct promotions, sweepstakes, contests, surveys and other advertising and marketing activities and events; and (xii) collect and analyse data.

Our service providers may be located outside of New Zealand, as explained in section 9 of this Privacy Policy.

(a) General

We disclose your personal information for purposes relating to or arising from our relationship and dealings with you and to provide you with products and services (including transactions with you or on your behalf) and as otherwise explained in this Privacy Policy or permitted by applicable law. For example, we disclose your personal information to process your payments for our products and services.

(b) Additional consents

We may disclose your personal information in accordance with additional consents (express or implied) that you give during your interactions and transactions with us or other persons and organisations, including to process your payments for our products and services.

(c) Law enforcement/legal disclosures

We may disclose your personal information as required or authorised by applicable law, including to comply with a subpoena, warrant, or court or arbitral order or litigation disclosure obligation. We may also disclose your personal information to law enforcement agencies or other independent organisations if we reasonably believes the disclosure is necessary or appropriate in connection with national security, law enforcement, or other issues of public importance (including tax and regulatory compliance), or if we reasonably believe the disclosure is necessary or appropriate to protect and enforce our rights, interests, and remedies or to protect and enforce the rights, interests, and remedies of our customers or other persons and organisations, including to detect and prevent fraud and other illegal activities, to enforce any of the terms of use, terms of service, or other agreements that govern access to or use of any of our products or services.

(d) Business transactions

We may disclose your personal information in connection with a proposed or actual business transaction in which we are involved (e.g.,a corporate amalgamation, reorganisation, merger, or acquisition, or the sale or transfer of some or all of our business or assets). However, we will only disclose your personal information to the extent reasonably necessary for each transaction.

(e) Advertising and marketing

We may share personal information with third-party advertising and social media companies that we engage to display advertisements for our products and services on websites, social media, and other online services. Those companies may use cookies and similar technologies to collect information about you and your interaction over time on their websites and online services and other websites and online services, and use that information to display advertisements that might be of interest to you. We may also share information about our customers with those companies to facilitate interest-based advertising to our customers and similar users on other websites and online services. You can learn more about your choices for limiting interest-based advertising in section 8 of this Privacy Policy.

(a) Opt-out of marketing communications

You can choose not to receive our marketing or promotional messages by email or text message by clicking on “unsubscribe” in an email or text message you receive from us. It may take up to business days to register a change to your communication preferences.

Please note that even if you indicate your choice not to receive marketing or promotional messages from us, we may still communicate with you by email or text message regarding your use of our products and services (e.g.,to send you payment receipts and customer service messages) and as otherwise permitted by applicable law.

(b) Cookies and similar technologies

You can manage your preferences regarding cookies and similar technologies (including for cookies relating to advertising) by clicking on the “Manage Cookies” link in the footer of our website.

Most browsers let you remove or stop accepting cookies from the websites you visit. To do this, follow the instructions in your browser’s settings. Many browsers accept cookies by default until you change the settings. If you do not accept cookies, however, you may not be able to use all functionalities of our websites or our websites might not work properly. For more information about cookies, including how to see what cookies have been set on your browser and how to manage and delete them, visit www.allaboutcookies.org.

We use Google Analytics to help us understand the use of our websites. You can learn more about Google Analytics cookies at https://developers.google.com/analytics/resources/concepts/gaConceptsCookies and about how Google protects your data at http://www.google.com/analytics/learn/privacy.html. You can prevent the use of Google Analytics relating to your use of our Sites by downloading and installing a browser plugin available at https://tools.google.com/dlpage/gaoptout?hl=en.

We use Meta Pixel to help us understand the effectiveness of our advertising and the actions users take on our websites or when they see our advertisements on Facebook and Instagram.

Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” or similar signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.

(c) Advertising Choices

You can limit the use of your personal information for interest-based advertising by:

• Cookie Manager: using our cookie preference manager accessible through the Manage Cookies link in the footer of our website to opt out of advertising cookies.
• Browser settings: blocking third party cookies in your browser settings.
• Privacy browsers/plug-ins: using privacy browsers or ad-blocking browser plug-ins that block tracking technologies.
• Platform settings: using platform/service provider settings to opt-out of use of your information for interest-based advertising:
  • Google: https://adssettings.google.com/
  • Facebook: https://www.facebook.com/about/ads
  • Instagram: https://accountscenter.instragram.com/ad_preferences/
• Ad Industry Tools: opting out of interest-based advertisements from companies participating in the following industry opt-out programmes:
  • Network Advertising Initiative:  https://www.networkadvertising.org/managing/opt_out.asp
  • Digital Advertising Alliance: https://optout.aboutads.info.
  • AppChoices mobile app, available at https://www.youradchoices.com/appchoicesoptout.aboutads.info/.
• Mobile device settings: using your mobile device settings to limit use of the advertisingID associated with your mobile device for interest-based advertising purposes.

(d) Your mobile device settings

Your mobile device settings may allow you to choose the way that we collect and use some of your personal information (e.g., your location) or communicate with you. Please refer to your device settings or user manual to learn about those settings.

We and our service providers may use, process, and store your personal information at facilities in New Zealand, Canada, the United States of America, Ireland, Netherlands, Denmark, Finland, Belgium, Australia, the United Kingdom, Mauritius, Sweden, Singapore, Lithuania, Germany, and Malta. The personal information protection laws of those other countries might be different from the laws of the jurisdiction in which you reside, and such service providers may not be required to protect your personal information in a way that, overall, provides comparable safeguards to those in the Privacy Act 2020 (New Zealand).

By providing your personal information to us, you consent to the transfer and/or disclosure of your personal information to persons located in countries other than New Zealand and the use, processing, and storage of your personal information by such persons and in such countries and acknowledge that such persons may not be required to protect your personal information in a way that, overall, provides comparable safeguards to those in the Privacy Act 2020 (New Zealand).

Depending on the sensitivity and amount of personal information under our legal control, the purposes for which it is used, and the format in which it is stored, we use a combination of measures – including administrative, physical, and technical security and safeguarding measures – to help protect the security of the personal information, including:

• Governance practices for the protection of personal information through its lifecycle and defining the roles and responsibilities of our personnel regarding the handling of personal information.
• Technical safeguards, such as encryption, firewalls, passwords, and antivirus software, to protect personal information collected, used, or stored in electronic format.
• A designated Privacy Officer accountable for our compliance with applicable privacy laws.
• Procedures for receiving, investigating, and responding to complaints or enquiries regarding our information handling practices.
• Contractual provisions and other measures to require our service providers to whom we transfer personal information to maintain adequate privacy protections and standards.

You may reasonably request access to your personal information by submitting a written request to our Privacy Officer using the contact information in section 20 of this Privacy Policy. Subject to applicable exceptions and limitations prescribed by applicable law, you will be given reasonable access to your personal information and you will be entitled to verify the accuracy and completeness of your personal information and have the information corrected as appropriate. There is no charge for requesting access to your personal information but, subject to applicable law, we may require you to meet our reasonable costs in actually providing you with access to your personal information. Subject to applicable law, we may decline to process an access request that is unreasonably frivolous, vexatious or the information requested is trivial, or if the disclosure of the personal information would be likely to pose a serious threat to the life, health or safety of any individual or to public health or safety, or for other reasons permitted by applicable law.

We will respond to all requests for access and/or correction within a reasonable time and in accordance with our obligations under applicable law.

In order to protect your personal information, we may require identification from you before releasing the requested information to you.

Depending on the jurisdiction where you reside, you may also be entitled to request the rectification or deletion of your personal information under our legal control if our collection, disclosure or retention of the information is not authorised by law.

If non-personal information is combined with personal information, then we will treat the combined non-personal information as personal information for the purposes of this Privacy Policy for as long as the non-personal information is combined with the personal information.

Our products and services and our correspondence (including emails) may include advertisements for independent businesses and their products and services or links to their websites. We have no responsibility or liability for, or control over, those independent businesses, their websites, products or services, or their collection, use, disclosure, or retention of your personal information. This Privacy Policy does not apply to the collection, use, disclosure, and retention of your personal information by independent businesses or through independent websites or online services. If you have questions about how those independent businesses or their websites or online services collect, use, disclose, or retain personal information, please contact the owner or operator of the independent businesses, websites, and services.

If you use certain aspects of our websites or other services to post information to social media sites, the personal information that you post or share in connection with the social media sites is visible to other persons and can be read, collected, used, and disclosed by other persons. Any information provided to social media sites and other sites is governed by their own privacy policies. You are solely responsible for the personal information that you choose to post or share in those situations. We have no control over, or responsibility or liability for, the use, disclosure, and retention of the personal information that you disclose in those situations, and the use, disclosure, and retention of the disclosed information is not subject to this Privacy Policy.

If we learn that we have inadvertently collected or received personal information from a child without required parental or guardian consent, then we will delete the information unless the parent or guardian provides the required consent or we are required by law to retain the information. If you reasonably believe we might have any information from or about a child where parental or guardian consent was required, then please contact our Privacy Officer using the contact information in section 20 of this Privacy Policy.