PRIVACY POLICY

Te Haerenga o Ngāi Tai ki Tāmaki, trading as Tapuwae Tours (“Tapuwae Tours”, "we", "us", "our"), respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, store, disclose, and protect personal information when you use our website, book our services, or otherwise interact with us.

This policy applies to our website: www.tapuwaetours.nz

By accessing our website or using our tours, products, or services, you acknowledge the practices described in this Privacy Policy.

Information We Collect

We may collect personal information directly from you or, where permitted by law, from other sources. This may occur when you make a booking, complete forms, communicate with us, subscribe to marketing communications, or participate in our activities.

The information we may collect includes:

·       Full name
·       Email address
·       Mobile telephone number
·       City and country of residence
·       Billing and transaction details
·       Age and, where relevant, gender
·       Relevant health or medical information
·       Emergency contact information (where applicable)
·       Digital signature
·       Any other information you choose to provide

Where permitted by law, we may also collect personal information about you from third parties or publicly available sources. Where required, we will notify you of such collection in accordance with the Privacy Act 2020.

Online Bookings and Payments

We use third-party booking and payment providers to facilitate reservations and process payments securely. Payment card information is processed directly by the payment provider, and we do not store or have access to your full credit card details. Where refunds are required, secure transaction references may be used to identify bookings and process refunds without revealing your card information. We encourage you to review the Privacy Policy of our third-party booking and payment provider, Rezdy, when making a reservation through our website.

Cookies and Website Analytics

Our website uses cookies and analytics tools to help us understand how visitors use our site and to improve website performance. Through cookies and analytics services, we may collect information such as:

·       IP address
·       Browser type
·       Operating system
·       Pages visited
·       Date and time of visits
·       Referring websites
·       Website usage patterns

Most web browsers accept cookies automatically, but you can modify your browser settings to decline cookies or notify you when cookies are being used. Any website usage information used for analysis or reporting is generally aggregated and anonymised where practical.

Communications with Us

If you contact us via email, telephone, online forms, social media, or other communication channels, we may retain records of those interactions to respond to enquiries, provide customer support, and improve our services.

Surveys and Research

From time to time, we may invite customers to participate in surveys, interviews, questionnaires, polls, or similar activities. Participation is voluntary, and any information collected will be used to help improve our products, services, customer experience, and business operations.

Feedback and Submissions

We welcome comments, suggestions, testimonials, and feedback regarding our services. With your consent, identifiable feedback or testimonials may be used for promotional purposes. Otherwise, feedback may be used in an anonymised form to improve our services and operations.

Marketing Communications

Where permitted by law, we may use your contact details and booking history to send information about our services, experiences, promotions, special offers, and news that may be relevant to you. Marketing communications may be delivered through email or other approved channels. You can opt out of receiving marketing messages at any time by using the unsubscribe link included in our communications or by contacting us directly.

Automated Technology and AI Tools

We may use automated technologies, including artificial intelligence-assisted tools, to support customer service, communications, operational processes, and marketing activities. These systems may use limited personal information, such as:

·       Name
·       Email address
·       Booking details
·       Service preferences
·       Location information relevant to your booking

We do not use automated tools to make decisions that produce legal consequences or significant adverse effects for individuals. We remain responsible for ensuring personal information is handled appropriately and in accordance with applicable privacy laws.

How We Use Personal Information

We may use your personal information for purposes including:

·       Providing and managing bookings, products, and services
·       Communicating with you regarding enquiries, reservations, and customer support
·       Processing payments and refunds
·       Improving customer experiences and personalising services
·       Conducting research, reporting, and business analysis
·       Maintaining and improving our website and systems
·       Developing new products, services, and experiences
·       Managing competitions, promotions, surveys, and events
·       Meeting legal and regulatory obligations
·       Protecting our rights, property, customers, and business interests
·       Preventing fraud and enhancing security
·       Sending relevant promotions, offers, and updates
·       Any other purpose authorised by you or permitted by law

Your Choices and Consent

You may choose not to provide certain personal information; however, this may limit our ability to provide some services or complete bookings. If we wish to use your information for a purpose that is materially different from the reason it was originally collected, we will seek your consent where required by law. You may withdraw consent to receive marketing communications at any time. Opting out of marketing messages will not affect important booking confirmations, service notifications, safety updates, or other transactional communications.

Sharing Personal Information

We do not sell, rent, or trade personal information to third parties. However, we may share personal information with trusted service providers who assist us in operating our business, including:

·       Booking and reservation platforms
·       Payment processors
·       Customer communication providers
·       Marketing service providers
·       IT and website support providers
·       Professional advisers and auditors

 These providers are required to handle personal information securely and only for authorised purposes.

 We may also disclose personal information where required or permitted by law, including:

·       To comply with legal obligations
·       To respond to lawful requests from authorities
·       To protect our rights, customers, employees, or business
·       In connection with legal proceedings or dispute resolution

We may share aggregated or anonymised information that does not identify individuals.

Third-Party Websites

Our website may contain links to external websites or services. We are not responsible for the privacy practices, content, or security of third-party websites, and we recommend reviewing their privacy policies separately.

Overseas Storage and Processing

Some of our service providers may store or process personal information outside New Zealand. Where personal information is disclosed overseas, we will comply with the requirements of the Privacy Act 2020 and take reasonable steps to ensure it is appropriately protected.

Security of Personal Information

We take reasonable technical, administrative, and physical measures to safeguard personal information against loss, misuse, unauthorised access, alteration, disclosure, or destruction.

Security measures may include:

·       Secure website encryption (SSL/TLS)
·       Access controls and authentication systems
·       Staff confidentiality obligations
·       Secure storage systems
·       Regular security monitoring and reviews

Access to personal information is restricted to authorised personnel and approved service providers who require access to perform their duties. Although we take reasonable precautions, no method of electronic transmission or storage can be guaranteed to be completely secure. We encourage users to maintain strong passwords, protect their devices, and use current security software where applicable.

Data Quality and Retention

We take reasonable steps to ensure the personal information we hold is accurate, relevant, complete, and up to date. We retain personal information only for as long as necessary to:

·       Provide services
·       Meet legal and regulatory requirements
·       Resolve disputes
·       Enforce agreements
·       Support legitimate business operations

Marketing and communication records may be retained where reasonably necessary to manage customer relationships, honour communication preferences, and comply with legal obligations.

Accessing and Correcting Your Information

You may request access to the personal information we hold about you and ask us to correct inaccurate, incomplete, or out-of-date information. Requests may be declined in limited circumstances where permitted by applicable privacy laws. Before processing a request, we may require reasonable proof of identity to protect your privacy and security. To request access to, correction of, or deletion of your personal information, please contact us: kiaora@tapuwaetours.nz

Complaints and Contact Information

We regularly review our privacy practices to ensure ongoing compliance with applicable privacy legislation. If you have questions, concerns, or complaints regarding this Privacy Policy or the way your personal information is handled, please contact us: kiaora@tapuwaetours.nz

We will investigate concerns and work to resolve complaints as promptly as reasonably possible.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, legal obligations, or technology. Any updated version will be published on our website and will take effect from the date shown on the revised policy. Where required, we will notify users of significant changes through appropriate channels.

Last Updated: 20 August 2026

For any questions regarding this Privacy Policy, please contact us: kiaora@tapuwaetours.nz