Privacy Policy

Effective Date: 1 January 2025 | Last Updated: 1 March 2025

1. Who We Are & Data Controller

Hazeltaste operates as an independent travel editorial and expedition planning service based in New Zealand, accessible via the domain hazeltaste.shop. In respect of personal information collected through this website, Hazeltaste acts as the data controller and is committed to upholding the information privacy principles established under the Privacy Act 2020 (New Zealand).

For any privacy inquiries or to exercise your rights, please reach us directly via email at [email protected] or by phone at +64 27 877 1569.

2. Scope of this Policy

This Privacy Policy outlines how Hazeltaste collects, uses, protects, discloses, and retains personal data gathered when you explore our digital dispatches, request route planning services, interact with forms, or accept functional cookies.

3. Personal Information We Collect

We may collect information directly from you, automatically through your interaction with the platform, and via third-party analytics instrumentation:

  • Direct Form Submissions: Your full name, email address, optional contact telephone number, geographic area of interest, and textual expedition requirements submitted via our inquiry forms.
  • Automatically Collected Data: Internet Protocol (IP) address, approximate geographic area, web browser type and version, device hardware specifications, pages viewed, time spent on individual dispatches, referral URLs, and cookie session identifiers.
  • Analytical & Marketing Signals: Aggregated measurement signals provided via Google Analytics following explicit opt-in consent.

4. Purposes and Legal Bases for Processing

Processing PurposeCategories of DataLegal Basis (NZ Privacy Act 2020 & GDPR alignment)
Responding to route planning queries and consulting requestsName, email, phone, inquiry messagePerformance of contract / Steps prior to contract (Principle 1 & 3)
Platform performance, security, and spam preventionIP address, browser data, server logsLegitimate interests in operational safety
Audience analytics and expedition content optimisationAnonymised identifiers, page view telemetryConsent (freely given via Cookie Consent Banner)
Compliance with statutory reporting and legal claimsTransaction and interaction logsCompliance with New Zealand statutory obligations

5. Cookies, Analytics and Google Consent Mode v2

Our website utilizes a dynamic consent infrastructure compatible with Google Consent Mode v2. When you first enter hazeltaste.shop, default tracking parameters for advertising and analytics are set to denied. Strictly functional cookies necessary for site rendering and security operate automatically. Non-essential analytical and targeting scripts only execute once you click "Accept All" or opt in via our customization modal. You may alter or withdraw consent at any moment via the persistent "Cookie Settings" link located in our website footer.

6. Third-Party Disclosures & Non-Sale of Data

Hazeltaste explicitly does not sell, trade, or rent personal information to brokers or commercial advertisers. We share collected data strictly with trusted service providers who assist us in operating our web infrastructure, processing form deliveries, or maintaining security audits, provided these parties adhere to confidentiality covenants. Disclosures may also occur if mandated by New Zealand law enforcement or statutory subpoena.

7. Cross-Border Data Transfers

Where personal data is hosted or transmitted across overseas cloud infrastructure (such as distributed content delivery networks or email service gateways), Hazeltaste ensures that comparable privacy safeguards are maintained in line with Information Privacy Principle 12 of the New Zealand Privacy Act 2020 and standard international contractual clauses.

8. Data Retention Schedule

We preserve personal data only as long as necessary to satisfy the purpose for which it was gathered. General inquiry forms are retained for up to 24 months after final correspondence, while analytical data is retained in aggregated, pseudonymous format for 14 months before automated deletion.

9. Your Privacy Rights

Under the Privacy Act 2020, you hold distinct rights concerning your personal information, including:

  • Access: The right to request confirmation of whether we hold personal information regarding you and obtain a copy.
  • Correction: The right to request correction of inaccurate, out-of-date, or incomplete data.
  • Objection & Withdrawal: The right to withdraw consent for non-essential processing at any time without penalty.

To exercise these rights, email us at [email protected]. If you consider that your privacy rights have been infringed and we have failed to resolve your concern satisfactorily, you are entitled to lodge a complaint with the Office of the Privacy Commissioner (New Zealand) at privacy.org.nz.

10. Security Safeguards

We enforce industry-standard security protocols, including TLS 1.3 encryption in transit, strict administrative access limitations, periodic dependency reviews, and firewalled hosting architecture to prevent unauthorised access, modification, or exposure of your data.

11. Children's Privacy

Our website is targeted at adult independent travellers and does not knowingly collect personal information from individuals under 16 years of age. If we ascertain that an underage individual has submitted personal data without verified parental oversight, we will delete such records expeditiously.

12. External Web Links

Our journals may contain hyperlinks to departmental sites (such as doc.govt.nz) or external weather services. Hazeltaste assumes no liability for the content, privacy standards, or cookie practices of external web operators.

13. Amendments to this Policy

Hazeltaste reserves the prerogative to revise this policy periodically to align with evolving regulatory frameworks or service expansions. Revisions become effective immediately upon publication on this page.