Draft for review. These terms are a working draft pending review by a New Zealand lawyer. Highlighted text is still to be confirmed.
Privacy policy
This policy explains how Driving Creek Retreat Limited handles personal information under the Privacy Act 2020.
What we collect. From you: name, email, phone, number of guests, arrival time, booking and payment records, messages you send us, and anything you choose to tell us (such as accessibility needs). From your device: basic website usage data (pages viewed, browser type) through cookie-free analytics. We do not collect or store card numbers.
Information about other people. If you give us details of other guests (for example, names for the guest list), please let them know and point them to this policy. Where we receive information about you from someone else — another guest, or a booking platform if you first booked with us there — we use it only for that booking and will tell you we have it unless an exception under the Privacy Act applies.
Why we collect it. To manage your booking, take payment, send arrival details, keep the property and guests safe, handle problems or claims, meet tax and legal record-keeping, and (only if you opt in) send occasional news and offers.
Who sees it. Only the owner, and Coromandel Properties, who look after the cottage (limited to names and arrival dates). Our service providers store and process it for us: Cloudflare (website, booking database and photos), Resend (emails) and Stripe (card payments — Stripe stores your card, we never see the full number). Some of these providers are overseas; they handle the data only on our behalf. We don't sell or rent your information. We share it with police or authorities only where the law requires or allows.
How long we keep it. Booking and payment records: 7 years, because tax law requires it. Messages and other details: 2 years after your stay, then deleted. Marketing list: until you unsubscribe.
Security. Data is encrypted in transit; admin access needs a password; access is limited by role.
Your rights. You can ask to see or correct the information we hold about you by sending us a message through this website. We'll respond within 20 working days. If you're not happy with how we handle it, you can complain to the Office of the Privacy Commissioner.
If something goes wrong. If a privacy breach is likely to cause serious harm, we will notify the Privacy Commissioner and the people affected as the law requires.
Privacy contact. Driving Creek Retreat Limited — send us a message through this website.
Website terms, cookies and emails
Using this website. The content, photos and design belong to Driving Creek Retreat Limited or are used with permission. Please don't copy them without asking. We keep availability and prices up to date, but the price and dates in your confirmation email are what count.
Reviews. Reviews on this site come from real guests who stayed. We show all reviews, positive and negative, and never write or pay for them.
Cookies. We only use cookies needed to make the site work (such as keeping the owner signed in) and cookie-free visitor statistics. No advertising or tracking cookies. If that changes, we'll ask first.
Marketing emails. We'll only send news and offers if you tick the box to say yes. Every email has a one-click unsubscribe, and we stop within 5 working days. Booking emails (confirmations, arrival details) are part of your booking and aren't marketing.
Accessibility. We aim to make this site usable for everyone. Our property page describes access honestly. The cottage isn't suitable for wheelchairs. Ask us anything before booking by sending a message.