Legal Disclosure

Privacy Policy

Last updated: 14 February 2025 • Governing Jurisdiction: New Zealand

1. Who We Are & Data Controller

Echoes of Aotearoa ("we", "us", "our") operates as an independent travel editorial and expedition advisory journal in New Zealand. We take our obligations seriously under the New Zealand Privacy Act 2020 and the Information Privacy Principles (IPPs).

Data Controller Point of Contact: [email protected]. In alignment with our strict digital-only business model, we do not operate a commercial call centre or physical walk-in desk.

2. Scope of this Policy

This privacy policy applies to all visitors, journal subscribers, and prospective travelers interacting with the website echoesofaotearoa.co.nz. It governs how we collect, store, safeguard, and disclose personal information gathered during your visit.

3. Categories of Data Collected

A. Information you provide directly: When submitting an advisory query or route question, you may submit your full name, email address, optional contact number, and expedition notes.

B. Automatically collected data: Technical network details including your IP address, browser type, device specifications, visiting timestamps, and referring URLs.

C. Analytics and consent signals: Your cookie preference settings, recorded locally on your device and transmitted via Google Consent Mode v2.

4. Purposes of Processing & Legal Basis

In accordance with Principle 1 of the NZ Privacy Act 2020, we collect personal information strictly for lawful purposes directly connected to our travel editorial functions:

Processing PurposeData CategoriesLawful Foundation
Responding to itinerary and route inquiriesName, email, phone, trip messageContractual request & explicit user consent
Website security and anti-abuse filteringIP address, timestamp, browser headersLegitimate operational safety interest
Aggregated audience readership analysisPseudonymous analytical telemetryOpt-in consent (Google Consent Mode v2)

5. Cookies, Analytics & Google Consent Mode v2

Our website operates Google Consent Mode v2 in an advanced state. Before you make an affirmative choice on our cookie banner, all non-essential analytics and marketing signals remain set to denied. Strictly necessary storage required for site security remains granted. You may alter or revoke your consent at any time via the "Cookie Preferences" trigger located in our website footer.

6. Sharing of Personal Data & Zero-Sale Guarantee

We do not sell, rent, lease, or trade personal information to data brokers or third-party marketing networks. We share information only with technical infrastructure processors (such as hosting nodes and encrypted mail handlers) solely to provide website services, or where compelled by New Zealand law enforcement.

7. Cross-Border Data Transfers

Because our server infrastructure may utilize global cloud providers, personal data may be stored outside New Zealand. In conformity with IPP 12 of the Privacy Act 2020, we ensure that offshore data storage providers maintain comparable privacy safeguards or execute standard contractual protection clauses.

8. Data Retention Periods

Consultation inquiries transmitted through our web form are retained for a maximum of 24 months to support itinerary continuity, after which they are securely expunged. Technical webserver logs are routinely rotated and purged after 90 days.

9. Your Legal Rights & Supervisory Authority

Under the New Zealand Privacy Act 2020, you possess the explicit right to request confirmation of whether we hold personal information about you, to inspect that data, and to request correction of inaccurate details.

To exercise your rights, email our privacy desk at [email protected]. If you believe your privacy request has not been satisfactorily addressed, you have the right to lodge a formal complaint with the Office of the Privacy Commissioner (OPC) New Zealand (privacy.org.nz).

10. Children's Privacy

Our journal is oriented toward independent adult explorers. In alignment with New Zealand standards, we do not knowingly solicit or collect personal information from individuals under 16 years of age without parental authorization.

11. Amendments & Policy Updates

We reserve the prerogative to modify this Privacy Policy to reflect evolving technical features or statutory revisions. Any adjustments will take effect upon being posted to this page with an updated revision date.