top of page

PRIVACY POLICY – ONETAI ESTATE
 

Effective Date: 1 June 2026

Property Jurisdiction: New Zealand

 

This Privacy Policy explains how Onetai Estate (“we”, “us”, “our”) collects, uses, stores, and protects personal information when you visit our website, make a booking, communicate with us, or enter the Property.

By using our website or services, you consent to the collection and use of your personal information in accordance with this Privacy Policy.

 

⸻

 

1. INFORMATION WE COLLECT

We collect personal information that is reasonably necessary to provide accommodation, event, and estate services, including:

 

1.1 Information you provide directly:

  • Full name

  • Email address

  • Phone number

  • Billing address

  • Payment and credit card details (processed securely by third-party payment providers; we do not store full card details on our systems unless required for tokenised processing)

  • Government-issued identification details (where required for booking verification or check-in)

  • Booking details (dates, guest numbers, preferences, special requests)

  • Communication records (emails, messages, enquiries)

 

1.2 Information collected automatically:

  • IP address

  • Device type and browser information

  • Website usage data (pages visited, time spent, interactions)

  • Cookies and similar tracking technologies

  • Referral source (how you arrived at our website)

 

1.3 Information from third parties:

We may receive personal information from:

 

  • Online Travel Agencies (e.g. Booking.com, Airbnb, Expedia)

  • Payment processors and banking providers

  • Booking management systems and property management software

  • Marketing or advertising platforms

 

⸻

 

2. HOW WE USE YOUR INFORMATION

We use your personal information to:

 

  • Process and manage bookings and payments

  • Verify identity where required for booking and check-in

  • Provide accommodation, event, and estate services

  • Communicate booking confirmations, updates, and support

  • Manage security, safety, and property access

  • Enforce House Rules and contractual obligations

  • Prevent fraud, chargebacks, or misuse

  • Improve website performance and guest experience

  • Send marketing communications where permitted under New Zealand law

  • Comply with legal obligations under New Zealand law

 

⸻

 

3. LEGAL BASIS FOR COLLECTION (NEW ZEALAND PRIVACY ACT 2020)

We collect and use personal information in accordance with the Privacy Act 2020 (NZ), including where it is necessary to:

 

  • Provide services you have requested

  • Meet contractual obligations

  • Ensure safety and security of guests and property

  • Comply with legal obligations

  • Support legitimate business operations

 

We may also use or disclose information where otherwise permitted or required under the Privacy Act 2020.

 

⸻

 

4. DISCLOSURE OF INFORMATION

We may share your personal information with:

 

  • Staff, contractors, and management of Onetai Estate

  • Payment processors, banking providers, and fraud prevention services

  • Online booking platforms and OTAs

  • IT systems, website hosting providers, cloud storage providers, and email service providers (which may store data outside New Zealand or Australia depending on provider infrastructure)

  • Marketing and analytics platforms

  • Legal, compliance, or security advisors where required

  • Government authorities where legally required

 

We do not sell personal information to third parties.

 

⸻

 

5. DATA STORAGE AND SECURITY

 

We take reasonable steps to protect personal information from:

 

  • Loss

  • Misuse

  • Unauthorised access

  • Modification

  • Disclosure

 

Security measures may include:

 

  • Password-protected systems

  • Restricted staff access controls

  • Use of reputable third-party service providers with security safeguards

 

While we take reasonable steps to protect information, no system connected to the internet is completely secure, and transmission of information is at your own risk.

 

⸻

 

6. COOKIES AND TRACKING TECHNOLOGIES

Our website uses cookies and similar technologies to:

 

  • Enable website functionality

  • Analyse traffic and usage patterns

  • Improve user experience

  • Support marketing and advertising performance

 

You may disable cookies in your browser settings, but some features may not function correctly.

 

⸻

 

7. DATA RETENTION

We retain personal information only for as long as reasonably necessary for the purposes it was collected, including:

 

  • Booking and transaction records: retained for up to 7 years where required for tax, accounting, and legal compliance

  • Communication records: retained for customer service, dispute resolution, and operational reference

  • Website analytics: retained for performance and improvement purposes

  • Payment records: retained in accordance with financial, audit, and fraud prevention obligations imposed by law or providers

 

After this period, data is securely deleted or anonymised where reasonably practicable.

 

⸻

 

8. YOUR RIGHTS

Under the Privacy Act 2020 (NZ), you have the right to:

 

  • Request access to your personal information

  • Request correction of inaccurate information

  • Request explanation of how your information has been used or disclosed

 

We may refuse access or correction requests where permitted under the Privacy Act 2020, including where disclosure would:

 

  • Endanger safety

  • Breach legal privilege

  • Compromise legal proceedings

  • Unreasonably impact the privacy of other individuals

 

⸻

 

9. COMPLAINTS AND ESCALATION PROCESS

If you have concerns about how your personal information has been handled:

 

  1. Contact us directly using the details below

  2. We will respond within a reasonable timeframe under the Privacy Act 2020

  3. If unresolved, you may contact the Office of the Privacy Commissioner (New Zealand)

 

⸻

 

10. THIRD-PARTY LINKS

Our website may contain links to third-party websites (including booking platforms). We are not responsible for the privacy practices of those external websites.

 

⸻

 

11. INTERNATIONAL USERS

If you access our services from outside New Zealand, you acknowledge that your information may be processed and stored in New Zealand or in other countries where our service providers operate.

 

Where data is transferred offshore, we take reasonable steps to ensure providers have comparable privacy safeguards.

 

⸻

 

12. DATA BREACH NOTIFICATION

In the event of a privacy breach that is reasonably likely to cause serious harm, we will:

 

  • Take immediate steps to contain the breach

  • Assess the risk of harm

  • Notify affected individuals where required under the Privacy Act 2020

  • Notify the Office of the Privacy Commissioner where required

  • Take reasonable steps to prevent future occurrences

 

⸻

 

13. MARKETING COMMUNICATIONS

We may send marketing communications where permitted under New Zealand law, including where:

 

  • You have opted in, or

  • There is an existing business relationship and you have not opted out

 

You may opt out at any time by:

 

  • Clicking unsubscribe in emails

  • Contacting us directly

 

⸻

 

14. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. Updates will take effect when published on our website. Continued use of our services constitutes acceptance of the updated policy.

 

⸻

 

15. CONTACT INFORMATION

Onetai Estate

Email: Bookings@OnetaiEstate.com

Address: 209 Onetai Road, Hikutaia, New Zealand, 3674

Attention: Privacy Officer

bottom of page