Privacy Policy

Last Updated: February 2025 • Governing Jurisdiction: Aotearoa New Zealand

1. Who We Are & Data Controller

TerraAotearoa ("we," "us," or "our") is an independent New Zealand travel journalism and digital expedition publication. We operate under the registered enterprise entity TerraAotearoa Media with operations headquartered in New Zealand. For any data protection inquiries, privacy questions, or rights requests under the New Zealand Privacy Act 2020, our appointed Privacy Officer can be contacted exclusively via email at [email protected].

2. Scope of This Policy

This Privacy Policy explains how we collect, store, handle, and protect personal information obtained through our website (accessible at terraaotearoa.co.nz), route inquiry web forms, newsletter communications, and analytical instrumentation. We are committed to upholding the 13 Information Privacy Principles (IPPs) outlined in the New Zealand Privacy Act 2020.

3. Categories of Data Collected

We restrict data collection strictly to what is necessary for our editorial and route consulting operations:

  • Directly Provided Information: Full name, email address, optional contact telephone number, and qualitative travel details provided voluntarily through our route consultation forms.
  • Automatically Collected Telemetry: Obfuscated IP addresses, browser agent specifications, device type, referral sources, interaction timestamps, and page latency metrics collected via privacy-preserving telemetry.
  • Cookie Identifiers: Anonymous identifiers assigned solely when non-essential analytical cookies have been consented to through our Google Consent Mode v2 interface.

4. Purpose of Processing & Legal Basis

Processing PurposeData Types InvolvedNZ Legal Ground (Privacy Act 2020)
Responding to bespoke itinerary and route consultation requestsName, email, phone, travel messageIPP 1–4: Direct voluntary consent for primary intended communication
Platform stability, spam mitigation, and infrastructure defenseTechnical headers, redacted IP addressesLegitimate operational interest in secure digital delivery
Aggregated audience measurement and article popularity analyticsConsented pseudo-anonymous telemetryExpress consent via Google Consent Mode v2 banner

5. Google Consent Mode v2 & Analytical Framework

Our website implements Google Consent Mode v2 (advanced protocol). Before you interact with our consent dialog, non-essential cookies relating to advertising storage, advertising user data, advertising personalization, and analytical storage default strictly to a state of 'denied'. Only strictly necessary functional and security parameters remain active. When you select "Accept All," consent signals update dynamically via gtag('consent', 'update'). You retain the absolute right to re-open our preferences panel and revoke or modify this choice at any moment via the "Cookie Settings" trigger located in our website footer.

6. Third-Party Disclosures & Non-Sale Commitment

We explicitly do not sell, rent, lease, or monetize your personal information to data brokers or third-party marketing companies under any circumstances. Data may be transmitted only to trusted service infrastructure contractors (cloud web servers, SSL certificate networks, email routing platforms) bound by rigorous confidentiality agreements, or where mandatory disclosure is compelled under formal New Zealand court orders.

7. Cross-Border Data Transfers

Where digital transmission occurs across international hosting servers (such as global content distribution networks), we verify that recipients adhere to equivalent data protection standards consistent with Principle 12 of the New Zealand Privacy Act 2020.

8. Data Retention Periods

Routine consultation inquiries submitted through our forms are retained for a maximum of twenty-four (24) months to facilitate ongoing dialogue, after which correspondence records are permanently purged. Aggregate analytical logs are scrubbed according to standard retention windows not exceeding fourteen (14) months.

9. Your Legal Rights & Supervisory Authority

Under the New Zealand Privacy Act 2020, you possess concrete statutory entitlements:

  • Access: The right to obtain formal confirmation and an electronic copy of all personal records we maintain concerning your identity.
  • Correction: The right to demand rectification of outdated or inaccurate personal details.
  • Erasure: The right to request expedited deletion of submitted communications.
  • Complaint to Supervisory Body: If you believe our information practices violate the Privacy Act 2020, you have the right to lodge a formal complaint with the Office of the Privacy Commissioner (OPC) New Zealand via their portal at privacy.org.nz.

10. Child Privacy Protection

Our travel journalism is structured for adult independent travelers and outdoor enthusiasts. We do not intentionally solicit or process the data of individuals under sixteen (16) years of age without explicit guardian verification. Any unintentional child records discovered are immediately eliminated.

11. Updates to This Document

We may amend this Privacy Policy to reflect statutory updates from the Office of the Privacy Commissioner or upgrades to our web technology. Revisions take immediate effect upon publishing with an updated revision date.

12. Contact the Privacy Desk

For any privacy-specific requests, please write to our Privacy Officer at [email protected]. TerraAotearoa Media, New Zealand.