CHILLI TOURS PRIVACY POLICY
(Last Updated: September 2025)
This Privacy Policy outlines how Chilli Tours (referred to as "we," "us," or "our") complies with the New Zealand Privacy Act 2020 and manages the personal information of our customers and website users ("you").
1. Information We Collect
We collect personal information necessary to fulfil your booking, operate your tour, and communicate with you.
Data Sources: This data is collected directly from you via our website booking form, email, or telephone, or from a third-party booking agent acting on your behalf, to process and confirm your tour arrangements.
Contact and Booking Data: We collect your Full Name, Residential Address, Phone Number, and Email Address to confirm your booking, process payments, and send essential tour documentation.
Safety and Emergency Data (Sensitive): We require Next-of-Kin Contact Details (Name and Phone Number), as well as information regarding specific Allergies, Dietary Requirements, and relevant Medical Conditions. This information is essential for your safety, to allow our guides to prepare suitable meals, and to ensure appropriate response in case of an emergency. This sensitive data is handled with a high degree of care.
Financial Data: Payment details are collected only to process the tour deposit and balance payments. We use our third-party provider, Stripe, for payment processing and do not store full payment card details on our systems.
Marketing Data: We collect your Email Address and Postcode/Region only where you have given us explicit consent to send you promotional material.
2. Storage and Security of Information
We are committed to implementing reasonable security safeguards to protect your personal information from loss, misuse, or unauthorised access, in compliance with Information Privacy Principle (IPP) 5 of the Privacy Act 2020.
System Protection: Your booking data is stored on secure systems, including our website's integrated booking system on Hostinger and our business email platform on Google Workspace. We commit to implementing and maintaining strong, unique passwords and Two-Factor Authentication (2FA) on all such systems.
Data Retention: We will not keep your personal information for longer than necessary. Sensitive safety data (medical and dietary information) will be regularly deleted from our primary records once your tour is completed.
3. Sharing Your Information
We only share your personal information when it is absolutely necessary to deliver the services you have booked.
Tour Suppliers: We share necessary details (such as Name and Dietary Needs) with third-party accommodation providers, catering services, and activity operators. We only share the minimum information required for the service; we do not share your full contact details (Email Address or Phone Number) with these operational partners.
Safety Personnel: Your full name, next-of-kin contact, and medical information will be provided to the certified Chilli Tours Guide for on-tour safety and emergency management.
Legal Compliance: We will disclose information if legally required by law enforcement or regulatory authorities.
4. Website and Digital Tracking
We use standard web technologies to understand how users interact with our website, enabling us to improve our services and tailor advertising.
Use of Cookies: Our website uses cookies to track activity, remember user preferences, and support functionality. By continuing to browse our site, you consent to the placement of cookies on your device, which may be used for statistical analysis and marketing purposes (such as remarketing).
Analytics and Remarketing: We utilise Google Analytics to collect data on user demographics and interests, and to support our targeted advertising campaigns (known as 'Remarketing'). This data allows us to present you with relevant advertising through platforms like Google Ads and Meta (Facebook/Instagram).
Opt-Out Rights: You have the right to manage your tracking preferences:
You can disable or manage cookies via your browser settings.
To prevent Google Analytics from collecting your data, you can install the Google Analytics Opt-out Browser Add-on.
To opt out of targeted advertising campaigns via Google Ads or Meta, please email us at hello@chillitoursnz.com with a request, providing your current IP address if possible.
5. Your Rights and External Links
Marketing Consent and Unsubscribing: We only send you promotional communications if you have explicitly opted in. All marketing emails will contain a clear unsubscribe link, allowing you to easily withdraw your consent at any time, in compliance with the Unsolicited Electronic Messages Act 2007.
Access to and Correction of Information: In accordance with the NZ Privacy Act 2020, you have the right to request access to, and correction of, the personal information we hold about you. To make a formal request for access or correction, please email our Privacy Officer at [Insert Specific Chilli Tours Email for Privacy/Marketing Enquiries].
Links to Other Sites: Our website may contain links to external sites we believe may be useful. However, we are not responsible for the content, security, or information collection policies of these third-party websites. Please review the privacy policies of any external sites before providing them with your personal information.
Further Questions or Inquiries: For any further questions regarding the privacy of your personal information, please email hello@chillitoursnz.com.
