Waiheke Freedom Tours Privacy Policy
Introduction
Waiheke Freedom Tours Limited ("we", "us", "our") respects your privacy and is committed to protecting your personal information in line with the Privacy Act 2020 and its Information Privacy Principles.
This policy explains what information we collect when you visit our website or book a tour, why we collect it, how we use and protect it, who we share it with, and what rights you have over it. It applies to www.waihekefreedomtours.co.nz and to bookings made through our online booking platform.
By using our website or booking a tour with us, you agree to the collection and use of information as described in this policy .
Who We Are
Waiheke Freedom T ours Limited is a New Zealand Limited Company (NZBN 9429050581061, Company Number 8375198) operating guided tours on Waiheke Island and the website www.waihekefreedomtours.co.nz.
We are the controller of the personal information described in this policy — meaning we decide what information is collected and why. If you have any questions about this policy or how we handle your information, contact us at info@waihekefreedomtours.co.nz.
Information We Collect
We collect two broad types of information:
Personal information — information that identifies you, which we collect when you make
a booking, contact us, or subscribe to updates. This includes:
- Name, email address, and phone number
- Postal or accommodation address (where relevant to pickup/drop-off)
- Booking details — tour date, group size, special requests, dietary or accessibility needs you choose to share
- Payment information processed on our behalf by our payment provider (see "Who We Share Information With" below — we never see or store your full card details ourselves)
Non-personal information — information that doesn't identify you individually , collected automatically when you visit our website. This includes browser type, device type, operating system, approximate location (derived from IP address), pages visited, and how you arrived at our site. We collect personal information directly from you wherever possible — for example, the details you enter when booking a tour or sending us an enquiry .
How and Why We Use Your Information
We use your information only for the purposes we collected it for, or a directly related purpose. This includes:
- Managing your booking — confirming availability , processing payment, and sending you booking confirmations and reminders
- Communicating with you — responding to enquiries, and contacting you about changes to your tour (e.g. weather-related itinerary changes)
- Meeting special requests — arranging accessibility , dietary , or child seat needs you've told us about
- Improving our service — understanding how our website is used, and what tours and content guests find most useful
- Marketing — sending you offers or updates, but only if you've opted in; you can opt out at any time
- Meeting our legal obligations — including under the Health and Safety at Work Act 2015, tax law , and our Transport Service Licence conditions
We do not use your information for any purpose beyond these without asking you first.
Who We Share Information With
We don't sell your information. We share it only with the service providers who help us run our business, and only as much as each of them needs to do their job i.e.:
- Fareharbour — our online booking platform, which handles your booking details and communications about your tour
- Stripe — our payment processor . W e never see or store your full card details; Stripe handles payment processing under PCI DSS Level 1 certification with AES-256 encryption
- Duda — the platform our website is built and hosted on
- Google Analytics — for understanding website traffic and usage
We may also share information where required by law — for example, in response to a lawful request from a regulator or a court.
Overseas disclosure: Some of these providers store or process information on servers located outside New Zealand (including the United States). Where this happens, we take reasonable steps to ensure your information is protected to a standard comparable to the Privacy Act 2020, but privacy laws in other countries may differ from New Zealand's.
Cookies & Analytics
Our website uses cookies — small files stored on your device — to help it function properly and to understand how visitors use our site. We use:
- Session cookies, which are deleted when you close your browser
- Persistent cookies, which remain until they expire or you delete them
- Third-party cookies, such as those used by Google Analytics, to help us understand website traffic Analytics data is aggregated and does not identify you personally .
You can control or disable cookies through your browser settings, though some parts of our website may not
work as intended if you do.
Links to Other Sites
Our Service may contain links to other sites. If you click on a third-party link, you will be directed to that site. Note that these external sites are not operated by us. Therefore, we strongly advise you to review the Privacy Policy of these websites. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
How Long We Keep Your Information
We keep your personal information only as long as necessary for the purposes described in this policy , or as required by law — for example, financial records must be kept for at least seven years under NZ tax law. Once information is no longer needed, we securely delete or anonymise it.
How We Protect Your Information
We take reasonable steps to protect your personal information from loss, misuse, unauthorised access, or disclosure. This includes using reputable, secure third-party providers (Fareharbour , Stripe, Duda) that maintain their own industry-standard security measures, and limiting access to your information to what each purpose requires. No method of transmission over the internet is completely secure, so while we work hard to protect your information, we can't guarantee its absolute security . If we become aware of a privacy breach that's likely to cause serious harm, we'll notify you and the Office of the Privacy Commissioner as required under the Privacy Act 2020.
Children's Privacy
Our tours are family-friendly , and we do collect basic booking details (like a child's age, for pricing and car-seat arrangements) as part of a booking made by a parent or guardian. We don't knowingly collect personal information directly from children, and our website and marketing are not directed at children.
Your Rights
Under the Privacy Act 2020, you have the right to:
- Access the personal information we hold about you
- Correct it, if it's wrong or out of date
- Ask us to delete it, where we're not required to keep it for legal or business reasons
- Opt out of marketing communications at any time
To exercise any of these rights, contact us at info@waihekefreedomtours.co.nz. We'll respond within a reasonable time and, where required, within the timeframes set by the Privacy Act 2020.
If you're not satisfied with how we've handled your information, you have the right to complain to the Office of the Privacy Commissioner at privacy.org.nz.
Changes to This Privacy Policy
We may update this policy from time to time, for example if we change service providers or our legal obligations change. We'll post any updated version on this page with a new "last updated" date. We encourage you to review it occasionally .
Contact Us
If you have any questions about this policy , or want to exercise any of your privacy rights, contact us at:
Waiheke Freedom Tours Limited Email: info@waihekefreedomtours.co.nz
Website: www.waihekefreedomtours.co.nz
We value your trust in providing us with your Personal Information, thus we are striving to use commercially acceptable means of protecting it. But remember that no method of transmission over the internet, or method of electronic storage is 100% secure and reliable, and we cannot guarantee its absolute security.
Modified 7th Jan 2025
Last modified 20th Sep 2026
