1. Agency and Contact Details
Powersrboostel (the agency) is responsible for the personal information collected through the website powersrboostel.world. Our physical address is 5 Bannister Street, Masterton 5810, New Zealand. You may contact us at online@powersrboostel.world or by phone at +64 6 370 0037. Enquiries about privacy may be directed to the same contact details.
2. Scope and Purpose of Collection
We collect and use personal information to operate our informational website about group cycling experiences in the Wairarapa region, respond to enquiries submitted through our contact form, maintain website security, analyse site usage where you have consented, and comply with legal obligations under New Zealand law. We do not sell personal information to third parties.
3. Types of Information Collected
We may collect the following categories of personal information:
- Identity and contact details: name and email address provided via the contact form
- Communication content: the substance of messages you send us
- Technical information: IP address, browser type, device information, referring pages, and timestamps
- Cookie and consent data: choices recorded through our cookie consent mechanism
- Usage data: pages visited and interaction patterns where analytics cookies are accepted
4. How We Collect Information
We collect personal information directly from you when you submit the contact form, communicate with us by email or phone, or interact with our cookie banner. Technical information is collected automatically when you visit the website. We take reasonable steps to ensure you are aware that information is being collected and the purpose for which it is collected, in accordance with Information Privacy Principle (IPP) 3 of the Privacy Act 2020.
5. Purposes of Use
Personal information is used only for purposes connected with the reason it was collected, or for a directly related purpose you would reasonably expect, including:
- Responding to your enquiries about group cycling events and routes
- Operating, securing, and improving the website
- Measuring website performance where you have provided consent for analytics or marketing cookies
- Meeting record-keeping and legal compliance requirements
We will not use your personal information for a new purpose without taking reasonable steps to inform you, unless an exception under the Privacy Act 2020 applies.
6. Legal Basis for Processing
New Zealand: We handle personal information in accordance with the Privacy Act 2020 and its Information Privacy Principles. Collection is authorised by your consent, by the purpose of providing our services, or where required or permitted by law.
European Economic Area visitors: Where the General Data Protection Regulation (GDPR) applies, we process data on the basis of consent (contact form, non-essential cookies), legitimate interests (website security and basic functionality), or legal obligation.
7. Disclosure of Information
We may disclose personal information to:
- Website hosting and infrastructure providers located in New Zealand or overseas
- Email and communication service providers
- Analytics and advertising partners, only where you have consented to the relevant cookies
- Professional advisers or regulators where required by law
We take reasonable steps to ensure overseas recipients protect information to a standard comparable to the Privacy Act 2020, in line with IPP 12. Where GDPR applies, we use appropriate safeguards such as Standard Contractual Clauses for transfers outside the EEA.
8. Data Retention
Contact form submissions are retained for up to 24 months unless a longer period is required for legal, dispute-resolution, or record-keeping purposes. Server log data is retained for up to 12 months. Cookie consent records are stored in your browser until cleared. When information is no longer needed, we take reasonable steps to destroy or de-identify it in accordance with IPP 9.
9. Your Rights Under the Privacy Act 2020
Under New Zealand privacy law, you have the right to:
- Request access to personal information we hold about you (IPP 6)
- Request correction of inaccurate, incomplete, or misleading information (IPP 7)
- Be informed about certain uses and disclosures of your information
- Withdraw consent for optional processing where consent is the basis for collection
We will respond to access and correction requests within 20 working days where practicable, or inform you of any extension permitted under the Privacy Act 2020. We may require proof of identity before releasing information.
10. Rights for EEA Visitors (GDPR)
Where GDPR applies, you may also request restriction of processing, data portability, or erasure of data processed on the basis of consent, and lodge a complaint with your local data protection authority.
11. Direct Marketing and Electronic Messages
We do not send commercial electronic messages without your express consent, in compliance with the Unsolicited Electronic Messages Act 2007. If you subscribe to updates from us, each message will include a functional unsubscribe facility. You may opt out at any time by contacting us or using the unsubscribe link provided.
12. Notifiable Privacy Breaches
If a privacy breach has caused or is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and affected individuals as soon as practicable, in accordance with the Privacy Act 2020 notifiable breach scheme.
13. Data Security
We implement reasonable safeguards to protect personal information against loss, unauthorised access, use, or disclosure, in line with IPP 5. Measures include HTTPS encryption, access controls, secure hosting environments, and periodic review of our data handling practices.
14. Children's Privacy
Our website is directed at adults interested in group cycling activities. We do not knowingly collect personal information from individuals under 16 years of age without parental or guardian consent. If you believe we have collected information from a child, please contact us and we will take steps to delete it.
15. Complaints
If you have a concern about how we handle your personal information, contact us first at online@powersrboostel.world. If you are not satisfied with our response, you may lodge a complaint with the Office of the Privacy Commissioner (New Zealand) at www.privacy.org.nz.
16. Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top of this page shows when it was last revised. Material changes will be posted on this page. Continued use of the website after an update constitutes acknowledgement of the revised policy.