1. Introduction & Statutory Scope
Curious Crew Zayppy Adventures Ltd. ("we", "our", or "us", Company No. NZBN 9429051834921) operates the digital resource located at curiouscrewzayppy.homes. This comprehensive Privacy Policy governs the collection, processing, storage, and cross-border transfer of personal information in strict accordance with the New Zealand Privacy Act 2020 (including its 13 Information Privacy Principles / IPPs) and international data governance frameworks.
2. Categories of Information We Collect
We only collect personal information necessary for the lawful execution of our expedition advisory operations. These categories include:
- Voluntarily Disclosed Data: Your full name, email address, telephone contact, and trail inquiries submitted via our contact forms.
- Technical & Telemetry Data: IP address, browser user-agent strings, referring URLs, device identifiers, and pages visited.
- Preference & Consent States: Locally stored flags recording your cookie and analytical consent choices.
3. Lawful Grounds & Purpose of Data Processing
We process personal data solely for explicit and legitimate operational purposes:
- To respond to expedition and track advisory inquiries submitted through our portal.
- To monitor server integrity, mitigate cybersecurity threats, and prevent fraudulent abuse.
- To analyze aggregated, non-identifying traffic patterns to enhance our trail and field publications.
4. Disclosure & Cross-Border Information Principles
We do not sell, rent, monetize, or commercialize your personal information to third-party data brokers. Under Principle 12 of the Privacy Act 2020, cross-border disclosure of personal information is only permitted to cloud infrastructure providers (such as hosting and encrypted email relays) that maintain comparable data safeguards to New Zealand privacy law.
5. Retention Schedules & Security Architecture
We retain personal data only for the duration necessary to satisfy the purpose for which it was originally collected, or to fulfill statutory accounting and legal retention mandates. All digital transmissions are secured via TLS 1.3 cryptographic protocols, and stored records reside in access-restricted, firewalled cloud clusters.
6. Individual Rights (Access, Correction & Erasure)
Under the Privacy Act 2020, you possess the absolute right to:
- Request formal confirmation of whether we hold personal information relating to you.
- Access a complete copy of all stored personal records.
- Request the correction or deletion of inaccurate, obsolete, or unlawfully processed data.
To exercise any privacy rights, contact our appointed Privacy Officer at [email protected].