Privacy Policy
CoastalKiwiDays (including our KoruPlay services) • Last updated: 5 March 2026
This Privacy Policy explains how CoastalKiwiDays Limited ("we", "us") collects, uses, stores and shares personal information when you use coastalkiwidays.com and related products and services ("Services"). We follow the Privacy Act 2020 (New Zealand).
Information we collect
- Account and profile: name, email, username, password (hashed), preferences, communications.
- Transactions/support: purchase or subscription details (if used), support requests, emails and chat content.
- Device and usage: IP address, device identifiers, browser type, pages viewed, timestamps, crash logs, referral URLs.
- Cookies and similar: essential cookies and, where enabled, analytics and advertising/measurement cookies.
How we use your information
- Provide, operate, secure and improve the Services.
- Create and manage accounts, authenticate users, and deliver features.
- Communicate with you (service messages, support, and—where permitted—marketing you can opt out of).
- Analytics, performance monitoring and bug fixing.
- Advertising and measurement (e.g., conversion tracking) where enabled and permitted by your settings/law.
- Comply with legal obligations and enforce our terms.
Sharing and disclosures
We may share personal information with service providers that help us run the Services (such as hosting, analytics, customer support, email delivery, payment processing, and ad measurement). We may also disclose information if required by law, to protect rights and safety, or as part of a business transaction (e.g., merger). We do not sell personal information in exchange for money.
Cross-border processing
Some providers may store or process information outside New Zealand. Where this occurs, we take reasonable steps to ensure comparable safeguards apply (for example, contractual protections and vendor assessments), consistent with the Privacy Act 2020.
Retention
We keep personal information only as long as needed for the purposes described above, including legal, accounting, dispute resolution and security needs. We then delete or de-identify it where reasonable.
Security
We use administrative, technical and physical safeguards designed to protect information. No method of transmission or storage is completely secure; please use a strong password and keep your login details confidential.
Your rights (New Zealand)
- Request access to your personal information.
- Request correction of your personal information.
- Make a privacy complaint with us and/or the Office of the Privacy Commissioner (privacy.org.nz).
Children
Our Services are not intended for children under 13. If you believe a child has provided personal information, contact us so we can review and take appropriate steps.
Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and update the “Last updated” date above.