Privacy Policy

Last Updated: February 2025 • In accordance with the Privacy Act 2020 (New Zealand)

1. Data Controller Identification

This Privacy Policy governs the operations of Neonspectra ("we", "us", "our"), operating the digital domain neonspectra.shop. For all data inquiries, please contact our designated privacy officer via email at [email protected]. We are headquartered in Queenstown, New Zealand, and process all personal data strictly under New Zealand jurisdiction.

2. Scope of this Policy

This policy applies to all visitors, journal subscribers, and clients interacting with our digital platform, itinerary request forms, and email communications.

3. Information We Collect

We gather information across three fundamental categories:

  • Directly Supplied Data: Names, email addresses, contact telephone numbers, and inquiry descriptions provided voluntarily via our route intake forms.
  • Automated Telemetry: Anonymized IP addresses, browser variants, device classifications, referring URLs, and timestamps captured when cookies are authorized.
  • Third-Party Analytics: Aggregated audience metrics obtained via Google Analytics in full compliance with Consent Mode v2.

4. Purposes and Legal Bases for Processing

Processing PurposeCategories of DataLegal Basis (NZ Privacy Act 2020)
Fulfilling itinerary consultationsName, email, phone, travel notesContractual necessity & direct consent (Principle 1 & 2)
Platform security & bot protectionIP address, HTTP request headersLegitimate operational interest (Principle 5)
Audience measurement & analyticsPseudonymized cookie identifiersExplicit consent via Cookie Banner

5. Cookies, Analytics and Google Consent Mode v2

Our website utilizes Google Consent Mode v2 in advanced configuration. By default, prior to any user selection, telemetry, analytics storage, and ad storage parameters are locked in a 'denied' state. Only essential security cookies operate. When you click "Accept All", consent signals are updated to 'granted'. You may modify or revoke this consent at any moment via the persistent "Cookie Settings" tool in the footer.

6. Third-Party Disclosures & Non-Sale Guarantee

We do not sell, rent, or trade your personal information to third parties. Data is shared only with strictly vetted infrastructure processors (such as hosting providers and secure mail routing services) or when compelled by lawful requests from New Zealand law enforcement bodies.

7. Cross-Border Data Transfers

Where cloud infrastructure resides outside New Zealand, we ensure hosting providers meet comparable privacy safeguards consistent with Information Privacy Principle 12 of the Privacy Act 2020.

8. Retention Policies

Inquiry correspondence is retained for 24 months to address ongoing itinerary modifications, after which all records are securely anonymized or permanently purged.

9. User Privacy Rights and Supervisory Authority

Under the New Zealand Privacy Act 2020, you retain the right to request access to your personal information and demand correction of inaccuracies. If you believe your data has been handled improperly, you may lodge a formal complaint with the Office of the Privacy Commissioner (OPC) New Zealand (privacy.org.nz).

10. Security Safeguards

We deploy full TLS 1.3 encryption, secure socket layers, firewalls, and least-privilege administrative access protocols to protect stored records from unauthorized access, modification, or exposure.

11. Children's Privacy

Neonspectra does not intentionally solicit or process data from minors under the age of 16. If we become aware that a child under 16 has submitted personal information without verified parental consent, we will promptly delete the data.

12. Third-Party External Links

Our articles contain references and external links to the Department of Conservation (DOC), MetService NZ, and transport partners. We hold no responsibility for the external privacy policies or operational practices of external sites.

13. Updates to this Policy

We may periodically update this policy to reflect legislative updates or technical adjustments. Material modifications will be posted here alongside an updated revision date.

14. Contact Point

Direct all privacy requests to: The Privacy Officer, Neonspectra via [email protected].