Nection Ltd (NZBN: 9429047210868) operates Tripplanner.nz (“the Website”). We are committed to protecting your personal information in accordance with the Privacy Act 2020 (New Zealand). This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and your rights in relation to it.
By using the Website, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside our Terms and Conditions.

1. Who We Are
The Website is operated by:
Nection Ltd
Auckland, New Zealand
Email: graham@nection.co.nz
Website: https://tripplanner.nz
Nection Ltd is the agency responsible for any personal information collected through this Website, as defined under the Privacy Act 2020.

2. What Personal Information We Collect and Why
We only collect personal information that is necessary for the operation of the Website. The types of information we collect and our reasons for collecting it are set out below.
2.1 Comments
When you leave a comment on the Website, we collect your name, email address, website (if provided), the content of your comment, your IP address, and your browser user agent string. This information is used to facilitate the comment function and to help detect and prevent spam. Your IP address may be passed to an automated spam detection service for this purpose.
An anonymised hash of your email address may be sent to the Gravatar service to determine whether you have a profile picture associated with your email. If you do, that image will be displayed alongside your approved comment. You can review Gravatar’s privacy practices at https://automattic.com/privacy/.
Providing a comment is voluntary. If you choose to comment, your name and comment will be visible to the public once approved.
2.2 Media and Images
If you upload images to the Website, you should be aware that image files may contain embedded metadata, including GPS location data (known as EXIF data). Other users may be able to download your uploaded images and extract any location data contained within them. We recommend removing location metadata from images before uploading if you wish to protect that information.
2.3 Cookies
We use cookies — small text files stored on your device — to improve your experience on the Website. The cookies we use are as follows:

Comment cookies: If you leave a comment and opt in to saving your details, your name, email address, and website will be stored in cookies on your device for one year, so you do not need to re-enter them next time you comment.
Session cookies: When you visit the login page, a temporary cookie is set to check whether your browser accepts cookies. This cookie contains no personal data and is deleted when you close your browser.
Login cookies: When you log in, cookies are set to save your login session and display preferences. Login cookies last two days; display preference cookies last one year. If you select “Remember Me”, your login session will persist for two weeks. Logging out will remove your login cookies.
Editorial cookies: If you publish or edit a listing or article, a short-term cookie is saved recording the relevant post ID. This contains no personal data and expires after one day.
Analytics cookies: Google Analytics sets cookies (such as _ga and _ga_*) that let us count visits and see how the Website is used without identifying you. They last up to two years. Logged-in site administrators are not tracked.
Google services: Google Maps (on maps and listings) and Google reCAPTCHA (on the registration form) may set their own cookies when you use those features.

You can control and manage cookies through your browser settings. Disabling cookies may affect some functionality of the Website.
2.4 Listing Registration
When you register a listing on Tripplanner.nz, we collect personal information including your name, email address, business or attraction details, and payment information where applicable. This information is collected for the purpose of managing your listing and processing payments, as described in our Terms and Conditions.
2.5 Embedded Content
Pages on this Website may include embedded content from third-party platforms (such as videos, maps, or other media). Embedded content behaves as if you had visited those third-party websites directly. Those websites may collect data about you, use their own cookies, and monitor your interactions with their content. We encourage you to review the privacy policies of any third-party platforms whose content appears on this Website.
2.6 Password Resets
If you request a password reset, your IP address will be included in the reset email for security purposes.

2.7 Website Analytics
We use Google Analytics, provided by Google, to understand how visitors use the Website: for example which pages are viewed, how visitors found us, the type of device and browser used, approximate location (city or region) and how long visits last. On listing pages we also record when a visitor taps a listing’s phone, email, booking, directions or social media link, together with the listing’s name and ID, so we can show businesses how their listing is performing. We never send names, phone numbers or email addresses to Google Analytics, and it does not give us information that identifies you.
We also use Google Search Console, which shows us how often pages of the Website appear in Google search results and which search terms led to them. This information is combined across all searchers and does not identify anyone.

2.8 Accounts, Contributor Profiles and Reviews
When you create an account, we collect your username, email address and password, and any profile details you choose to add, such as a bio, profile photo, portfolio link or Instagram profile. Your profile appears on our Contributors page only if you tick the option to display it. Reviews and Local Advice you submit are published with your display name.

2.9 Listing Details and Business Owner Information
Contact details you add to a listing, such as a contact name, phone number, email address and booking link, are published on the listing so visitors can reach you, unless the form says a field is private. You can choose to show only your town and region instead of your street address.
If you create or manage a listing on behalf of a business, we ask for the business owner’s name and email address. These details are private. They are never shown on the listing and are only used to send the owner reports about the listing, to confirm the listing with them, or to help them claim it.
If an organiser email address is provided for a What’s On event, it is kept private and used to let the organiser know when the event has been published.

2.10 Listing Performance Reports
If you own or manage a business listing, we may email you a report showing how your listing has performed, for example page views, taps on contact and booking links, and appearances in Google search. Reports are prepared and sent using Google’s Data Studio service. They contain statistics about the listing, not personal information about individual visitors. You can ask us to stop sending them at any time.

2.11 Forms, Photos and Messages
When you use a form on the Website, such as the contact, help, report-a-change, “write your own version” or “Share your photos” forms, we collect what you enter, including your name, email address, message and any photos you upload. Submissions are stored on the Website and emailed to us. If we publish a photo you send us, we credit it using the name you provide. If you tick the option allowing us to feature your listing photos on Instagram, we may share them on our Instagram account with credit to you.

2.12 Email
We use Brevo to send emails from the Website, such as account and listing notifications, and to manage our contact lists. When you register, a contact record with your name and email address is created in Brevo, and once your listing is published you are added to the email list for that type of listing. Emails you send to our Tripplanner.nz email addresses may also be recorded in Brevo so we can manage our replies. You can unsubscribe from marketing emails at any time using the link in the email.

2.13 Spam Protection
Our registration form uses Google reCAPTCHA to protect the Website from spam and automated abuse. reCAPTCHA collects information about your device and how you interact with the page and sends it to Google. Its use is subject to Google’s Privacy Policy and Terms of Service.

3. How We Use Your Personal Information
We use the personal information we collect only for the purposes for which it was collected, including to:

Operate and maintain the Website and its listing directory
Process and manage listing registrations and payments
Moderate comments and prevent spam
Communicate with you about your listing or account
Understand how the Website is used so we can improve it
Send listing owners reports on how their listing is performing
Send account, listing and event notifications, and occasional updates about Tripplanner.nz (you can unsubscribe from updates at any time)
Comply with our legal obligations under New Zealand law

We will not use your personal information for any other purpose without your consent, unless permitted or required by law.

4. Who We Share Your Information With
We do not sell or rent your personal information to third parties. We may share your information in the following limited circumstances:

Spam detection services: Comment data, including IP addresses, may be passed to automated spam detection services.
Payment processors: Payment details are handled by our payment provider Gocardless Ltd and are not stored directly by Nection Ltd.
Gravatar: An anonymised hash of your email address may be shared with Gravatar solely to retrieve a profile picture, if applicable.
Google: Google Analytics, Google Search Console and Data Studio (website statistics and listing reports), Google Maps and Google reCAPTCHA.
Brevo: our email service, used to send emails and manage contact lists.
Make and Xero: when you buy a paid listing, your name, email address and invoice details are passed through Make to our accounting software, Xero.
Hosting: the Website is hosted by VPS City, a New Zealand hosting company.
Legal requirements: We may disclose your information if required to do so by law or in response to a lawful request from a New Zealand authority.

Where we share information with third-party service providers, we take reasonable steps to ensure those providers handle your information in a manner consistent with the Privacy Act 2020.

5. How Long We Retain Your Information
We retain your personal information only for as long as is necessary for the purposes described in this Policy or as required by law:

Comments: Comments and associated metadata are retained indefinitely to support moderation of follow-up comments. You may request deletion at any time (see Section 6).
Listing user accounts: Personal information in your user profile is retained for as long as your account remains active. You may update or delete your profile information at any time, except that your username cannot be changed.
Website statistics: Google Analytics data is kept for the retention period set in our Google Analytics account and then deleted automatically. Combined reports, which do not identify anyone, may be kept longer.
Business owner details: Details provided for a managed listing are kept with the listing and deleted when the listing is permanently deleted, or earlier if you ask us.
Form submissions: Kept for as long as we need them to respond to you and for our records. You can ask us to delete them.
Payment records: Records of transactions may be retained for up to 7 years in accordance with the requirements of the Tax Administration Act 1994.

6. Your Rights Under the Privacy Act 2020
Under the Privacy Act 2020, you have the right to:

Access the personal information we hold about you
Correct any personal information that is inaccurate or out of date
Request deletion of your personal information, subject to any legal obligations we have to retain it
Receive a copy of your personal information in a portable format, where you have an account or have submitted content

To exercise any of these rights, please contact us at graham@nection.co.nz. We will respond to your request within 20 working days, as required by the Privacy Act 2020.
If you are not satisfied with our response, you have the right to complain to the Office of the Privacy Commissioner at www.privacy.org.nz or by calling 0800 803 909.

7. Where Your Information Is Stored
Nection Ltd is based in Auckland, New Zealand. Some of the third-party services we use (such as Google, Brevo, GoCardless, Make, Xero, Gravatar and spam detection services) may store or process data outside New Zealand. Where this occurs, we take reasonable steps to ensure your information receives a comparable level of protection to that required under New Zealand law, consistent with Information Privacy Principle 12 of the Privacy Act 2020.

8. Security
We take reasonable steps to protect the personal information we hold from loss, unauthorised access, use, modification, or disclosure. However, no internet-based service can guarantee absolute security, and we encourage you to take care when sharing personal information online.

9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. Where changes are material, we will notify you via the Website or by email. Continued use of the Website after the updated Policy takes effect constitutes your acceptance of the changes.

10. Contact Us
If you have any questions, concerns, or complaints about this Privacy Policy or how we handle your personal information, please contact:
Nection Ltd
Auckland, New Zealand
Email: graham@nection.co.nz
You also have the right to contact the Office of the Privacy Commissioner:
Website: www.privacy.org.nz
Phone: 0800 803 909

Last updated: October 2026