Privacy Policy Effective date: July 2021. Village Lake Apartments 2016 Limited and its subsidiaries (“us”, “we” or “our”), takes its obligations in relation to privacy seriously. In this Privacy Policy (Policy), “you” and “your” means the individual providing Personal Information to us or the individual whose Personal Information is provided to us as the case may be.

This Policy provides information in relation to the basis upon which we collect, hold, use and disclose your Personal Information.  Personal Information has the same meaning as in the Privacy Act 1993 (Act).  In essence, it is information relating to an individual which can be used to identify that individual or which is linked to an identified individual.

This Policy applies to your use of the Village Lake Apartments website and services. By accessing our websites, and by using our services, you agree to the terms of this Policy.

Updates to this Policy

We will review this Policy from time to time to make sure it takes into account new laws and technology, and any changes to how we operate.

Should we decide to change our Policy we will post all changes on our website so that you are always kept up to date.

Use and disclosure of Personal Information collected from you is subject to the Policy in effect at the time such Personal Information is collected, unless otherwise agreed.

Collection of Personal Information

In general, the Personal Information we may collect and hold includes (but is not limited to): your name, phone number, email address and physical address, purchasing information, payment information, the content of all communications and any other information which assists us to provide you our services.

We collect your Personal Information when you provide it to us, when you contact us, or when you make a booking (whether online or over the phone, including through third party service providers such as Air Bnb, Expedia and Booking.com).

Our websites may automatically collect log information about your access to our services, including time of access, IP address, browser type, location and device identifiers. This information may be collected through third party tools.

Your Personal Information may also be collected from our subsidiaries, third parties you authorise us to contact, or by agents who are authorised by you to provide such information, or as otherwise permitted by the Act.

Our website may also state other ways in which we collect information from you.

If you access our website from outside of New Zealand, you agree that any Personal Information you provide us is subject to this Policy and the Act.

If you do not provide the Personal Information that the website asks you to provide, or the information is incorrect, we may not be able to confirm your booking, correctly provide the requested services or in some cases provide the requested services at all, appropriately identify you in the case of any incident, provide refunds, respond to an enquiry, or contact you. There is also a risk that you may be double booked and be liable for cancellation of the second booking.

Tracking & Cookies Data

We use cookies and similar tracking technologies to track the activity on our Service and hold certain information. Cookies are files with small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Tracking technologies also used are beacons, tags, and scripts to collect and track information and to improve and analyse our Service. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service. Examples of Cookies we use:

• Session Cookies. We use Session Cookies to operate our Service.
• Preference Cookies. We use Preference Cookies to remember your preferences and various settings.
• Security Cookies. We use Security Cookies for security purposes.

Analytics

We may use third-party Service Providers to monitor and analyse the use of our Service.

• Google Analytics

Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network. You can opt-out of having made your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sharing information with Google Analytics about visits activity. For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy?hl=en

Personal Information of Others

If you provide us with Personal Information relating to a third party you warrant you are authorised to do so and that you have ensured the individual is aware of the information in this Policy. If you provide us Personal Information about others, or if others give us your information, in relation to any booking then it will be used as set out in this Policy.  If it is provided in a different context, we will only use that information for the specific reason for which it was provided to us, or as otherwise permitted by the Act.

If you provide information about any child or any other person who is not able to understand and/or agree to this Policy, then you acknowledge that you are agreeing to this Policy on their behalf.

We may disclose a child’s Personal Information to their parent or legal guardian if requested by their parent or guardian.

We may also disclose any of your Personal Information relevant to any booking to the individual who made that booking.

Social Media and third party websites

We use social media services like Facebook and Instagram.

Information posted publicly on these and other social media platforms and third party websites such as tripadvisor.com are all available for others to see. We may collect, hold and make use of any information that you make public when you use any such third party services for the purposes of our business.

Where the functionality of our website allows you to login to your account using your login information from a social media platform such as Facebook, you authorise us to disclose your login information, such as your name, email address and encrypted access information to the social media platform to enable the platform to verify your details. You authorise us to collect and use such verification information to provide you access to your account and as otherwise set out in this Policy. The information available to us from a social media platform is affected by the privacy settings you establish with that platform.

All third party services are governed by the privacy policies and/or practices of the relevant third party, for which we are not responsible. If you do not want to provide Personal Information to any of those third parties, or make information publicly available, you should not use their particular service.

Purposes for which we collect and use your Personal Information

We may collect, hold, use and disclose your Personal Information for the following purposes:

• to provide you with the products and services you have requested, including to book and provide accommodation, to facilitate payment of such products and services, to confirm relevant details in relation to your booking (such as arrival details) and to identify you when we provide those products and services;
• to manage health and safety in relation to your stay with us
• to optimise your experience as either a customer of our products and services or as a user of our websites;
• to conduct our business, which may include reviewing, analysing and improving our own processes;
• to communicate with you, which includes responding to any message or enquiry you send us and identifying you when you want to communicate with us;
• to take any action in any case of dispute, or legal proceeding of any kind between you and us, or between you and any other person with respect to our business;
• to comply with our legal obligations, including requirements we have with our insurance or payment providers;
• any other purpose made known to you when collecting the Personal Information.

Other sections of this Policy also set out other specific situations in which your information is collected, used and disclosed.

We may use and disclose your Personal Information for any of these purposes, in any circumstances authorised by the Privacy Act, or in any other manner with your consent.

Other Disclosures of Personal Information

Except as stated in this Policy, we do not otherwise share your Personal Information without your consent, except where permitted by the Act, unless we believe it is necessary:

• to enforce our terms and conditions, or where we are legally required to do so;
• for us or other authorised agencies to detect, investigate, prevent or address fraud, security or technical issues;
• to otherwise protect our property, legal rights, or that of others; or
• for the purposes of carrying out the matters noted in the section below on the Management of Personal Information.

Management of Personal Information

We use third-party service providers to facilitate your payment and manage your bookings. In general, these third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.

We currently use Windcave Payment Gateway (Windcave) to process your payments. Windcave collect and hold your payment information to perform payment services in respect of your booking. Windcave will only make available to us the information collected by them as required to enable us to confirm payment and provide the services you have requested. Any credit card details stored for payments are done so on the Windcave system. No credit card information is stored by us and Windcave protects your credit card information – at a minimum – to the Payment Card Industry Data Security Standards (PCI-DSS). The payment information collected by Windcave is subject to Windcave’s privacy policy.  For further information, please read Windcave’s privacy policy, available here. If you do not agree with how Windcave will handle your Personal Information then you must not make bookings through our website.  We may change our payment processor at any time.

Except as otherwise stated in this Policy, your Personal Information we collect is held by us. Our address is set out below.

Your Rights

You have the right of access to, and to request the correction of, your Personal Information. To access or request a correction of any of your Personal Information, please contact us as follows:

Email: reception@villagelake.co.nz

Address: Village Lake Apartments, 1 Rutherford Crescent, Hanmer Springs 7334, New Zealand

We endeavour to ensure that the Personal Information we hold is accurate, complete and up-to-date. If any of the Personal Information that you have provided to us changes we encourage you to contact us to update that Personal Information.

If a dispute arises between us and we cannot resolve it with you, then you may wish to contact the Office of the Privacy Commissioner on investigations@privacy.org.nz.

Governing Law

This Policy is governed by the laws of New Zealand.