Privacy

Privacy Policy

Last updated: 3 May 2026

Kauri Bay Auckland Limited (referred to in this policy as "we" or "us") collects, holds, uses, and discloses personal information in connection with our Winter Romance wedding package and the website winter.kauribay.co.nz. We comply with the New Zealand Privacy Act 2020 and the thirteen Information Privacy Principles.

Kauri Bay Auckland Limited, 777 Clevedon-Kawakawa Road, Clevedon, Auckland 2585, New Zealand. Phone +64 9 298 7779. Email events@kauribay.co.nz.

1. What information we collect

When you submit our enquiry form, we collect your name, email address, phone number, indicative wedding date or month, and any message you choose to share.

When you visit the website, we (or our service providers) automatically collect your IP address and approximate location, device and browser information, the pages you view, the referring URL (including the gclid, fbclid, and utm tracking parameters), and a first-party cookie that stores the gclid for up to 30 days, used to attribute your enquiry to the advertising click that brought you to the site.

We do not knowingly collect information from anyone under 16 years of age.

2. How we collect it

• Directly from you, via the enquiry form.
• Automatically, via cookies and standard web-server logs when you visit the site.
• From our advertising and analytics partners (see section 5) when you arrive from an ad or referral.

3. Why we collect it

1. To respond to your wedding enquiry and arrange site visits, quotations, and bookings.
2. To provide and improve the website, measure how visitors find and use it, and improve our advertising.
3. To comply with our legal obligations.

We will not use your information for any unrelated purpose without your consent.

4. How we hold it

Enquiries are stored in our customer-relationship system HubSpot (United States) and in our internal email systems. Server logs and cached availability data are stored on infrastructure operated by Zonata Limited (our technology service provider) in New Zealand. We use industry-standard measures (TLS encryption in transit, access controls, audit logging) to protect your information. We retain enquiry records for as long as needed to operate our business and comply with NZ tax and contract-law retention obligations (typically up to 7 years), then delete or de-identify them.

5. Who we share it with

We share information only with the parties listed below, and only to the extent needed for the purpose stated.

These recipients are based outside New Zealand. By submitting the form or using the site you agree to your information being transferred and stored in the countries listed above. Each provider has agreed to protect your information to a standard comparable to the Privacy Act 2020. We do not sell your personal information.

6. Cookies and tracking technologies

• A first-party gclid attribution cookie (30-day lifetime) used to attribute enquiries to the Google Ads click that brought you here. No name, email, or browsing history.
• A first-party session cookie to remember your form draft and CSRF token. Expires when you close your browser.
• Google Analytics 4 cookies (_ga, _ga_*) for traffic analytics. These cookies do not identify you personally.
• Cloudflare Turnstile cookies for spam protection.

We do not use third-party advertising cookies (such as the Meta Pixel cookie) on this site. Meta conversion measurement is performed server-side via the Conversions API using hashed identifiers, not cookies, so there is no cross-site tracking via your browser.

You can disable cookies in your browser settings; the website will still work, but the form's CSRF protection and our attribution data will be reduced.

7. Your rights under the Privacy Act 2020

You have the right to access the personal information we hold about you, correct information that is inaccurate or out of date, withdraw consent to future marketing contact at any time, and make a complaint to us or to the Office of the Privacy Commissioner.

To exercise any of these rights, email events@kauribay.co.nz. We will respond within 20 working days as required by the Privacy Act.

If you are not satisfied with our response, you may contact:

8. International disclosure

Some of the recipients listed in section 5 are based overseas (primarily in the United States). Where we transfer your information outside New Zealand, we rely on the recipient's own privacy commitments and, where relevant, contractual data-protection clauses to ensure your information is protected to a standard comparable to the Privacy Act 2020. By submitting the enquiry form you consent to this overseas disclosure for the purposes set out in this policy.

9. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent change. Material changes will be highlighted on the homepage.

10. Contact

Questions or requests about this policy or your personal information: