Governed by the New Zealand Privacy Act 2020. Last updated: March 2025.
EchoNZ operates as an independent New Zealand travel journal, publisher, and route advisory collective. References to "EchoNZ", "we", "us", or "our" refer to EchoNZ. For any privacy queries or data requests, contact our designated privacy officer via email at [email protected].
We do not publish physical street addresses or telephone channels to minimize unsolicited commercial distribution; all official notices must be submitted electronically to our registered email domain.
This Privacy Policy outlines how EchoNZ collects, uses, stores, and protects personal information obtained through our website, inquiry forms, and associated digital communications, strictly in accordance with the Information Privacy Principles (IPPs) outlined in the New Zealand Privacy Act 2020.
We restrict data collection solely to information necessary for providing travel advice and maintaining site stability:
| Processing Purpose | Data Involved | Legal Basis (NZ Privacy Act 2020 / IPP) |
|---|---|---|
| Responding to route inquiries & requests | Name, email, phone, message content | IPP 1 & IPP 2 (Direct collection for service fulfillment) |
| Maintaining site security and server diagnostics | IP address, browser logs | IPP 1 (Legitimate operational security interest) |
| Audience measurement & performance telemetry | Aggregated cookie identifiers, page views | Explicit Consent (via Consent Banner) |
We enforce Google Consent Mode v2. Prior to user interaction with our consent banner, default states for ad_storage, ad_user_data, ad_personalization, and analytics_storage remain set to denied. Strictly necessary cookies related to security remain active. You can modify your choices at any time via the "Cookie Settings" trigger in our footer.
We do not sell, rent, or trade your personal information under any circumstance. We only share information with vetted technical service providers (such as secure cloud hosting providers, form transit services, and Google infrastructure) under strict confidentiality agreements. Information may be disclosed where required by New Zealand law enforcement or court orders.
Because EchoNZ utilizes distributed global cloud infrastructure for web hosting, data may be processed on servers located outside New Zealand (e.g., in Australia, the United States, or the European Union). In accordance with IPP 12 of the Privacy Act 2020, we verify that foreign processors uphold data protection safeguards comparable to New Zealand privacy standards.
Contact and consultation inquiries are retained for a maximum of 24 months to assist with recurring traveler inquiries, after which records are permanently expunged or anonymized. Technical server access logs are purged every 90 days.
Under the New Zealand Privacy Act 2020, you hold explicit rights to:
To exercise your rights, email [email protected]. If you believe your privacy concerns have not been addressed satisfactorily, you have the right to lodge a formal complaint with the Office of the Privacy Commissioner (OPC) New Zealand (www.privacy.org.nz).
EchoNZ does not intentionally collect information from individuals under the age of 16 without parental or guardian consent. If we identify that information from a minor has been transmitted without authorization, it is deleted immediately.