Privacy Policy – The Road Trip Limited

1. Introduction
1.1. The Road Trip Limited (we, us, our) complies with the New Zealand Privacy Act 2020 (the Act) when dealing with personal information. Personal information is information about an identifiable individual (a natural person).
1.2. This policy sets out how we will collect, use, disclose and protect your personal information.
1.3. This policy does not limit or exclude any of your rights under the Act. If you wish to seek further information on the Act, see www.privacy.org.nz.
1.4. By using our website and/or services or providing your personal information to us, you consent to our collection, storage, use and disclosure of your personal information in accordance with this policy.

2. Changes to this policy
2.1. We may change this policy by uploading a revised policy onto the website. The change will apply from the date that we upload the revised policy. Your continued use of our website and/or services following notification of any changes to this policy constitutes acceptance of those changes. If you do not agree with any aspect of the updated policy, you must immediately cease all use of our website and/or services.
2.2. This policy was last updated September 2026.

3. Who do we collect your personal information from
3.1. We collect personal information about you from:
a. you, when you provide that personal information to us, including via the website and any related service, through any registration, through any contact with us (e.g. telephone call or email), or when you buy or use our services and products;
b. third parties where you have authorised this or the information is publicly available.
3.2. If possible, we will collect personal information from you directly.

4. Indirect collection of personal information
4.1. In some circumstances, we may also collect your personal information from publicly available sources, or from third-parties including payment processors, regulators, government agencies, credit agencies, referees, employers and external service providers to carry out customer due diligence, provide our services, manage recruitment processes, or otherwise conduct our business.
4.2. Where required by law, we will take reasonable steps to notify you of that collection, including the purpose of the collection, the intended recipients, the agency collecting the information, and your rights to access and request correction. We may provide that notice at the time of collection, when we first contact you, or as soon as reasonably practicable afterwards.
4.3. In some cases, we may not notify you where we are permitted not to do so under the Privacy Act 2020, including where you are already aware of the collection, notification is not reasonably practicable, or an applicable legal exception applies.

5. How we use your personal information
5.1. We will use your personal information to:
a. verify your identity;
b. provide services and products to you;
c. manage and administer our relationship with you;
d. market our services and products to you, including contacting you electronically (e.g. by text or email for this purpose);
e. improve the services and products that we provide to you;
f. undertake credit checks of you (if necessary);
g. enable us to undertake our business processes such as to bill you and to collect money that you owe us, including authorising and processing credit card transactions;
h. engage third party providers/suppliers, including but not limited to activity/service or accommodation providers, data storage providers, institutions, insurers, brokers, auditors and artificial intelligence platforms. All such providers are required to handle personal information under contractual confidentiality and security obligations;
i. respond to communications from you, including a complaint;
j. conduct research and statistical analysis (on an anonymised basis);
k. send you our newsletters, alerts and invitations or information about the services we offer or anything else we may consider relevant;
l. optimise your experience as a user of our website and/or services;
m. protect and/or enforce our legal rights and interests, including defending any claim;
n. recruit staff and referees that you provide to us to contact; or
o. for any other purpose notified to you at the time your personal information is collected; and
p. for any other purpose authorised by you or the Act.

6. Disclosing your personal information
6.1. We may disclose your personal information to:
a. vendors or other third parties who perform services on our behalf or we engage to perform services (e.g., accommodation or activity providers, IT management, payment processing, data analytics, customer support, cloud and storage);
b. our business and marketing partners to provide services and advertise to you. Our business and marketing partners will use your information in accordance with their own privacy notices;
c. to third parties when you direct, request us or otherwise consent to our disclosure of certain information, such as to provide our services or through your use of social media widgets or login integrations, with your consent.
d. with our affiliates or otherwise within our corporate group, in our legitimate interests to run a successful business;
e. prospective purchasers, investors, advisers, financiers and other parties involved in an actual or proposed sale, merger, restructuring, financing or other business transaction involving our business or assets;
f. to comply with any applicable legal obligations, to enforce any applicable terms of service, and to protect or defend the services, our rights, and the rights of our users or others;
g. an employee, independent contractor or another company within our group;
h. in the case of emergency, for example, missing persons details will be given to the appropriate authorities for search and rescue purposes;
i. a credit reference agency for the purpose of credit checking you; and
j. other third parties (for anonymised statistical information).

7. Protecting your personal information
7.1. We take reasonable steps to protect your personal information to ensure it is safe from unauthorised use, modification, disclosure, misuse and loss or unauthorised access. We do this by use of appropriate physical security and restricted access to both electronic and hard copy records.
7.2. In accordance with our obligations under the Act, if a breach occurs and has caused or is likely to cause anyone serious harm, we have established procedures for notifying the Privacy Commissioner and all affected persons, detailing steps taken to mitigate effects, as required by law.
7.3. We may store personal information we collect in any format we choose at our offices or at premises outside our offices, including data storage facilities or online storage located within or outside New Zealand, which may be operated by independent service contractors. Further, from time to time, we may share personal information with certain service providers who provide services to us or perform client insight analytics or marketing activities on our behalf. If your personal information is transferred outside of New Zealand, we will ensure the recipient of the information is operating in accordance with the Act or is subject to privacy standards that provide comparably sufficient safeguards.
7.4. We will retain your personal information for as long as necessary to:
7.4.1. provide our services to you, and for any period of time afterwards where we have an ongoing business need to retain it;
7.4.2. maintain secure backups in line with our security practices;
7.4.3. respond to any claims that may arise after our services have ended; and/or
7.4.4. meet legal obligations.
7.5. If you request that we delete your personal information, we will take reasonable steps to do so unless we are legally required, or otherwise have a legitimate reason, to retain it.

8. Accessing and correcting your personal information
8.1. Subject to certain grounds for refusal set out in the Act, you have the right to access your readily retrievable personal information that we hold and to request a correction to your personal information. This includes personal information we have collected directly from you and personal information we have collected about you from third parties. Before you exercise this right, we will need evidence to confirm that you are the individual to whom the personal information relates.
8.2. In respect of a request for correction, if we think the correction is reasonable and we are reasonably able to change the personal information, we will make the correction. If we do not make the correction, we will take reasonable steps to note on the personal information that you requested the correction.
8.3. If you want to exercise either of the above rights, email us at [email protected] Your email should provide evidence of who you are and set out the details of your request (e.g. the personal information, or the correction, that you are requesting).
8.4. We may charge you our reasonable costs of providing to you copies of your personal information or correcting that information.

9. Internet use and Third Party Website
9.1. While we take reasonable steps to maintain secure internet connections, if you provide us with personal information over the internet, the provision of that information is at your own risk.
9.2. If you follow a link on our website to another site, the owner of that site will have its own privacy policy relating to your personal information. We suggest you review that site’s privacy policy before you provide personal information. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Information you provide on public or semi-public venues, including information you share on third party social networking platforms may also be viewable by other users of the services and/or users of those third party platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the services.

10. Cookies and Statistical Information
10.1. We use cookies (an alphanumeric identifier that we transfer to your computer’s hard drive so that we can recognise your browser) to monitor your use of the website. We use cookies to power and improve our website and our services (including to remember your actions and preferences), to run analytics and better understand user interaction with the services (in our legitimate interests to administer, improve and optimise the services). We may also permit third parties and services providers to use cookies on our website to better tailor the services, products and advertising on website. You may disable cookies by changing the settings on your browser, although this may mean that you cannot use all of the features of the website. Additionally, blocking cookies may not completely prevent how we share information with third parties such as our advertising partners.
10.2. We collect non-identifying statistical information about all visits to our website. Those statistics allow us to assess the number of visitors to different sections of the website, identify what information is of interest, monitor system performance, and help us make our website and services more useful to visitors.

11. Contacting Us
11.1. If you have any questions about this policy, our privacy practices, or if you would like to request access to, or correction of, your personal information, you can contact us at [email protected]