Privacy Policy

Last updated: March 1, 2025 • Compliant with the New Zealand Privacy Act 2020

1. Who We Are and Data Controller

This Privacy Policy explains how Noturnobrutal ("we", "us", "our") collects, manages, and protects personal information collected through our travel publication site at noturnobrutal.shop. For any privacy queries or requests to exercise statutory data rights, reach our Data Privacy Officer via info@noturnobrutal.shop.

2. Scope of Policy

This statement applies to all readers, subscribers, and clients interacting with our travel guides, contact forms, advisory bookings, and digital platforms across desktop and mobile devices.

3. Categories of Data Collected

We process information under three distinct categories:

Directly Supplied Data: Names, electronic mail addresses, telephone numbers, and travel notes submitted deliberately through our contact and itinerary planning forms.
Automatically Collected Telemetry: Anonymized Internet Protocol (IP) addresses, device hardware profiles, browser types, referral URLs, access timestamps, and session durations collected via standard server logs.
Cookie & Consent Flags: Granular opt-in state records stored locally in your browser to maintain Google Consent Mode compliance.

4. Legal Basis and Purpose of Processing

Processing Purpose	Data Categories	Statutory Basis (NZ Privacy Act 2020 / GDPR)
Responding to itinerary inquiries	Name, email, phone, message	Performance of service request / Legitimate interest
Ensuring site security & spam prevention	IP address, browser headers	Legitimate business interest / Information Security
Consent Mode audience analytics	Aggregated interaction metrics	Explicit Opt-In Consent (IPPP 1 & 3 / GDPR Art. 6(1)(a))

5. Cookies and Google Consent Mode v2

We utilize the Google Consent Mode v2 framework. Before you make an affirmative choice on our banner, tags relating to advertising and performance tracking are placed in a strict 'denied' state. Only strictly necessary operational cookies operate without preliminary consent. You may change or withdraw your choice at any moment via the "Cookie Preferences" trigger located in our website footer.

6. Third-Party Disclosures & Commercial Transfers

We do not sell, rent, or trade your personal data. Disclosures are limited to cloud hosting infrastructure providers under strict non-disclosure obligations, payment gateways if applicable, or state authorities when legally mandated under New Zealand legislation.

7. Cross-Border Data Flows

If our secure cloud servers store encrypted files in jurisdictions outside New Zealand, we ensure that adequate data protection mechanisms or standard contractual clauses are enacted in accordance with Information Privacy Principle 8 of the NZ Privacy Act 2020.

8. Retention Framework

Contact inquiry messages are retained for a maximum duration of 24 months to satisfy customer service continuity and legal dispute requirements, after which records are permanently expunged.

9. Your Privacy Rights & Supervisory Authority

Under the New Zealand Privacy Act 2020, you possess the right to request confirmation of whether we hold personal information about you, demand access to that information, and request prompt correction. You also hold the right to lodge a formal complaint with the Office of the Privacy Commissioner (OPC New Zealand) via privacy.org.nz.

10. Children's Privacy

Our platform does not intentionally collect information from individuals under the age of 16 without parental authorization. Inquiries identified as originating from children will be removed immediately.

11. Contact the Data Controller

For inquiries regarding this privacy framework, email info@noturnobrutal.shop.