Privacy
This page is not finished.
Indie Hire is not open to the public yet. This page will carry the privacy statement before it is, and nothing here should be read as one in the meantime.
If you have sent an enquiry and want to know what happened to your details, or want them deleted, email hello@indiehire.nz and a person will answer.
What the statement has to cover
Written down here so it is visible rather than buried in a ticket. These are the questions the page has to answer, not the answers.
- Passing a named traveller to a third party. An enquiry sends a name, an email address, a phone number and travel dates to an independent business we do not control. That is a disclosure to a third party and it is the substantive question on this page, not a footnote.
- The pass-it-on tick box. Ticking it sends the same details to a second operator the traveller never chose. Whether a tick box is adequate consent for that, what it must say, and whether it may be pre-ticked (it is not) all need a position.
- EU and UK residents. A meaningful share of inbound travellers are EU or UK residents, which brings the GDPR into scope: a lawful basis for the disclosure above, the right to erasure, the right to a copy, and whether a representative is required.
- New Zealand Privacy Act 2020. IPP 11 on disclosure and IPP 12 on sending personal information overseas, given operators and travellers are in different countries.
- How long things are kept. Enquiries, lapsed enquiries, reviews, and the search logs behind the demand reports each need a retention period and a reason for it.
- Who processes what. The email provider, the hosting provider and any analytics, named, with where they sit.
- Who to contact, and how to complain. A real address for requests, and the route to the Privacy Commissioner.
- The trading name and legal entity. The name that appears on invoices and in any agreement, which is the same gap the ownership page has.