Redwood Summit ("we", "us", "our") operates the website redwoodsummit.nz (the "Site"). This Privacy Policy explains how we collect, use, and protect your personal information when you visit the Site or contact us.
We comply with the New Zealand Privacy Act 2020. If you are visiting from the European Union or the United Kingdom, we also aim to provide protections consistent with the General Data Protection Regulation (GDPR) and UK GDPR.
Information we collect
Information you provide
When you join the First Stay List for a stay at Redwood Summit — whether through the form on the Site or by emailing us directly — we collect your name and email address, what brings you to Rotorua, and anything else you choose to tell us in the message field.
Sign-ups submitted through the form on the Site are stored in a database hosted by Cloudflare (see "Third parties" below) so we can respond, send you a small number of opening updates, and notify you first when reservations open. We do not use this information for anything else.
Information collected to prevent abuse
When you submit the First Stay List form, we process your IP address to guard against spam and automated abuse: it is passed to Cloudflare Turnstile (a privacy-focused alternative to CAPTCHA) for a bot check, and a one-way hashed (irreversible) form of it is stored briefly to limit repeated submissions. We do not store your raw IP address, and the hashed value is not used to identify or track you.
Information collected automatically
When you visit the Site we collect anonymous usage data through Google Analytics 4, which may include:
- pages visited, time on page, and referral source
- device type, browser, and operating system
- approximate geographic location (country / region only)
Google Analytics uses cookies to measure this activity. IP addresses are anonymized where supported.
How we use your information
- To respond to your First Stay List sign-up and enquiries
- To notify you when bookings open, if you have asked us to
- To understand how the Site is used and improve its content and performance
- To comply with applicable legal obligations
We do not sell your personal information. We do not send marketing emails unrelated to Redwood Summit.
Cookies
The Site uses cookies set by Google Analytics for the purposes described above. You can disable cookies in your browser settings or install a Google Analytics opt-out browser add-on (tools.google.com/dlpage/gaoptout).
Third parties
- Google Analytics (Google LLC) — receives anonymized analytics data. See Google's privacy policy.
- Cloudflare (Cloudflare, Inc.) — hosts the Site and its First Stay List sign-up form, stores form submissions, and provides the Turnstile bot check. Server logs and edge processing may involve IP addresses. See Cloudflare's privacy policy.
We do not share the content of your registration or the emails you send us with any third party, except where we are legally required to do so.
Data retention
- Interest registrations (form submissions and emails) are retained for as long as is reasonably necessary to respond and — if you have asked us to — to notify you when bookings open, after which they are deleted. You can ask us to delete your registration at any time (see "Your rights").
- The hashed IP value used for spam prevention is retained only briefly (a matter of minutes) and then falls out of use.
- Analytics data is retained for 14 months (the Google Analytics default).
Your rights
Under the New Zealand Privacy Act 2020 and, where applicable, the GDPR, you have the right to:
- access the personal information we hold about you
- request correction of information that is inaccurate or out of date
- request deletion of your personal information
- withdraw consent where our processing is based on consent
- lodge a complaint with the New Zealand Office of the Privacy Commissioner (privacy.org.nz)
To exercise any of these rights, email us at hello@redwoodsummit.nz.
Security
We take reasonable steps to protect the personal information we hold. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Children
The Site is not directed at children under the age of 13, and we do not knowingly collect personal information from children.
Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent change. Significant changes will be communicated where practical.
Contact
For any privacy-related questions, please email hello@redwoodsummit.nz.