Privacy Policy

Muirs Reef Lodge is provided by George Muir (trading as Muirs Reef), a resident of New Zealand, and this Privacy Policy describes how I collect, use, and share your personal data when you use my website to book holiday accommodation.

1. Who I am

I am a resident in New Zealand. I operate Muirs Reef Lodge holiday accommodation.

2. Data Processor – Lodgify

My booking service is powered by Lodgify, a third-party data processor. Lodgify and its subprocessors (such as STRIPE & PAYPAL) process your personal data in accordance with the terms of the Lodgify Data Processing Addendum (DPA). This means that when you provide your information through my booking system, it is processed by Lodgify on my behalf.

3. Information I Collect

I collect and use personal data strictly for the purpose of providing and securing my accommodation booking service and make every effort to minimise the total volume of personal data we collect. The types of personal data I collect include:

Booking Information: Your name, email address, phone number, and any other contact information necessary to facilitate your booking and communicate with you about your stay.
Payment Information: Details required to process your payment for the accommodation. This information is securely handled by Lodgify and its payment processors. I do not directly store your full payment card details.
Website Usage Information: Your IP address and other technical data collected automatically when you visit my website. This information is used to ensure the security and functionality of my website. We do not intentionally use tracking cookies or similar technologies, and actively work to ensure that, wherever possible, our processors similarly avoid them.

4. How I Use Your Information

I use the information I collect for the following purposes:

To process and manage your accommodation bookings.
To communicate with you regarding your booking, stay, and any inquiries.
To provide customer support.
To improve and secure my website and services.
To comply with my legal obligations.

5. Sharing Your Information

I share your personal information with:

Lodgify: As our data processor, Lodgify receives your information to operate the booking system; Lodgify in turn uses subprocessors in accordance with the DPA.
Payment Processors: Your payment information is shared with secure payment processors via Lodgify to complete your transactions.
Legal and Regulatory Authorities: I may disclose your information if required to do so by law or in response to valid requests by public authorities.

6. Data Retention

I retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

7. Your Rights

In accordance with applicable privacy and data protection laws, such as the New Zealand Privacy Act and the General Data Protection Regulation (GDPR), you may have rights concerning your personal data, such as:

Right to Access: the right to request access to the personal data I hold about you.
Right to Rectification: the right to request that I correct any inaccurate or incomplete personal data.
Right to Erasure: the right to request the deletion of your personal data under certain circumstances.
Right to Restriction of Processing: the right to request that I restrict the processing of your personal data under certain conditions.
Right to Data Portability: the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
Right to Object: the right to object to the processing of your personal data in certain situations.
Right to Withdraw Consent: where we rely on your consent to process your personal data, you may have the right to withdraw that consent at any time.

To exercise any of these rights, please contact me at [email protected]

8. Data Security

I implement appropriate technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, and destruction. While I strive to protect your personal data, no method of transmission over the internet or method of electronic storage is 100% secure.

9. International Data Transfers

As I am based in New Zealand, your data will be processed in New Zealand. Lodgify and its subprocessors may process your data in other countries, in accordance with their DPA, which includes provisions for international data transfers compliant with applicable data protection laws.

10. Changes to This Privacy Policy

I may update this Privacy Policy from time to time to reflect changes in my practices or for other operational, legal, or regulatory reasons. I will post any new Privacy Policy on this page.

11. Contact me

If you have any questions about this Privacy Policy or my data practices, or if you wish to exercise your data protection rights, please contact me at:

[email protected]