Terms of Service
Privacy Policy
Last updated: June 17, 2025
Applies to: The Staten Landt Limited, NZBN 9429052914652 ("we", "us" or "our") and the website statenlandt.com (the "Website").
Jurisdiction: New Zealand (Privacy Act 2020). Additional disclosures for EU/UK residents (GDPR/UK GDPR) are included below. 


1. Who we are
The Staten Landt Limited is a New Zealand-based luxury destination management company (DMC) and travel concierge curating bespoke itineraries across New Zealand (and selected international extensions). Our registered office and contact details appear in Section 15.


2. What this policy covers
This policy explains what personal information we collect, how and why we use it, who we share it with, how long we keep it, how we protect it, and the choices and rights you have.
“Personal information” means information about an identifiable individual.


3. How we collect personal information
We collect information:
  • Directly from you (enquiries, consultation calls, WhatsApp/Email/DMs, contract signature, feedback forms).
  • During booking & delivery of services (e.g., lodging, aviation/helicopter, yacht, guides, transfers, activities, insurance), including details required by partners to fulfil your itinerary.
  • From third parties you authorise (e.g., your PA/agent/family member), or from suppliers where you have made related bookings.
  • Automatically via the Site and our marketing tools (cookies, beacons, analytics, pixels, log files; see Section 10).


4. What we collect (examples)
Depending on your interaction with us, we may collect:
  • Identity & contact: name, title, date of birth, nationality, contact details, emergency contact.
  • Travel profile: party composition (incl. children), dietary requirements/allergies, accessibility & medical notes you choose to share, activity preferences (e.g., hiking level, fishing, skydive weight/height where required by operators), special occasions.
  • Government & KYC (where required by law/partners): passport details, visa/NZeTA status, driver licence details.
  • Booking & payment: itinerary details, reservation identifiers, invoices, payment method tokens, partial card references (never full card numbers we can read), and digital asset wallet information if you elect to pay via a crypto payment provider.
  • Communications & media: emails, messages, call notes, consented photos/video needed to operate your trip (e.g., heli manifests) and any testimonials you provide.
  • Website & marketing: device/IP, cookie IDs, pages viewed, email open/click data, form submissions.
We will only collect what is reasonably necessary for the stated purposes.


5. Why we use personal information (purposes)
We use information to:
  1. Plan and deliver your trip and related services;
  2. Confirm identity and manage safety requirements with activity providers (e.g., age/weight thresholds, medical disclosures you choose to provide);
  3. Process payments and manage accounts, refunds and fraud prevention;
  4. Client service & communications (before, during, after your trip);
  5. Marketing (with your consent or as permitted by law): newsletters, inspiration, offers — you can unsubscribe at any time;
  6. Business operations: analytics, service improvement, quality assurance, staff training;
  7. Legal & compliance: record-keeping, insurance, AML/CFT obligations when using certain payment channels, responding to lawful requests.


6. Legal basis for processing (NZ / EU / UK)
  • New Zealand: we collect, use and disclose personal information in line with the Privacy Act 2020 and its information privacy principles, for purposes that are lawful and directly related to our functions.
  • EU/UK visitors: where GDPR/UK GDPR applies, our typical bases are contract (to perform/prepare your booking), legitimate interests (e.g., service improvement, security), consent (e.g., optional marketing; sensitive details you choose to share), and legal obligation (e.g., tax/AML records).


7. What happens if you do not provide information
If you do not provide information we reasonably need (e.g., names, contact, key health/dietary or weight/height details required by an operator), we may be unable to accept or fulfil a booking or certain activities.


8. Who we share information with
We share only what is necessary for the purpose collected:
  • Travel principals & suppliers engaged for your itinerary (e.g., lodges/hotels, private villas, and comparable properties, helicopter and aviation operators, skydive/boating/guiding companies, transport providers, wineries, restaurants, spas, activity outfitters, insurers). These parties handle your data under their own privacy policies.
  • Payment & invoicing providers (e.g., card gateways, banking partners, accounting platforms). If you use digital asset payments, we pass limited details to the crypto payment provider to process the transaction and meet AML/CFT checks.
  • Technology & marketing providers (e.g., website host/CDN, email platforms, analytics and advertising tools) who process data under contract for us.
  • Professional advisers and insurers (legal, tax, risk) where reasonably necessary.
  • Authorities or third parties where required by law or to protect rights, safety, and security.
We do not sell your personal information.


9. International disclosures
We and many of our partners/technologies operate across multiple countries. Where we disclose personal information outside New Zealand, we will take reasonable steps to ensure that recipients will protect it with safeguards that are overall comparable to those in New Zealand law (for example, by using contractual clauses and due diligence of provider safeguards). You may contact us for more details about relevant safeguards for your itinerary.


10. Cookies, analytics and marketing
  • We use necessary, performance and analytics cookies on the Website. You can control cookies via your browser settings; blocking some cookies may affect Website functionality.
  • Our emails may contain tracking (open/click) to help us understand engagement and improve content. You can unsubscribe at any time.
  • We may use tools such as web analytics, tag managers, ad pixels and heatmaps to understand usage and improve the Website. Where required, we seek consent or provide opt-out options.


11. Digital asset (crypto) payments
If you opt to settle via an approved digital asset payment provider, that provider will collect and process personal information required to verify and complete the transaction (e.g., wallet address, transaction hash, any AML/CFT checks). We receive only information necessary to reconcile your payment and booking. Your use of a crypto payment provider is governed by that provider’s own terms and privacy policy. We do not custody client digital assets.


12. Children’s information
Our services are family-friendly. We process children’s information only with the consent of a parent or legal guardian and only as required to arrange and deliver services (e.g., ages for activity eligibility, dietary notes). We do not market directly to children.


13. Data retention
We keep personal information only as long as reasonably necessary for the purposes above or as required by law (e.g., tax and business records). Typical retention: 7 years for booking/financial records; marketing data until you unsubscribe or request deletion; operational logs for shorter rolling periods. We securely delete or de-identify data when no longer needed.


14. Security
We take reasonable steps to protect information from loss, misuse and unauthorised access, alteration or disclosure, including access controls, encryption in transit where appropriate, least‑privilege access, staff confidentiality, and vendor due diligence. No method is 100% secure; we maintain incident response processes and will notify affected individuals and authorities where legally required.


15. Your rights & choices
  • Access and correction: You can request access to the personal information we hold about you and ask us to correct it if it’s wrong. If we do not agree a correction is required, you can request that a statement of correction be attached to your record.
  • Marketing: You can opt out of marketing at any time via the unsubscribe link or by contacting us.
  • EU/UK rights (where applicable): You may have additional rights such as data portability, restriction and objection.
How to contact us:
Privacy Officer — The Staten Landt Limited
Email: legal@statenlandt.com
Phone: +64 21 08774309
Address: 27 Balmedie Ridge, Bethlehem, Tauranga, 3110, New Zealand
Complaints: If you have a privacy concern, please contact us first. If we can’t resolve it, you can contact the Office of the Privacy Commissioner (NZ). See: privacy.org.nz.


16. Third‑party sites and services
Our Site and itineraries include links to third‑party sites/services. Their privacy practices are their own; we encourage you to review their policies (e.g., airlines, lodges, helicopter and activity operators, insurers, payment providers).


17. Changes to this policy
We may update this policy to reflect changes in law or our practices. The latest version will always be posted on the Site with the “Last updated” date.


18. Governing law
This policy and any dispute arising from it are governed by the laws of New Zealand.


Contact
For any privacy questions, requests or complaints, please contact our Privacy Officer using the details in Section 15.

© 2025 The Staten Landt Limited. All rights reserved.
NZBN 9429052914652. Registered in New Zealand.
Made on
Tilda