Privacy Policy [September 2026]: Written to the New Zealand Privacy Act 2020
How we collect, use and protect personal information, written to the New Zealand Privacy Act 2020 and its thirteen information privacy principles.
Last updated 21 September 2026. Written to the Privacy Act 2020 and its thirteen information privacy principles.
The short version
- You can read every page on this site without giving us anything.
- We collect personal information only when you send it — the contact form or an email.
- We use privacy-respecting analytics that do not track you across other websites.
- We do not sell personal information. Ever.
- Our affiliate links pass a tracking identifier to the operator so we are credited. They do not pass your identity, because we do not have it.
- You can ask what we hold, ask us to correct it, and ask us to delete it: [email protected].
1. What we collect
Information you give us
If you use the contact form or email us: your name, email address, the subject you selected and whatever you write. For an operator complaint you may also send transaction details and correspondence. We collect this because we need it to reply and, for complaints, to log the issue against the operator.
Information collected automatically
Standard web server logs: IP address, browser and device type, pages requested, timestamps and referring page. Used for security, diagnosing faults and understanding which pages are useful. Logs are retained for 90 days.
Analytics
We use privacy-respecting analytics that measures page views and referrers in aggregate. It does not set advertising cookies, does not build a profile of you and does not track you across other websites.
Affiliate tracking
When you click through to an operator, the link carries an identifier telling the operator the visit came from us, so we can be credited if you open an account. That identifier identifies us, not you. The operator may then set its own cookies under its own privacy policy, which we do not control. See our cookie policy.
2. What we do not collect
- Payment details. We never take payments, so we have no card or bank information.
- Gambling account details, balances or play history. We have no access to any operator’s systems.
- Identity documents. We do not verify anyone; the operator does that.
- Sensitive information as defined in the Privacy Act, unless you volunteer it in a message to us.
3. How we use it
To reply to you; to investigate and log operator complaints; to keep the site secure and working; to understand in aggregate which content is useful; and to meet legal obligations. That is the complete list.
We do not send marketing email. There is no mailing list.
4. Who we share it with
We do not sell personal information. We share it only:
- With service providers who host the site and deliver our email, under contract and only as needed;
- With an operator, where you have asked us to raise a complaint on your behalf and only with the details necessary;
- Where required by New Zealand law.
5. Overseas storage
Our hosting and email providers may store data outside New Zealand. Where that happens we take reasonable steps to ensure comparable safeguards apply, as required by information privacy principle 12.
6. How long we keep it
- Contact form and email correspondence: 24 months, then deleted.
- Operator complaint records: 36 months, because a pattern over time is precisely what makes them useful. De-identified where we can do so and keep the record meaningful.
- Server logs: 90 days.
- Aggregate analytics: indefinitely, but it contains no personal information.
7. Your rights under the Privacy Act 2020
You have the right to access the personal information we hold about you, and to request correction of anything inaccurate. You may also ask us to delete it, and we will unless we are required to keep it.
Email [email protected]. We will respond within 20 working days, as the Act requires. There is no charge.
If you are not satisfied with how we have handled your privacy, you may complain to the Office of the Privacy Commissioner: privacy.org.nz, or 0800 803 909.
8. Security
The site is served over HTTPS. Access to correspondence is limited to editorial staff who need it. No system is perfectly secure, and if a privacy breach occurred that caused or was likely to cause serious harm we would notify affected people and the Privacy Commissioner as the Act requires.
9. Children
This site is for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe we have, email [email protected] and we will delete it.
10. Changes
We may update this policy. The date at the top is the date of the current version, and material changes will be noted on this page.
11. Contact
Privacy enquiries: [email protected], marked “Privacy”.
Payout Desk NZ, publisher of Payout Desk NZ, New Zealand.