Privacy Statement

Who is responsible

Puszta Manor is responsible for the personal information described here. Privacy requests can be sent to [email protected] or made by phone on +64 9 663 1752.

Information collected through enquiries

The enquiry form collects the fields you choose or are required to provide: full name, email address, optional mobile number, preferred visit date, optional arrival time, guest count, selected programme or visit type, optional message, privacy acknowledgement and, only for social poker, the programme confirmation.

The information comes directly from you. If your message includes information about another guest, that information is collected indirectly. Please share only what is reasonably needed to arrange the visit. Where the Privacy Act’s IPP 3A requires notice to a person whose information was collected indirectly, Puszta Manor will take reasonable steps to provide it unless an exception applies.

Purposes and necessity

Contact and visit details are used to answer the enquiry, assess the requested date or programme, communicate practical arrangements and keep a record of what was agreed. Required fields are necessary to identify the enquiry, respond and understand the requested visit. The optional phone, arrival time and message fields help when you choose to provide them.

Privacy and poker confirmation timestamps are retained with the enquiry to record the form state that was submitted. They are not marketing subscriptions.

Website security and privacy choices

The server uses a session identifier for CSRF protection, temporary form-error state and basic submission rate limiting. Standard hosting security logs may record an IP address, request time, requested path, browser information and error details for security, reliability and abuse prevention. The browser also stores the cookie-settings record described in the Cookie Policy.

Recipients and service providers

Enquiry information is available to Puszta Manor for responding and arranging the requested visit. It is also processed by the website hosting and email-delivery infrastructure needed to receive and transmit the form. Puszta Manor does not use the enquiry acknowledgement as permission to sell personal information or send marketing subscriptions.

The form does not intentionally disclose enquiry information overseas. Hosting or email infrastructure may process technical data according to the provider configuration used by the website host. Where an overseas disclosure is made, Puszta Manor will address the safeguards required by Information Privacy Principle 12.

Retention

Enquiry and arrangement records are normally kept for up to 24 months after the enquiry is resolved, unless a longer period is reasonably needed for an active matter, a legal obligation or a dispute. Temporary session form data ends with the browser session or after a successful submission. Security logs are retained according to operational security needs and host settings, generally no longer than 90 days unless an incident requires longer investigation. Information is deleted or de-identified when it is no longer required.

Security

Puszta Manor uses restricted server-side configuration, CSRF protection, input validation, rate limiting, secure response headers and controlled access to enquiry messages. No internet transmission can be guaranteed to be completely secure, so access is limited to what is reasonably needed and suspected incidents are assessed promptly.

Access, correction and complaints

You may ask for access to personal information Puszta Manor holds about you and request correction. Contact [email protected] with enough detail to identify the information. Identity may be checked before information is released.

If you have a privacy concern, contact Puszta Manor first so it can be addressed. You can also learn about your rights or make a complaint to the Office of the Privacy Commissioner. The governing legislation is the Privacy Act 2020.