Privacy
How Whangamatā Cycles looks after your details
What we collect
When you book, we ask for your name, email address and mobile number, plus your hire date, bikes, tours and your signed health & safety waiver. That's it — we don't collect payment card details (you pay at the counter) and you don't need a password.
Why we collect it
To confirm your booking, email your tour code and reminders, contact you if you tap "I'm lost" on a self-guided tour, keep a record of your waiver, and send one thank-you email after your ride. We don't use your details for marketing unless you ask us to.
Your location on a self-guided tour
Once your tour code has been activated, Whangamatā Cycles will have access to your location while you are on the ride. This is for health and safety purposes — so our staff can find you if you're lost, hurt or overdue. Your phone shares its position with Echo roughly every 20 seconds only while the map is open; it stops when you finish the ride, close the map or your 12-hour access ends. Only staff can see it, we never share it, and the location history is deleted within 7 days. You agree to this in the waiver when you book.
Who sees it
Only Whangamatā Cycles staff, through a password-protected admin area. Your details are stored securely with our hosting provider and sent over encrypted connections. We don't sell or share them with anyone else.
How long we keep it
Your name, email and phone number are automatically removed from our booking records 12 months after your hire date. We may keep signed waivers longer where required for insurance or legal reasons.
Your rights
Under the Privacy Act 2020 you can ask to see or correct the information we hold about you, or ask us to delete it. Email whangamatacycles@gmail.com or call us at the shop — we'll sort it within 20 working days.
If something goes wrong
If we ever believe your information has been accessed without permission and it could cause you harm, we'll tell you and the Office of the Privacy Commissioner as the law requires.