Who We Are
Dragonfly Tiny House ("we", "us", "our") operates the website dragonflytinyhouse.co.nz (the "Site") to advertise and take direct bookings for our short-term rental property in Albert Town, Wānaka, New Zealand. This policy explains what personal information we collect through the Site (including via cookies), how we use it, and your choices. It is written to meet our obligations under the New Zealand Privacy Act 2020, and — because guests booking with us may be located overseas — we have also considered relevant principles of the EU General Data Protection Regulation (GDPR) and Australia's Privacy Act 1988 where applicable.
Dragonfly Tiny House, Albert Town, Otago, New Zealand.
Host: Henrik
Email: [email protected]
Phone: +64 21 923 553
For any privacy questions or requests, contact us using the details above.
Information We Collect
We collect information in the following ways:
a) Information you give us directly
- Booking enquiries and reservations: name, email address, phone number, check-in/check-out dates, number of guests, and any message you send us (e.g. questions about pets or accessibility).
- Payment information: when you pay for a booking, Stripe processes your payment. We do not collect or store your full card number, expiry date, or CVC — Stripe handles this directly and provides us only with payment confirmation, the amount, and limited billing details (such as name and email) needed to manage your reservation.
- Direct contact: if you email or call us, we keep a record of that correspondence.
b) Information collected automatically (including via cookies)
- Standard technical data such as IP address, browser type, device type, pages visited, and referring website, collected via cookies and similar technologies — see Part B below for full details.
- If we use an analytics tool (e.g. Google Analytics) or advertising pixel (e.g. Meta/Google Ads), we collect aggregated usage statistics to understand how visitors use the Site.
c) Information from third parties
Guest reviews displayed on the Site are imported from our Airbnb listing history and reflect information reviewers have already made public on that platform.
d) Security camera footage
The property has exterior security cameras covering outdoor areas only (no cameras inside the house). Footage may capture guests, visitors, and passers-by on the property for safety and security purposes. Footage is retained only as long as reasonably necessary and is not used for any other purpose.
Why We Collect and Use This Information
We use personal information to:
- Process and manage your booking, including taking payment via Stripe and communicating check-in details;
- Respond to enquiries and provide customer support;
- Meet legal, accounting, and tax obligations;
- Maintain the safety and security of the property;
- Improve the Site's content, performance, and user experience;
- Send you booking-related communications (e.g. confirmations, pre-arrival instructions).
International Data Transfers
Some of the providers above (notably Stripe) may process or store data outside New Zealand, including in the United States. Where this occurs, we rely on those providers' own compliance frameworks (such as Stripe's PCI-DSS certification and standard contractual protections) to safeguard your information.
Data Retention
We keep booking and payment records as long as needed to fulfil the booking, address any disputes, and meet our accounting/tax obligations (typically at least 7 years for financial records under NZ law). We retain security camera footage only for a limited period unless needed for an active security matter. Enquiry correspondence that does not lead to a booking is deleted after a reasonable period of inactivity.
Your Rights
Under the Privacy Act 2020, you have the right to:
- Ask us to confirm what personal information we hold about you;
- Request access to that information;
- Request correction of information you believe is wrong or incomplete.
If you are in the EU/UK or another jurisdiction with additional rights (such as erasure, restriction, or portability), contact us, and we will do our best to accommodate your request in line with applicable law.
To make a request, email us using the contact details in Section 1. We will respond within any timeframe required by law (in New Zealand, normally within 20 working days).
Security
We take reasonable technical and organisational steps to protect personal information from loss, misuse, or unauthorised access — including relying on Stripe for secure payment handling and standard website security practices. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
Children's Privacy
The Site is not directed at children, and we do not knowingly collect personal information from children. Bookings must be made by an adult (18+).
What Are Cookies?
Cookies are small text files placed on your device when you visit the Site. They help the Site function properly, remember your preferences, and, in some cases, help us understand how visitors use the Site. Similar technologies (such as local storage or tracking pixels) work in comparable ways and are covered by this policy too.
Types of Cookies We Use
Strictly necessary cookies
Required for the Site to work, and cannot be switched off. They include:
- Cookies that keep the booking calendar and reservation form working correctly as you select dates and guests;
- Session cookies set by our WordPress/Elementor website platform to load pages correctly and remember your session;
- Cookies set by Stripe during the payment process, used to process your payment securely and prevent fraud (e.g. Stripe's __stripe_mid and __stripe_sid cookies).
Functional cookies
Remember choices you make (such as selected dates or guest numbers) to improve your experience while browsing the Site.
Analytics cookies (only if enabled on the Site)
If we use a tool such as Google Analytics, it may set cookies to help us understand how many people visit the Site, which pages are popular, and how visitors navigate the booking flow, generally in aggregated/anonymised form.
Third-party embedded content
Some content on the Site is loaded from third parties, which may set their own cookies or make external requests:
- Google Fonts — loads website fonts;
- OpenStreetMap — powers the embedded location map;
- ui-avatars.com — generates guest review avatar images.
These third parties operate under their own privacy and cookie policies, which we encourage you to review.
Why We Use Cookies
We use cookies to:
- Make the booking and payment process work correctly and securely;
- Remember information you've entered so you don't have to re-enter it;
- Understand how visitors use the Site so we can improve it;
- Detect and prevent fraudulent payment activity (via Stripe).
Managing Your Cookie Preferences
Most browsers let you view, delete, and block cookies through their settings menu. Because our booking and payment system depends on certain cookies, blocking strictly necessary cookies may prevent you from completing a booking on the Site.
You can manage cookies via your browser:
- Chrome: Settings → Privacy and security → Cookies
- Safari: Preferences → Privacy
- Firefox: Settings → Privacy & Security
- Edge: Settings → Cookies and site permissions
You can also opt out of some third-party analytics tracking directly through that provider (e.g., the Google Analytics Opt-out Browser Add-on).
Changes to This Policy
We may update this Privacy & Cookie Use Policy from time to time, for example, if we add new booking, payment, or analytics tools. The "Last updated" date above reflects the most recent version.
Contact Us
Questions about this policy or how we handle your information? Reach out and Henrik will get back to you.
Let's talk about your privacy.
Have a question about this policy, a data request, or how we use cookies? Get in touch directly.