Privacy policy
We collect very little, we do not sell anything to anyone, and you can ask us to delete what we hold at any time. This page sets out the detail, as required by the Privacy Act 2020.
Who we are
Directstay.guru is a New Zealand based studio operating under the name Directstay.guru ("Directstay.guru", "we", "us", "our"). You can reach us at hello@directstay.guru. We are the agency responsible for the personal information described on this page, under the Privacy Act 2020.
What we collect
We only collect information you choose to give us, plus the basic technical data any website receives.
| Where | What we collect | Why |
|---|---|---|
| Contact form | Your name, email address, phone number if you give one, your property or business details, and your message | To answer your enquiry and prepare a quote |
| Newsletter signup | Your email address | To send the monthly direct booking email you asked for |
| WhatsApp or email | Whatever you send us, including your phone number | To have the conversation you started |
| Client work | Property photos, listing details, rates, availability and the account access you grant us | To deliver the work you engaged us for |
| Server logs and spam controls | IP address, browser type, page requested, timestamps, and a hashed form of your IP and email used for rate limiting | Security, abuse prevention and keeping the site running |
We do not collect sensitive information, we do not run advertising trackers, and we do not build behavioural profiles of visitors.
Children
This site is aimed at property owners and businesses. We do not knowingly collect information from anyone under 16. If you believe we hold a child's information, tell us and we will delete it.
How we use it
We use your information to reply to you, to quote and deliver work, to invoice, to keep our records for tax purposes, to send the newsletter if you subscribed, and to protect the site from abuse. That is the entire list.
We do not sell, rent or trade personal information. We do not send marketing to people who only sent us an enquiry, unless they also subscribed.
How long we keep it
Enquiries that do not turn into work are deleted within 24 months. Newsletter subscribers are kept until you unsubscribe, after which we keep a suppression record so you are not re-added. Client project records and invoices are kept for 7 years to meet Inland Revenue requirements. Server logs are kept for a short rolling period and then overwritten.
How we protect it
The site is served over HTTPS with a strict content security policy and standard security headers. Forms are rate limited and protected against automated abuse. Access to our inboxes and provider accounts is restricted to the two of us and secured with multi-factor authentication. Client credentials you share with us are stored in a password manager, never in plain text.
No system is perfect. If a privacy breach happens that is likely to cause you serious harm, we will notify you and the Office of the Privacy Commissioner as the Privacy Act requires.
Your rights
Under the Privacy Act 2020 you can ask us to:
- confirm whether we hold information about you, and give you a copy of it;
- correct anything that is wrong, or attach a statement of correction;
- delete what we hold, where we are not required to keep it;
- stop sending you email, which you can also do with the unsubscribe link in every newsletter.
Email hello@directstay.guru and we will respond within 20 working days. There is no charge.
Complaints
If you are not happy with how we have handled your information, tell us first and we will try to fix it. If you are still not satisfied, you can complain to the Office of the Privacy Commissioner at privacy.org.nz or 0800 803 909.
Changes to this policy
We update this policy when our services or providers change. The date at the top of the page shows the current version. Material changes affecting existing clients will be emailed.
Contact
Privacy questions and requests go to hello@directstay.guru.