Your privacy

Last updated: 10 October 2026

We’re Waiake Beach Apartments Ltd. This page explains what information we collect — on this website and while you stay with us — why, who else handles it, and what you can ask us to do about it. We’ve kept it short, because the honest answer is: not much.

The short version

• We only collect personal details you choose to send us — a message through the contact form, or a booking.
• We don’t set cookies for our own purposes, and we never sell or share your details for anyone else’s marketing. The only cookies on this site are Google’s, described below.
• The site carries two Google tags: one shows us whether our ads bring visitors, the other (Google Analytics) shows us how the site is used. More on both below.
• You can ask to see or correct anything we hold about you, at any time.

When you send us a message

The contact form asks for your name, your email address and your message. We use them to reply to you — nothing else.

To keep out spam, the form is checked by Cloudflare Turnstile, which looks at technical details such as your IP address and browser. It doesn’t set advertising cookies.

Your message is delivered to our inbox and a copy is kept in our booking system’s secure mail store, so we can find the conversation again when you arrive. We keep enquiries for two years, and booked guests’ records for as long as New Zealand tax law requires (seven years).

When you book

Bookings are made in SiteMinder’s booking engine, shown on our Book page. SiteMinder collects your booking and payment details under its own privacy policy. Your card details never pass through this website, and we never see them. We receive the details we need to host you — your name, contact details, dates and any requests.

If you book through another website, such as Booking.com or Expedia, that website’s privacy policy applies to your booking, and it passes us the details we need to host you.

When you simply browse

• Hosting. This site is hosted by Cloudflare, which handles your IP address to deliver the pages and protect the site from attacks.
• Visit counts. Cloudflare Web Analytics counts visits to each page. It does this without cookies and without identifying you.
• Google Ads. A tag from Google lets us measure whether our advertising brings people to the site. It may set cookies and send Google information about your visit, such as the pages you view. If you’re visiting from the European Union, the European Economic Area, the United Kingdom or Switzerland, the tag runs without cookies or advertising identifiers — Google receives only anonymous signals, never enough to recognise you. You can control Google’s advertising use of your information at adssettings.google.com.
• Google Analytics. Google Analytics shows us how the site is used: which pages are read, roughly where visitors come from, and whether a visit continues to our booking page. It sets cookies (named _ga) and sends Google information about your visit. Google keeps this data for us for 14 months, and email addresses are removed before anything reaches Google. As with the advertising tag, if you’re visiting from the European Union, the European Economic Area, the United Kingdom or Switzerland, it runs without cookies. You can switch Google Analytics off in your browser for every site with Google’s opt-out add-on.
• Maps. The maps on our Location and Contact pages load their images from OpenStreetMap, which receives your IP address to send them.
• Your language choice. If you pick a language, your browser remembers it so the site opens in that language next time. This is stored only on your own device and never sent to us.
• Error reports. If your browser blocks something on our pages for security reasons, it may send us a short technical report so we can fix the page. It contains no personal details beyond what any web request carries.

While you stay with us

A modern apartment runs on a few connected systems. Here is what they record, plainly.

• No cameras. There are no security cameras anywhere at the property — inside or out.
• Your booking. We keep your name, contact details, stay dates, the website you booked through and any requests, so we can look after you and meet our tax obligations (seven years).
• Wi-Fi. When your devices join our Wi-Fi, the network records technical details: each device’s network address, when it connected, the website names it looks up (our network screens those against known malware and phishing sites to keep you safe), and which internet addresses it exchanged data with. We use this only to run and protect the network, and we keep it for 90 days. We never see the content of what you do online. If you use a VPN or iCloud Private Relay, that works fine here.
• Door locks. The smart locks record when each door is locked and unlocked, and by which entry code, so we can check the apartment is secure and help if you’re locked out. Our building system keeps this for 10 days. The lock maker, Yale, also keeps a history in its own service, under its own privacy policy. We’re changing how our locks work, and we’ll update this page when we do.
• The TV. You’re welcome to sign in to your own streaming accounts — please sign out before you leave. We’re working on resetting the TV automatically after every stay, and we’ll update this page when that’s in place.
• Appliances and energy. Our washing machines and energy meters report their status to our building system. We use these readings to run the property, not to monitor you.

Who else handles your information

We use a small number of service providers, each acting on our behalf: Cloudflare (hosting, spam checks, visit counts and our mail store), Microsoft (our email), SiteMinder (bookings), Google (advertising measurement and site analytics), OpenStreetMap (map images), Yale (the door locks) and Quad9 (the Wi-Fi’s safety screening). Some of these providers store information outside New Zealand. We choose providers with strong security and privacy commitments, and we share nothing beyond what each needs to do its job. Our own building systems run on equipment here at the property.

We don’t sell your information, and we don’t share it with anyone else unless the law requires us to.

Your rights

Under New Zealand’s Privacy Act 2020 you can ask us for a copy of the personal information we hold about you, and ask us to correct it. Just email stay@waiakebeach.co.nz — we’ll reply within 20 working days, and usually much sooner.

If you’re visiting from the European Union or the United Kingdom, you may have further rights, such as asking us to delete your information. Ask, and we’ll do our best to help.

If you’re not happy with how we’ve handled your information, please tell us first. You can also complain to the Office of the Privacy Commissioner at privacy.org.nz.

Contact

Waiake Beach Apartments Ltd 13 Ellangowan Road, Waiake, Auckland 0630, New Zealand stay@waiakebeach.co.nz Privacy officer: Joerg Micheel