Privacy Policy
Last updated: September 2026
1. Introduction
GoodKeen ("we", "our", or "us") is a New Zealand booking-software service for tour and activity operators. We are committed to protecting your privacy and handling personal information in accordance with the New Zealand Privacy Act 2020 and its Information Privacy Principles (IPPs). This policy explains what we collect, why, and the choices you have.
2. Information We Collect
Information you provide:
- Account information (name, email, business details)
- Payment information (processed securely via Stripe — we do not store full card numbers)
- Customer and booking data you enter into, or receive through, the platform
- Communications with our support team
Information collected automatically:
- Usage data and analytics
- Device and browser information
- IP addresses and approximate location
- Cookies and similar technologies
3. Operator and Guest Data
When an operator uses GoodKeen to take bookings, we process their guests' personal information on the operator's behalf — the operator is the agency responsible for that information, and GoodKeen acts as their service provider. Operators are responsible for having a lawful basis to collect their guests' information and for their own privacy practices.
4. Waivers and Health Information
Some activities require guests to sign a liability waiver at the time of booking. Where this happens, we collect and store the guest's signature, name, the date and time of signing, and the version of the waiver text they agreed to, so the operator has an accurate record. A waiver may ask the guest to confirm health or medical matters relevant to the activity. We treat signature and any health information as sensitive: it is stored securely, retained for the operator as their record, and only disclosed as described in this policy or as required by law. We do not use waiver or health information for marketing.
5. How We Use Your Information
We use the information we collect to:
- Provide and maintain the Service
- Process bookings and payments and send related confirmations
- Send administrative information and updates
- Respond to enquiries and provide customer support
- Improve and secure the Service
- Comply with legal obligations
6. Sharing and Disclosure
We may share information with:
- Service providers: Trusted third parties that help us run the Service (for example, our payment processor Stripe, hosting providers, email delivery, and analytics)
- Business transfers: In connection with a merger, acquisition, or sale of assets
- Legal requirements: When required by law or to protect our rights, safety, or property
We do not sell your personal information.
7. Data Security
We use appropriate technical and organisational measures to protect personal information, including encryption in transit, secure hosting, and access controls. No method of transmission or storage is completely secure, but we work to protect your information and to notify you and the Office of the Privacy Commissioner of any privacy breach that is likely to cause serious harm, as required by the Privacy Act 2020.
8. Data Retention
We retain information for as long as your account is active or as needed to provide the Service, and for any period required to meet legal, accounting, or record-keeping obligations (including retention of signed waivers for the operator's records). You may request deletion of information that we are not required to keep.
9. Your Rights Under the Privacy Act 2020
You have the right to:
- Access the personal information we hold about you (IPP 6)
- Request correction of that information if it is wrong (IPP 7)
- Ask us how we collect, use, and store your information
- Complain to the Office of the Privacy Commissioner if you believe we have breached your privacy
To exercise these rights, contact us using the details below. If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner at privacy.org.nz.
10. Sending Information Overseas
Some of our service providers (such as hosting and payment processing) may store or process information outside New Zealand. Where we disclose personal information to an overseas provider, we take reasonable steps to ensure it is subject to protections comparable to those under the Privacy Act 2020 (IPP 12).
11. Cookies
We use cookies and similar technologies to operate and improve the Service. You can control cookies through your browser settings, though some features may not function properly without them.
Analytics cookies are optional. We use Google Analytics only after you choose "Accept" in our cookie banner, and we set it up so that it does not receive your name, email address, booking details or payment details. Your choice is kept in a cookie named gk_cookie_consent and applies to goodkeen.co.nz, app.goodkeen.co.nz and book.goodkeen.co.nz. You can change it at any time with the "Cookie preferences" link at the bottom of our website; if you withdraw consent, we delete the Google Analytics cookies.
12. Children
GoodKeen's booking product is intended for use by adults. We do not knowingly collect personal information directly from children. Operators are responsible for how they handle bookings that involve minors.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated policy on this page and revise the "Last updated" date above.
14. Contact Us
If you have questions about this Privacy Policy or our handling of personal information, contact us at:
Email: [email protected]
Address: Auckland, New Zealand