Privacy Policy
Last updated: 26 May 2026
Serendipity Blue ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share information about you when you visit our website or otherwise interact with us.
We comply with the New Zealand Privacy Act 2020. Where applicable, we also respect the rights of visitors from the European Economic Area (under the GDPR), the United Kingdom (under the UK GDPR), and California (under the CCPA).
Who We Are
Serendipity Blue is a New Zealand travel company registered as Serendipity Blue Limited, NZBN: 9429053232588. Our contact details are at the end of this policy.
Information We Collect
We collect information in two main ways.
1. Information you provide to us directly. For example, when you complete our contact or enquiry form, send us an email, or otherwise communicate with us. This typically includes:
Your name
Your email address
Your phone number (if provided)
Any other details you choose to share in your message — for example, travel interests, preferred destinations, dates, or party size
2. Information collected automatically. When you visit our website, certain information is collected automatically by our website host (Squarespace) and any analytics tools we use. This may include:
IP address
Browser type and version
Device type and operating system
Pages visited and time spent on each
Referring website
Approximate geographic location (based on IP)
Cookie data (see the Cookies section below)
How We Use Your Information
We use your information to:
Respond to your enquiries and provide the information or services you have requested
Plan, arrange, and deliver travel experiences you have engaged us to organise
Send you information about our services where you have requested or consented to this
Improve our website and understand how visitors engage with it
Comply with legal obligations
Protect against fraudulent or unauthorised activity
We do not sell your personal information to third parties.
Sharing Your Information
We may share your information with:
Service providers who help us run our business, including Squarespace (our website host), Google (for analytics, if enabled), and email service providers. These providers process information on our behalf and are subject to their own privacy and security obligations.
Travel partners and suppliers, where you have engaged us to arrange travel and we need to share relevant details (such as your name and travel dates) to complete your booking.
Legal or regulatory authorities, where we are required to disclose information by law.
Some of these service providers may be based overseas, including in the United States, European Union, or Australia. When we share your information internationally, we take reasonable steps to ensure it is protected to a standard comparable to that required under New Zealand law.
Cookies
Our website uses cookies — small text files placed on your device — to improve your experience. Cookies allow us to:
Remember your preferences
Understand how you use the site
Display content that is relevant to you
You can control or disable cookies through your browser settings. Disabling cookies may affect how parts of the website function.
How Long We Keep Your Information
We retain your information only for as long as we need it to fulfil the purposes set out in this policy, or as required by law. For general enquiries, this typically means we keep your details for up to three years after our last meaningful interaction. For active client engagements, we retain records for as long as required by tax, accounting, and other regulatory obligations.
Your Rights
Under the New Zealand Privacy Act 2020, you have the right to:
Request access to the personal information we hold about you
Request correction of information that is inaccurate or out of date
Withdraw any consent you have given us (where we rely on consent to process your information)
Lodge a complaint with the Office of the Privacy Commissioner (privacy.org.nz)
If you are located in the European Economic Area or the United Kingdom, you have additional rights under the GDPR, including the right to erasure ("right to be forgotten"), the right to restrict or object to processing, and the right to data portability.
If you are a resident of California, you have additional rights under the CCPA, including the right to know what personal information we collect, the right to request deletion, and the right not to be discriminated against for exercising your rights.
To exercise any of these rights, please contact us using the details at the end of this policy.
Security
We take reasonable technical and organisational steps to protect your information from unauthorised access, alteration, disclosure, or destruction. However, no internet transmission or electronic storage system is completely secure, and we cannot guarantee absolute security. By using our website, you acknowledge this inherent risk.
Children
Our website and services are not directed to children under the age of 16, and we do not knowingly collect personal information from them. If you believe we may have inadvertently collected information about a child, please contact us so that we can delete it.
Third-Party Links
Our website may contain links to third-party sites. We are not responsible for the privacy practices or content of those sites. We encourage you to review their privacy policies before providing any personal information.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other reasons. The "Last updated" date at the top of this page will reflect any changes. We encourage you to review this page periodically.
Contact Us
If you have any questions about this Privacy Policy, or wish to exercise any of your rights, please contact:
Serendipity Blue Limited Email: sam@serendipityblue.com Address: 3/41 Manawa Road, Remuera, Auckland 1050, New Zealand Phone: +64 27 388 6009