Last updated: 9 September 2025

Who we are: Walkington (“Walkington”, “we”, “us”, “our”). We design and deliver walking experiences across Wellington, the Kāpiti Coast, the Wairarapa and across New Zealand.

We respect your privacy and handle personal information in accordance with the New Zealand Privacy Act 2020 and its Information Privacy Principles (IPPs). This Policy explains what we collect, why we collect it, how we use and disclose it, and the choices you have.

1. Scope

This Policy applies to personal information collected when you visit our websites, enquire or book with us (directly or via a marketplace like Viator), subscribe to updates, engage with us on social media, travel with us, or otherwise interact with Walkington. It also covers information we collect from third‑party partners who help deliver your experience (e.g., accommodation, guides, transport providers).

2. The information we collect

We only collect information that is reasonably necessary for our operations. This may include:

• Identity & contact details: name, email, phone number, country, postal address.
• Booking details: dates, itinerary, group size, preferences, add‑ons, payment status, communications related to your booking.
• Health, dietary and accessibility information (if you choose to provide it so we can safely tailor your experience). We only collect what is necessary and treat it as sensitive.
• Emergency contact details for safety purposes.
• Marketing preferences and consents.
• Device and usage data: IP address, pages viewed, links clicked, referring site, and similar analytics (see Cookies below).
• User‑generated content: feedback, reviews, social media messages, photos you share with us.

We generally collect information from you directly. In some cases we receive data from third parties (e.g., booking platforms, gift voucher partners, payment providers, accommodation and activity partners) to manage or fulfil your booking.

3. Why we collect and use your information

We use personal information to:

• Provide and manage services: process enquiries and bookings, take payment, arrange logistics (transfers, guides, accommodation, meals), and deliver safe, high‑quality walking experiences.
• Communicate with you: confirmations, updates, safety notices, support, service messages, and responding to enquiries.
• Personalise your experience: consider preferences, dietary or accessibility needs, and special requests.
• Improve our services and website: troubleshooting, analytics, quality assurance, and training.
• Marketing (with consent or as permitted): send news, offers and updates; run surveys or competitions; feature your feedback or images (only with permission).
• Legal and safety: managing risks, incident reporting, insurance, fraud prevention, and complying with law‑enforcement or regulatory requirements.

4. Our grounds for handling personal information

Under the Privacy Act 2020 we collect and use personal information for lawful purposes connected with our functions and activities and only to the extent necessary for those purposes. We rely on your consent for optional marketing communications and for any sensitive details you choose to provide (e.g., health or accessibility notes). You can withdraw consent at any time.

5. Cookies, analytics and tracking

We use cookies and similar technologies to operate our site and understand performance. This may involve tools such as Google Analytics or booking‑engine pixels that provide aggregated statistics (e.g., pages visited, device type, approximate location). You can adjust your browser settings to refuse cookies or to alert you when cookies are being set. Some features may not function properly without essential cookies. Where required, we will display a consent banner with options to manage non‑essential cookies.

6. Disclosing your information

We may share personal information with trusted third parties where necessary to deliver and support your experience, including:

• Operational partners: guides, transport and transfer providers, accommodation and activity providers, catering partners (to meet dietary needs), and luggage services.
• Booking and payment platforms: e.g., our booking engine, marketplaces (such as Viator), and payment processors (e.g., Stripe) to take payment and manage reservations.
• Technology and support providers: website host, email/SMS tools, customer support platforms, analytics services, and insurers.
• Regulators and emergency services if required by law or to protect life, health or safety.

We require our partners to protect personal information and only use it for agreed purposes. We do not sell personal information.

7. International transfers

Some partners or systems may be located outside New Zealand (for example, cloud hosting or booking and payment providers). Where we transfer personal information internationally, we take reasonable steps to ensure comparable safeguards are in place so your information remains protected (for example, by using reputable providers with robust security and privacy commitments).

8. Retention

We retain personal information only for as long as needed for the purposes outlined above or as required by law (e.g., tax, insurance or incident records), after which we securely delete or de‑identify it.

9. Your choices and rights

You have the right to:

• Access the personal information we hold about you; and
• Request correction of any information that is inaccurate or incomplete.

To make a request, contact us using the details below. If we refuse a request, we will tell you why (unless we are permitted not to) and how you can complain.

You can opt‑out of marketing at any time by using the unsubscribe link in our messages or contacting us.

10. Children

Our services are designed for adults and families. We only collect information about children where necessary for a booking (e.g., ages for safety and suitability) and with consent from a parent or guardian.

11. Security

We take reasonable steps to protect personal information from loss, unauthorised access, use, modification or disclosure. These measures include access controls, encryption in transit where appropriate, staff/contractor confidentiality commitments, and secure deletion protocols. No system is perfectly secure; if we experience a notifiable privacy breach, we will assess and, where required, notify the Office of the Privacy Commissioner and affected individuals.

12. Email and SMS marketing

We comply with New Zealand’s Unsolicited Electronic Messages Act 2007 (anti‑spam). We only send commercial electronic messages with consent, include our contact details, and provide a clear unsubscribe. If you receive a message in error, please let us know.

13. Links and third‑party sites

Our website and materials may contain links to third‑party sites (including booking platforms and partners). Those sites are governed by their own privacy policies; we encourage you to review them.

14. Changes to this Policy

We may update this Policy from time to time. The updated version will apply from the date it is posted on our website. Significant changes will be highlighted.

15. Contact us

Walkington
Wellington, New Zealand
Email: contact@walkington.co.nz (or use our contact form)
If you have concerns about your privacy, you can also contact the Office of the Privacy Commissioner in New Zealand.