NURISTAY
Sign inRequest a demo

Privacy Policy

Last updated: 6 November 2026

This policy explains how [Company name to be confirmed] (“we”, “us”), which operates NURISTAY, collects, uses and protects personal information under the Privacy Act 2020 of New Zealand. It covers this website and the NURISTAY service.

1. Whose information, and our role

There are three groups of people whose information we handle:

  • Visitors to this website and people who contact us.
  • Property owners and their staff who use NURISTAY.
  • Guests of the properties that use NURISTAY. The property decides what guest information to collect and why. We store and process it for the property to run NURISTAY, and we do not use it for our own purposes.

2. What we collect

  • Website and contact forms: your name, email address, property name and your message. Our website host (Cloudflare) also processes technical data, such as IP address, to deliver and protect the site.
  • Owners and staff: name, email, login details (passwords are stored in protected form), PIN, role, and records of sign-ins and actions in NURISTAY.
  • Guest information entered by a property: name, contact details, stay details, booking channel, payments and notes.
  • Online check-in: guests may upload photos of identification and a payment card, and guest signatures, when the property asks them to.
  • Payments: if a property takes card details for a booking, they are handled as described in section 5. We never store card security codes (CVV).
  • Billing: for subscription customers, business and invoice details.

3. Why we use it

  • to provide, secure, support and improve NURISTAY;
  • to reply to enquiries and give demos;
  • to invoice subscribers and manage subscriptions;
  • to send service messages, such as password or PIN notices and important changes;
  • to meet legal obligations.

We do not sell personal information, and we do not use guest information for advertising.

4. Who we share it with

We share information only with service providers who help us run NURISTAY, and only as needed:

  • Microsoft: cloud hosting (Azure, New Zealand North region) and Microsoft 365 email. When a property connects its mailbox, NURISTAY reads booking emails live and does not store them.
  • Stripe: online payments, where a property uses them.
  • Our channel connection provider: to exchange availability, rates and bookings with channels such as Booking.com and Expedia, where a property uses them.
  • Cloudflare: website hosting and DNS.

Some providers may process information outside New Zealand. We use providers that protect personal information to standards comparable to the Privacy Act, or we ensure appropriate safeguards are in place.

We may also disclose information when the law requires it, or to protect safety or rights.

5. Security and how long we keep information

  • Data is encrypted in transit, access is limited by login, role and PIN, and sign-ins and key actions are logged.
  • Guest identification and card photos are encrypted, shown to staff only after a PIN, and deleted 7 days after check-out. They are not included in emails, PDFs or backups.
  • If full card numbers are collected for a booking, they are stored encrypted, shown only after a PIN, and deleted 7 days after check-out.
  • Booking, payment and invoice records are kept while the property uses NURISTAY, and as long as the law requires for business and tax records (generally seven years in New Zealand).
  • After a subscription ends we delete or return the property’s data within a reasonable time on request, except for records we must keep by law.

No system is perfectly secure. If a privacy breach is likely to cause serious harm, we will notify affected people and the Office of the Privacy Commissioner as the law requires.

6. Your rights

You can ask us to confirm whether we hold personal information about you, to give you access to it, and to correct it. If you are a guest of a property, please ask the property first, as it is responsible for your booking information. We can help the property respond.

Contact our privacy officer at support@nuristay.co.nz. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner (privacy.org.nz).

7. Cookies

This website does not use advertising or tracking cookies. The NURISTAY app uses cookies needed to sign in and to remember your device and property.

8. Children

NURISTAY and this website are for businesses and are not directed at children.

9. Changes

We may update this policy and will show the date of the latest update. For significant changes we will let property owners know.

10. Contact

[Company name to be confirmed], NZBN [NZBN to be confirmed], [Postal address to be confirmed]. Email: support@nuristay.co.nz.