Privacy Statement.

Who holds your information

Ludo Hearth is responsible for personal information it receives through event enquiries and its services. Our business address is Office No. 19, First Floor, Harvest Court, 218 George Street, Dunedin 9016, New Zealand. This statement covers ludohearth.com and our handling of event-enquiry information.

For privacy questions or a request to access or correct information, email [email protected] or call +64 3 255 8100.

Your event enquiry

The enquiry form asks for your name, company, email, phone, event type, event date, event location, guest estimate and message. Name, email, event type and message are required to prepare the enquiry. Other fields are optional. You are not legally required to supply these details, but without a way to contact you or enough information about the occasion, we may be unable to respond usefully.

The form prepares a message on your device. It keeps the details in this browser tab’s session storage so you can review them on the next page. Preparing the enquiry does not send it to Ludo Hearth. We receive it only when you send the email from your email service. The review page can reopen a draft for up to 30 minutes, and the tab’s session storage ends with the browser session. Your email service handles the message under its own privacy terms.

Please include only the personal information needed for the enquiry. Where possible, describe access or participation requirements without providing detailed health information or identifying guests unnecessarily.

How we use and share it

Once you send an enquiry, we use the details to respond, discuss availability, prepare a proposal, plan the event and administer any confirmed booking. Relevant records may also be needed for accounts, resolving a complaint or meeting legal obligations.

Access is limited to the people who need the information for those purposes. Where an agreed event requires a venue or supplier to receive particular details, we share only what is needed for that role. We do not sell enquiry information or use an enquiry as automatic permission to send marketing.

Website requests necessarily include technical information such as an IP address, requested page, browser details and request time. The hosting service may retain access and security logs to deliver and protect the site. This site does not use those requests for advertising profiles.

Information about another person

If you provide another organiser’s contact details or information about a guest, make sure you have a proper basis to share it. Where we collect personal information indirectly, we assess whether that collection is appropriate and take reasonable steps to notify the person of the collection, its purpose, intended recipients, who holds it and their access and correction rights, unless a lawful exception applies.

This approach reflects Information Privacy Principle 3A, in force from 1 May 2026.

Security, retention and overseas handling

We take reasonable steps to protect information against loss, unauthorised access, alteration and disclosure. Access is restricted according to the work involved, and event information is shared only where needed. Email and internet transmission cannot be guaranteed completely secure.

We retain enquiry and booking records only for as long as they are needed for their purpose or a lawful requirement, including relevant accounting obligations and resolving disputes. When no longer needed, information is deleted or made non-identifying where appropriate.

Email or hosting infrastructure may process information outside New Zealand. Using a provider as an agent to store or process information is different from disclosing it for that provider’s own purposes. Before a relevant overseas disclosure, we assess the safeguards or another permitted basis required by Information Privacy Principle 12. We do not assume that overseas processing removes our responsibility for information.

Website preferences and marketing

The site currently uses essential browser storage for privacy choices and the enquiry draft. Analytics and advertising services are not active. Their preference categories are off by default. You can accept, reject or change optional choices through Privacy & cookie settings. See the Cookie & Tracking Notice for storage names and duration.

If Google measurement or advertising services are introduced, we will update this statement to identify their actual use and relevant processing. They must respect the selected category. Google describes its data use at How Google uses information from sites or apps that use its services and Google’s business privacy information.

We do not treat an event enquiry as marketing consent. Any future commercial email or text marketing must have an appropriate consent basis, identify the sender and provide a working way to unsubscribe.

Access, correction and complaints

You may ask for access to the personal information we hold about you or request a correction. Contact the team using the details above, explain your request and include enough information to identify the relevant enquiry or booking. We may need to verify your identity before providing information.

We respond within the timeframes required by the Privacy Act 2020 and will explain any lawful extension. If a requested correction is not made, you may ask us to attach a statement of the correction sought where the Act provides for it.

If you are concerned about our handling of information, contact us first so we can investigate. You may also complain to the Office of the Privacy Commissioner.

Privacy incidents and updates

If we reasonably believe a privacy breach has caused, or is likely to cause, serious harm, we will notify the Privacy Commissioner and affected people as soon as practicable, subject to any lawful exception. See the Commissioner’s notifiable breach guidance.

This statement was updated on 9 September 2026. Changes to our actual information handling will be reflected here. The Privacy Act 2020 governs our obligations.