Privacy Policy

1. Scope

This Privacy Policy applies to personal information collected by Worldway Travel Limited ("Worldway Travel") through worldway.co.nz, its booking and account system, and its customer messaging channels on Facebook Messenger, Instagram and WhatsApp.

Worldway Travel handles personal information in accordance with the New Zealand Privacy Act 2020.

2. Information collected

• Contact details: name, email address, phone number and any other details provided in an enquiry, newsletter sign-up or booking.
• Account details: the email address used to sign in, and the account identifier provided by Google or Apple when those sign-in options are used.
• Booking information: selected trips and departure dates, traveller names, room preferences, departure city, notes, passport details required for travel arrangements, and payment records.
• Messaging information: when a customer contacts Worldway Travel through Facebook Messenger, Instagram or WhatsApp, the platform provides the customer's platform-specific ID, display name, profile picture (Messenger and Instagram), WhatsApp phone number, message content and any attachments sent.
• Advertising referral information: when a conversation starts from a Worldway Travel advertisement on Facebook or Instagram, Meta provides the advertisement identifier and headline so that the enquiry can be matched to the relevant trip.
• Technical information: device type, browser type and pages visited on the website, used for security and service improvement.

3. Use of information

Personal information is not sold or rented, and messaging information is not used to build advertising profiles.

• Responding to enquiries and preparing travel quotations.
• Assigning each enquiry or booking to a travel consultant and keeping a record of the conversation.
• Processing bookings, payments, travel documents and entry requirements.
• Sending service messages about bookings, such as confirmations, itinerary changes and departure information.
• Sending the newsletter to people who have subscribed. Every newsletter includes an unsubscribe link.
• Meeting legal, tax and consumer protection obligations, and preventing fraud and misuse.

4. Service providers

Personal information is shared only with the following service providers, and only to the extent necessary for the stated purpose:

• Meta Platforms, Inc. (Facebook Messenger, Instagram, WhatsApp Business Platform): delivery of messages.
• Amazon Web Services: hosting of the website, booking system and message records.
• Cloudflare: website delivery and protection against malicious traffic.
• Google and Apple: account sign-in, where the customer chooses these options.
• Microsoft and Zoho: delivery of email.
• Payment processors: processing of payments and refunds.
• Tour operators, airlines, hotels and transport providers in New Zealand and China: fulfilment of bookings made by the customer. Booking details sent to these providers may be stored outside New Zealand.

5. Storage and security

Personal information is stored on secure servers hosted by Amazon Web Services. Access is restricted to authorised staff.

Messaging records are retained for up to three years after the last contact unless they form part of a booking record. Booking and payment records are retained for the period required by New Zealand tax and consumer protection law.

6. Data deletion

Any person may request deletion of the personal information Worldway Travel holds about them, including records of conversations on Facebook Messenger, Instagram and WhatsApp.

• Email [email protected] with the subject "Data Deletion Request".
• Include the channel used (Facebook Messenger, Instagram, WhatsApp or website) and the name, email address or phone number used on that channel.
• Worldway Travel confirms receipt within 5 working days, completes the deletion within 30 days and sends written confirmation.
• Records that must be retained by law, such as completed booking and payment records, are kept only for the required period and are not used for any other purpose.

7. Access and correction

Under the Privacy Act 2020, any person may request access to, or correction of, the personal information held about them by contacting [email protected]. Complaints that are not resolved may be referred to the Office of the Privacy Commissioner (privacy.org.nz).

8. Cookies

The website uses a small number of cookies that are necessary for signing in and keeping a booking session. No advertising cookies are set by the website itself.

9. Children

Bookings for travellers under 18 years of age must be made by a parent or guardian.

10. Changes to this policy

Updates to this policy are published on this page with a revised "Last updated" date.

11. Contact

• Entity: Worldway Travel Limited (company number 866186)
• Address: 14C/155 Queen Street, Auckland 1010, New Zealand
• Phone: 0800 116 688
• Email: [email protected]