Privacy Policy

Effective Date: 15th January 2024

EpicShot is committed to protecting the privacy of individuals who use our systems and services. This Privacy Policy explains how we collect, use, disclose, and protect personal data, as well as your rights regarding your data. EpicShot complies with the New Zealand Privacy Act 2020 and ensures that all personal data is handled in accordance with its principles.

EpicShot operates as both an agency and an agent under the New Zealand Privacy Act 2020:

• As an agency, EpicShot collects personal data from tourism operators to provide and enhance our services.
• As an agent, EpicShot processes personal data on behalf of tourism operators (the agencies), handling their customers' information according to their instructions.

Tourism operators retain ownership of Customer Data. EpicShot processes such data under a limited licence solely for the purposes of delivering and supporting our services.

1. Personal Data We Collect
   EpicShot collects personal data to provide and improve our services. The types of personal data we may collect include:
   1. Customer Data: Information provided by tourism operators, including:
      • Names, email addresses, and phone numbers of individuals using our system.
      • Media content (photos and videos) captured through our system.
   2. Usage Data: Information automatically collected when our systems are used, such as:
      • Device information (e.g., IP address, browser type, operating system).
      • Activity logs (e.g., time and location of media capture).
   3. Communication Data: Information provided when contacting our support team, such as:
      • Name, email address, and message content.
2. How We Use Personal Data
   We use personal data for the following purposes:
   1. Service Delivery:
      • To capture, process, and deliver media content.
      • To manage user accounts and permissions.
   2. Customer Support:
      • To respond to inquiries and resolve issues.
   3. System Improvement:
      • To analyse usage trends and improve system performance.
      • We may also use anonymised or aggregated data for internal reporting, training, and system development purposes.
   4. Legal Compliance:
      • To comply with applicable laws, including the New Zealand Privacy Act 2020, and respond to lawful requests.
3. Sharing of Personal Data
   We do not sell personal data. We may share personal data with:
   1. Authorized Partners:
      • Tourism operators using our system to provide their services.
   2. Service Providers:
      • Third-party vendors who assist with data storage, processing, or technical support. These providers are bound by confidentiality agreements.
   3. Legal Authorities:
      • When required by law or in response to valid legal requests.
4. Website and Cookie Use
   This section applies to your use of www.epicshot.co.nz only. It does not apply to our EpicShot mobile and tablet apps, which do not use cookies.
   1. Cookies on Our Website
      We use Google Analytics cookies to better understand website traffic and improve user experience. These cookies collect non-personal information such as your IP address, browser type, operating system, visit time, and pages viewed. You can adjust your browser settings to refuse all cookies or to indicate when a cookie is being sent.
      
      We may also use third-party service providers to help us analyse website usage. These providers may only use data on our behalf and are bound by confidentiality obligations.
   2. Communications and Feedback
      If you contact us or submit feedback via the website, we may retain your messages to help respond to your enquiry or improve our services. From time to time, we may invite you to share input via surveys or questionnaires. Participation is always voluntary and typically anonymous.
      
      Unless you tell us otherwise, suggestions or feedback you submit may be used internally for development and marketing purposes.
5. Data Security
   EpicShot employs industry-standard security measures to protect personal data, including:
   • Encryption of data in transit and at rest.
   • Access controls to restrict data access to authorised personnel only.
   • Regular security assessments and updates.
   EpicShot stores personal data within secure data centres located in Australia and New Zealand.
   
   While we implement robust security measures, we cannot guarantee against all forms of data loss or corruption.
6. Data Retention
   We retain personal data only as long as necessary for the purposes outlined in this policy or as required by law. Media content may be deleted after a defined retention period, depending on the agreement with the tourism operator.
7. Incident Response
   In the event of a data breach or incident:
   1. Notification:
      • We will notify affected individuals and regulatory authorities, as required by the New Zealand Privacy Act 2020.
   2. Investigation:
      • We will investigate the incident, identify the root cause, and implement measures to prevent recurrence.
   3. Support:
      • We will provide affected individuals with guidance on protecting their information.
8. Your Rights
   You have the following rights regarding your personal data:
   1. Access:
      • Request a copy of your personal data.
   2. Correction:
      • Request correction of inaccurate or incomplete data.
   3. Deletion:
      • Request deletion of your personal data, subject to legal or contractual obligations. To exercise your rights, contact our Privacy Officer using one of the methods below.
9. Contacting the Privacy Officer
   If you have questions, concerns, or requests regarding your personal data, please contact our Privacy Officer:
   By Email: sales@epicshot.co.nz
   By Mail: Privacy Officer, EpicShot Ltd., 209 Glenda Drive, Queenstown, 9304
10. Updates to This Policy
    We may update this Privacy Policy periodically. Significant changes will be communicated via our website or directly to affected individuals.
    Last Updated: 15 January 2024