Privacy Policy

WānaTravel Ltd (“WānaTravel”, “we”, “us”) is a travel agency registered in New Zealand. We operate the WānaTravel itinerary platform (the “Service”), accessible via the web at app.wanatravel.co.nz and via our iOS and Android mobile applications.

This policy explains what personal information we collect, how we use it, who we share it with, and the rights you have under the New Zealand Privacy Act 2020.

We collect personal information in the following categories:

• Account information: your name, email address, and authentication credentials. Authentication is provided by Clerk (clerk.com); we do not store your password.
• Travel booking information: passenger names, dates of birth, passport numbers and expiry dates, frequent-flyer numbers, dietary requirements, special service requests, and itinerary details (flights, hotels, transfers, tours, payments).
• Contact information: phone numbers, postal addresses, and email addresses for travellers and account holders.
• Communications: messages you exchange with us through the in-app chat, by email, or by phone.
• Device and usage information: when you use the mobile app we collect a push-notification device token (to deliver trip alerts), device model, operating-system version, and app version. We do not use third-party analytics or advertising trackers.
• Biometric authentication: if you enable Face ID, Touch ID, or fingerprint unlock, the biometric data never leaves your device. We only receive a yes/no signal that authentication succeeded.

• To prepare, confirm, and deliver the travel arrangements you have asked us to book on your behalf.
• To communicate with you about your trips, including schedule changes, ticketing, and document delivery.
• To send you push notifications about your trips (flight status, ticket issuance, urgent updates). You can disable these at any time in your device settings.
• To maintain records required by aviation, immigration, and tax-reporting law.
• To improve the Service — for example, by diagnosing bugs reported through the app.

We share your personal information only with parties who need it to deliver the travel arrangements you have booked, or to operate the Service:

• Travel suppliers: airlines, hotels, ground operators, cruise lines, and insurance providers, when this is necessary to fulfil your booking.
• Global Distribution Systems (GDS) and consolidators we use to issue tickets on your behalf.
• Service providers who help us operate the platform: Clerk Inc. (authentication), Neon Database (database hosting), Vercel Inc. (web hosting), Apple Push Notification Service and Firebase Cloud Messaging (push delivery), and AeroDataBox (flight status data).
• Government agencies when required by law, court order, or to protect our legal rights.

We do not sell your personal information, and we do not share it with advertising networks.

Your information is stored in databases hosted with Neon (operating on Amazon Web Services infrastructure) and on Vercel-managed servers. Both providers run servers in multiple regions; data may be processed in countries outside New Zealand, including the United States and Europe. Where information is transferred overseas we require comparable privacy protections by contract.

We retain trip records for a minimum of seven years after the trip end date, to meet aviation, financial-reporting, and tax obligations. We may retain limited information for longer where required by law or to resolve disputes. You can ask us to delete information that we are not legally required to retain.

Under the New Zealand Privacy Act 2020, you have the right to:

• Ask us what personal information we hold about you.
• Request that we correct information that is wrong.
• Request a copy of your information in a portable format.
• Ask us to delete information we no longer need to retain.
• Withdraw consent to push notifications at any time.
• Complain to the Office of the Privacy Commissioner at privacy.org.nz.

To make a request, email us at privacy@wanatravel.co.nz. We will respond within 20 working days.

The Service is intended for travel agents and adult clients. We do not knowingly collect personal information directly from children under 13. Where a booking includes minors as passengers, the booking adult is responsible for providing that information on their behalf.

The web version of the Service uses cookies set by Clerk to keep you signed in. We do not use advertising or analytics cookies. Disabling cookies will prevent you from signing in.

We use industry-standard security measures including encrypted connections (HTTPS), encrypted database storage, and access controls. No internet-connected system is perfectly secure; if we become aware of a privacy breach affecting you we will notify you in accordance with the Privacy Act.

We may update this policy from time to time. Material changes will be notified through the Service. The “Last updated” date at the top of this page shows when the current version took effect.

Privacy queries: privacy@wanatravel.co.nz
Postal: WānaTravel Ltd, [postal address], New Zealand.