1. Your Rights Under the Privacy Act 2020
Under the Information Privacy Principles (IPPs) of the Privacy Act 2020, you have the right to:
- Access (IPP 6): Request a copy of the personal information we hold about you
- Correction (IPP 7): Request correction of inaccurate personal information
- Deletion: Request deletion of your personal information, subject to our legal retention obligations
To exercise these rights, contact support@museescorts.co.nz. We will respond within 20 working days as required by the Privacy Act 2020.
2. What We Retain and For How Long
2.1 Active Accounts
While your account is active, we retain:
- Profile information (name, description, photos, contact details, location, service information)
- Account credentials (encrypted)
- Verification records (age verification, photo verification)
- Transaction records (advertising fees, payments)
- Communication logs (support tickets, reports)
- Platform usage data (login history, profile views — aggregated and anonymised)
2.2 After Account Deletion
When you delete your account or request deletion:
Immediately deleted: Profile content (photos, description, service details), public listing, search visibility
Deleted within 30 days: All remaining personal data including account credentials, verification records, login history, and transaction records
Exception: Records subject to an active legal investigation, law enforcement request, or safety report (including trafficking or exploitation reports as described in our Anti-Trafficking Policy) at the time of deletion may be retained for the duration of that investigation only
2.3 Financial Records
Transaction records are deleted within 30 days of account closure. If we are required by the Tax Administration Act 1994 to retain specific financial records, we will retain only the minimum necessary records and will inform you of any such retention at the time of your deletion request.
3. How to Request Account Deletion
You can request deletion of your account and personal data by:
- Logging into your account and using the "Delete Account" function in Settings
- Emailing support@museescorts.co.nz with the subject line "Account Deletion Request"
We confirm receipt and process deletion as soon as reasonably practicable.
You will receive confirmation when your public-facing data has been removed. We will inform you of any data that must be retained for legal purposes and the applicable retention period.
4. Data Breach Notification
In the event of a data breach that is likely to cause serious harm:
- We will notify the Office of the Privacy Commissioner as soon as practicable
- We will notify affected individuals directly, detailing the nature of the breach, what data was affected, and recommended actions
- Given the sensitive nature of our platform, we treat any breach involving provider identity or contact information as meeting the serious harm threshold
We maintain a Data Breach Response Plan and conduct regular security reviews to minimise risk.
5. Third-Party Data Sharing
We do not sell personal information to any third party. We share data only in the following limited circumstances:
- Payment processors: Transaction data necessary to process advertising fee payments
- Law enforcement: In response to valid legal requests, court orders, or to prevent imminent harm
- Service providers: Hosting and infrastructure providers who process data on our behalf under strict data processing agreements
All third-party processors are required to comply with the Privacy Act 2020 and maintain equivalent data protection standards.
6. Contact
Privacy Enquiries
Email: support@museescorts.co.nz
If you are unsatisfied with our response to a privacy request, you may lodge a complaint with the Office of the Privacy Commissioner at privacy.org.nz.