Data Retention & Deletion Policy | Muse Escorts Platform

1. Your Rights Under the Privacy Act 2020

Under the Information Privacy Principles (IPPs) of the Privacy Act 2020, you have the right to:

Access (IPP 6): Request a copy of the personal information we hold about you
Correction (IPP 7): Request correction of inaccurate personal information
Deletion: Request deletion of your personal information, subject to our legal retention obligations

To exercise these rights, contact privacy@museescorts.co.nz. We respond to all requests within 20 business days as required by the Privacy Act.

2. What We Retain and For How Long

2.1 Active Accounts

While your account is active, we retain:

Profile information (name, description, photos, contact details, location, service information)
Account credentials (encrypted)
Verification records (age verification, photo verification)
Transaction records (advertising fees, payments)
Communication logs (support tickets, reports)
Platform usage data (login history, profile views — aggregated and anonymised)

2.2 After Account Deletion

When you delete your account or request deletion:

Immediately deleted: Profile content (photos, description, service details), public listing, search visibility

Retained for 90 days: Account credentials and login history (to prevent fraudulent re-registration)

Retained for 2 years: Transaction and payment records (for tax and accounting obligations under the Tax Administration Act 1994)

Retained for 7 years: Age verification and identity verification records (for legal compliance and law enforcement cooperation)

Retained indefinitely: Records related to safety reports, trafficking investigations, or law enforcement requests

2.3 Financial Records

Under the Tax Administration Act 1994, we are required to retain financial records (invoices, payment records, GST records) for a minimum of 7 years. These records cannot be deleted on request during this period.

3. How to Request Account Deletion

You can request deletion of your account and personal data by:

Logging into your account and using the "Delete Account" function in Settings
Emailing privacy@museescorts.co.nz with the subject line "Account Deletion Request"

We will confirm receipt within 48 hours and process deletion within 10 business days.

You will receive confirmation when your public-facing data has been removed. We will inform you of any data that must be retained for legal purposes and the applicable retention period.

4. Data Breach Notification

In the event of a data breach that is likely to cause serious harm:

We will notify the Office of the Privacy Commissioner as soon as practicable
We will notify affected individuals directly, detailing the nature of the breach, what data was affected, and recommended actions
Given the sensitive nature of our platform, we treat any breach involving provider identity or contact information as meeting the serious harm threshold

We maintain a Data Breach Response Plan and conduct regular security reviews to minimise risk.

5. Third-Party Data Sharing

We do not sell personal information to any third party. We share data only in the following limited circumstances:

Payment processors: Transaction data necessary to process advertising fee payments
Law enforcement: In response to valid legal requests, court orders, or to prevent imminent harm
Service providers: Hosting and infrastructure providers who process data on our behalf under strict data processing agreements

All third-party processors are required to comply with the Privacy Act 2020 and maintain equivalent data protection standards.

6. Contact

Privacy Officer

Email: privacy@museescorts.co.nz

General Support

Email: support@museescorts.co.nz

If you are unsatisfied with our response to a privacy request, you may lodge a complaint with the Office of the Privacy Commissioner at privacy.org.nz.