Who is responsible
Table Wave is the business collecting information through this website and handling event enquiries. Our contact address is Office 13, 526 Victoria Street, Hamilton Central, Hamilton 3204, New Zealand. For privacy questions, access or correction requests, contact [email protected] or call +64 7 007 5628.
We handle personal information in accordance with the New Zealand Privacy Act 2020. This statement explains the information used for enquiries, event planning and the website’s privacy choices.
Information you give us
The enquiry form asks for your name, company, email address, phone number, event type, date, location, guest count, estimated budget and message. Name, email, event type, guest count and a message are required so we can understand and respond to the enquiry. The other fields are optional. If you choose not to provide the required details, you can contact us directly, but we may not be able to assess the proposed event without further information.
Further correspondence may include the agreed event scope, contact people, venue details, supplier arrangements, approvals and booking records. Please send only information relevant to planning the event. Do not submit payment card details, identity documents or unnecessary sensitive information through this form.
Why we use it
- To respond to your enquiry and discuss availability, format and practical requirements.
- To prepare proposals, agree a booking and coordinate the services you request.
- To communicate changes, resolve questions and keep appropriate business records.
- To protect the form and website against misuse and maintain their operation.
- To meet applicable legal obligations and address complaints or disputes.
Submitting an enquiry does not subscribe you to marketing. Any future commercial email programme would require an appropriate consent basis, clear sender identification and an effective unsubscribe facility under New Zealand’s electronic messaging rules.
Information about other people
If you give us another person’s contact details, make sure you are entitled to share them and tell them why they are being provided. We prefer practical event requirements over detailed information about individual guests. For example, tell us that an accessible route or additional seating is needed without sending a person’s medical history.
Where we collect personal information indirectly, we will take reasonable steps to provide the notice required by information privacy principle 3A, unless an applicable exception permits otherwise. That notice may explain the source, purpose, intended recipients, who holds the information and the person’s access and correction rights.
Website information and storage
The form uses an essential session cookie to protect submissions and provide the confirmation page. The session stores a security token, submission timing and a short-lived confirmation status; it does not store the text of your enquiry. Your privacy choices are saved in local storage on your device. See the Cookie & Tracking Notice for details and controls.
The hosting service may record ordinary server information, such as IP address, requested page, browser information and request time, for operation and security. No optional analytics, advertising, remarketing, social-media or embedded-map services are currently connected to this site. There is no visitor account or online payment function.
Who may receive information
The people handling your enquiry and event arrangements use the information needed for their work. Hosting and email providers process information to deliver the website, form and correspondence. Where a confirmed event needs other suppliers, relevant details may be shared with those suppliers for the agreed arrangements; we do not need to send them your entire enquiry by default.
We may also disclose information where you authorise it, where the law requires or permits it, or where necessary to address a lawful request or protect rights in accordance with the Privacy Act. We do not sell enquiry information.
Overseas handling
Hosting, email or other service providers may process or store information outside New Zealand, depending on the services used. Before a disclosure to an overseas recipient, we consider the safeguards required by information privacy principle 12, where it applies. This may include comparable protections, contractual safeguards or another lawful basis. A provider acting solely as our agent is treated according to the applicable Privacy Act rules.
If optional Google services are introduced, this statement and the tracking notice will describe the relevant data flows before activation. Your current choice does not by itself activate any third-party tracking service.
Security and retention
We take reasonable steps to protect information from unauthorised access, use, alteration or disclosure. Enquiries are transmitted through the website’s form to the business email service. Access should be limited to the people and providers who need it for the relevant purpose. No internet or email service can be guaranteed completely secure.
We retain personal information only for as long as needed for the enquiry, agreed services, legitimate business records or applicable legal obligations. Information that is no longer needed should be securely deleted or de-identified. The period can differ for an unconfirmed enquiry, a completed booking and records that must be retained by law.
Access, correction and concerns
You can ask whether we hold personal information about you, request access and ask for correction. Contact us using the details above and describe the information involved. We may need to verify your identity in a proportionate way before providing it. We will respond within the timeframes required by the Privacy Act, generally within 20 working days for an access or correction request, subject to lawful extensions or exceptions.
If a requested correction is not made, you may ask for a statement of the correction sought to be attached to the information. If you are concerned about our handling of information, contact us first so we can investigate. You may also contact the Office of the Privacy Commissioner.
Changes to this statement
We may update this statement when our services, practices or legal obligations change. The date above identifies this version. Material changes to the way information is collected or used will be explained through an appropriate notice where required.