Privacy Policy

Last updated: 12/06/2026

In this policy, “we”, “us” and “our” means Taupō Moana Group Holdings Limited and its related businesses operating as Lake Taupō Hole in One Challenge, Ball Blaster Taupō, and Chris Jolly Outdoors.

We are committed to protecting your personal information and complying with the Privacy Act 2020.

This policy explains how we collect, use, store and share personal information when you visit our websites, make a booking, submit an enquiry form, enter a promotion, contact us, visit one of our locations, or otherwise interact with us.

For the purposes of the Privacy Act 2020, we are the agency responsible for the personal information we hold.

1) What is personal information?

Personal information means information about an identifiable individual. This may include your name, email address, phone number, booking details, enquiry details, payment-related information, website activity, or any other information that can identify you.

2) Our websites, bookings and forms

Our websites may allow you to:

view our experiences, activities, services and locations;
make or manage bookings;
buy vouchers or gift cards;
submit contact, group booking, venue hire or event enquiry forms;
enter competitions or promotions;
sign up for updates or marketing;
contact us by email, phone, online form or social media.

Online bookings are processed through Rezdy, our booking platform. When you make a booking through Rezdy, Rezdy may collect and process your personal information and payment-related information through its own systems. Rezdy’s own privacy policy and terms may also apply to your use of its booking platform.

Our websites may also collect personal information directly through enquiry forms, contact forms, venue hire forms, group booking forms, competition forms, newsletter sign-ups or similar features.

3) What personal information we collect

We only collect personal information that we reasonably need to operate our businesses, provide our services, manage bookings and enquiries, and communicate with customers.

Depending on how you interact with us, we may collect the following information.

A. Identity and contact details

Full name
Email address
Phone number
Postal address, where needed
Organisation, school, group or business name, where relevant

B. Booking information

For bookings made through Rezdy, we may receive or access information needed to manage your booking, such as:

booking name;
booking reference;
activity, experience or service booked;
date and time;
number of guests or participants;
voucher or gift card details;
notes or special requests;
booking status;
payment status;
cancellation, amendment or refund information.

Payment details for online bookings are processed through Rezdy and/or its payment providers. We do not intentionally collect or store full credit card details through our own websites.

C. Enquiry and form information

When you submit a form through one of our websites, we may collect the information you choose to provide, such as:

contact details;
preferred date or time;
group size;
event type;
venue hire requirements;
food and drink preferences;
activity preferences;
message or enquiry details;
any other information you include in the form.

D. Activity, event and safety information

For some bookings, events or activities, we may collect information needed to safely provide the service. This may include:

participant names;
ages or age ranges, where relevant;
emergency contact details, where relevant;
accessibility or support needs;
health, safety or operational information that you choose to provide or that we reasonably need for the activity.

Please do not send us sensitive personal information unless we ask for it for a clear reason, or unless it is necessary for your booking, safety or participation.

E. Competitions, prizes and promotions

If you enter a competition, claim a prize, participate in a promotion or appear on a leaderboard, we may collect:

name and contact details;
entry details;
prize claim details;
eligibility information;
photographs or media where relevant and appropriate;
promotional consent, where required.

F. Communications

We may collect information from:

emails;
phone calls;
online forms;
social media messages;
reviews;
surveys;
customer service interactions;
in-person conversations or requests.

G. Website and technical information

When you use our websites, we may collect:

IP address;
device and browser information;
pages viewed;
links clicked;
referring websites;
approximate location derived from IP address;
cookie and similar tracking information;
analytics and website performance information.

4) How we collect personal information

We may collect personal information:

Directly from you

For example, when you:

make a booking;
submit a contact, group booking, venue hire or event enquiry form;
buy a voucher or gift card;
enter a promotion or competition;
subscribe to updates;
contact us by phone, email, website form or social media;
visit us in person;
take part in an activity, event or experience.

Through Rezdy

When you make a booking online, your booking is processed through Rezdy. Rezdy may collect information from you directly through its booking platform and may provide us with the information we need to manage your booking, provide the service and contact you about the booking.

From someone acting on your behalf

We may receive information about you from another person, such as:

a group organiser;
an employer or event organiser;
a school, club or sports team organiser;
a family member or friend;
a travel agent or booking agent;
a gift voucher purchaser.

Automatically

We may collect website and technical information automatically when you use our websites, including through cookies, analytics tools and similar technologies.

From third parties

We may receive information from third parties where permitted by law, such as booking platforms, payment providers, activity partners, professional advisers, public agencies or service providers.

Where we collect personal information about you from someone else, we will take reasonable steps to make sure you are aware, unless an exception under the Privacy Act applies.

5) Why we collect and use personal information

We may collect and use personal information to:

A. Provide bookings, activities and services

process and manage bookings;
provide tourism activities, outdoor experiences, venue hire, events and related services;
manage vouchers, gift cards, cancellations, refunds and booking changes;
contact you about your booking, enquiry, event or activity;
provide customer support.

B. Manage enquiries and relationships

respond to contact forms and general enquiries;
respond to group booking and venue hire enquiries;
prepare quotes, options or recommendations;
arrange event details;
keep accurate customer and booking records.

C. Operate and improve our businesses

manage day-to-day operations;
improve our websites, booking processes, services and customer experience;
monitor website performance;
troubleshoot issues;
keep our systems, venues, staff and customers safe and secure;
prevent fraud, misuse or unauthorised activity.

D. Run competitions, promotions and marketing

run competitions, prize draws, promotions and campaigns;
contact winners;
manage prize claims;
publish or share promotional content where permitted;
send marketing communications where permitted;
manage marketing preferences and opt-outs.

E. Meet legal and business obligations

meet tax, accounting, reporting and record-keeping obligations;
meet health and safety obligations;
manage insurance, incident or risk matters;
respond to lawful requests from regulators, government agencies or law enforcement;
protect our rights, property and legitimate business interests.

We do not sell personal information.

6) When providing information is required

Some personal information is required so we can provide services to you.

If you do not provide information we reasonably need, we may not be able to:

complete or manage your booking;
respond to your enquiry;
provide an activity, event, voucher, prize or service;
contact you about changes to your booking or experience;
process a payment, refund or voucher;
manage a group booking or venue hire enquiry;
meet health, safety, legal or operational obligations.

Where practical, we will let you know what information is required at the time we collect it.

7) Who we share personal information with

We may share personal information with trusted third parties where reasonably necessary to run our businesses and provide services.

This may include:

Rezdy, our online booking platform;
payment providers used through Rezdy or other booking systems;
website, hosting and form providers;
email, communications and customer support platforms;
marketing and analytics providers;
IT, cloud hosting, security and backup providers;
activity, tourism, transport or event partners, where relevant to your booking;
professional advisers, such as accountants, auditors, insurers and lawyers;
government agencies, regulators or law enforcement where required or permitted by law;
related entities within our group, where needed to operate our businesses and provide services.

We only share the information needed for the relevant purpose, and we expect our service providers to handle personal information securely and only for authorised purposes.

8) Overseas storage and disclosure

Some of our service providers may store or process personal information outside New Zealand. This may include providers of booking systems, payment services, cloud hosting, website forms, email systems, analytics tools, marketing platforms, support tools and security systems.

Where personal information is disclosed or processed overseas, we take reasonable steps to ensure it is protected in a way that is consistent with the Privacy Act 2020. This may include using providers with appropriate privacy and security standards, contractual protections, or another permitted basis under the Privacy Act.

You can contact us if you would like more information about overseas storage or processing.

9) How we protect personal information

We take reasonable steps to protect personal information from loss, unauthorised access, misuse, alteration or disclosure.

These steps may include:

secure systems and access controls;
password protection and authentication;
limiting access to staff and service providers who need it;
using secure booking, payment and website providers;
monitoring and security updates;
backups and business continuity processes;
staff guidance on handling personal information.

No system is completely secure. If you believe your interaction with us is no longer secure, or that your personal information may have been affected by a security issue, please contact us as soon as possible.

10) Cookies, analytics and similar technologies

Our websites may use cookies and similar technologies to make the websites work, keep them secure, understand how people use them, improve performance, and support marketing or advertising activity.

Cookies and similar technologies may be used for:

essential website functionality;
remembering preferences;
website analytics and performance;
security and fraud prevention;
measuring marketing campaigns;
improving the customer experience.

You can control or disable cookies through your browser settings. Disabling cookies may affect how some parts of our websites work.

Some analytics or marketing tools may process information outside New Zealand.

11) Marketing communications

We may send you marketing communications about our businesses, experiences, events, promotions, prizes or offers where permitted by law.

You can opt out of marketing communications at any time by using the unsubscribe link in an email, where available, or by contacting us.

Even if you opt out of marketing, we may still send you important service or transactional messages about a booking, enquiry, voucher, payment, event, safety matter or operational update.

12) Photos, videos and promotional content

Our venues and activities may involve photography, video or other media. In some cases, you may appear in general venue or event footage, social media content, promotional material, or leaderboard/prize-related content.

Where we intend to use identifiable images, video, names or testimonials in a more prominent way, we will seek consent where appropriate.

If you have concerns about being photographed or filmed, please let our team know.

13) How long we keep personal information

We keep personal information only for as long as it is reasonably needed for the purposes described in this policy, unless we are required or permitted by law to keep it for longer.

Typical retention reasons include:

booking and customer service records;
voucher, prize and promotion records;
accounting, tax and audit requirements;
health and safety, incident and insurance records;
dispute resolution;
legal compliance;
security and fraud prevention;
business reporting and service improvement.

When personal information is no longer required, we take reasonable steps to delete it or de-identify it, including within backups where practicable.

14) Accessing and correcting your information

You have the right to request access to personal information we hold about you and to ask us to correct it if it is wrong.

To request access or correction, please contact us using the details below and include:

your full name;
your contact details;
the business you interacted with, if known;
what information you want to access or correct;
enough detail for us to identify the relevant records.

We may ask for reasonable proof of identity before providing information, to protect your privacy.

We will respond as soon as reasonably practicable and within the timeframes required by the Privacy Act 2020.

If we refuse a request in whole or in part, we will explain why, to the extent required by law, and advise you of your right to complain to the Office of the Privacy Commissioner.

15) Privacy breaches

If we become aware of a privacy breach, we will take reasonable steps to:

contain and assess the breach;
reduce harm where possible;
investigate what happened;
improve controls to help prevent it happening again.

If a privacy breach is likely to cause serious harm, we will notify affected individuals and the Office of the Privacy Commissioner where required by the Privacy Act 2020.

16) Complaints

If you have concerns about how we handle your personal information, please contact us first so we can try to resolve the issue.

We will acknowledge your complaint and work with you in good faith to resolve it.

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner in New Zealand.

17) Contact details

Privacy Officer
Taupō Moana Group Holdings Limited
61 Lake Terrace, Taupō.
New Zealand

Email: manager@holein1.co.nz
Phone: 0272251865

You may also contact the relevant business directly through its website or published contact details.

18) Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our businesses, websites, systems, service providers or legal requirements.

The latest version will be published on our websites with an updated “Last updated” date.