Home/Legal/Privacy Policy
Legal
Privacy Policy
What personal information Shotovergrand collects through shotovergrand.com, why we collect it, how long we keep it, who else may process it, and the rights you have over it.
1. Who is responsible for your information
The controller of personal information collected through this website is:
- Brand
- Shotovergrand
- Legal name
- Shotovergrand
- Country of registration
- New Zealand
- Registered address
- 13 Murrell Avenue, Lake, Manapouri 9679, New Zealand
- [email protected]
- Phone
- +64 3 315 7449
- Website
- shotovergrand.com
Our service is the organisation of casino-themed offline event entertainment in New Zealand. This policy covers the website and the enquiry and booking correspondence that follows from it.
2. What information we collect
2.1 Information you give us through the enquiry form
The enquiry form on our contact page collects:
- your name;
- your phone number;
- the event type you select;
- the event date you select;
- any optional notes you choose to add, such as a venue, a town or an approximate guest count;
- your three confirmations: that the event is for adult guests aged 20 or over, that you accept this Privacy Policy, and that you understand the service does not include real-money gambling, betting or cash prizes.
Please do not send us sensitive personal information through the form. We do not need it and we do not ask for it.
2.2 Information you give us in correspondence
If you email, call or meet us, we keep the correspondence and the notes we take about your event: venue details, timings, guest numbers, your preferred format and the contact details of people you ask us to deal with, such as a venue manager.
2.3 Technical information
Our hosting provider records standard server log information when a page is requested, including IP address, date and time, the page requested, the referring page and basic browser information. These logs exist to keep the site available and secure.
2.4 Cookies and similar technologies
We store one strictly necessary first-party item in your browser to remember your cookie choice. Analytics and advertising technologies are not loaded and set nothing until you consent to the relevant category. The detail is in our Cookie Policy.
3. Why we use your information, and our legal basis
| Replying to your enquiry and preparing a proposal | Performance of a contract, or steps taken at your request before entering one. |
|---|---|
| Delivering a booked event and invoicing it | Performance of a contract. |
| Confirming the event is for guests aged 20 or over | Our legitimate interests in running an adults-only service responsibly, and compliance with our own policies. |
| Keeping records of proposals, bookings and invoices | Legal obligation (tax and business records) and legitimate interests in managing our business. |
| Keeping the website available and secure | Legitimate interests in operating the site safely. |
| Analytics about how the site is used | Your consent, given through the cookie banner. Withdrawable at any time. |
| Advertising measurement, remarketing and ads personalisation | Your consent, given through the cookie banner. Withdrawable at any time. |
Where New Zealand law applies, we handle personal information in accordance with the Privacy Act 2020 and the information privacy principles. Where you contact us from the European Economic Economic Area or the United Kingdom, we treat the GDPR bases set out above as applying to that correspondence.
4. We do not sell your information
We do not sell, rent or trade personal information. We do not use enquiry form data to build advertising audiences, and we do not upload it to any advertising platform.
5. Who else processes your information
We use a small number of service providers who process personal information on our behalf, under contract and on our instructions:
- Website hosting and email — to serve shotovergrand.com and to carry enquiry notifications and our replies.
- Analytics — only if you consent to analytics cookies. Where Google Analytics is used, Google acts as our processor for that measurement.
- Advertising — only if you consent to marketing cookies. Where Google Ads conversion tracking, remarketing or ads personalisation is used, data may be shared with Google and processed by it.
- Accounting and payment processing — for invoicing a booked event.
- Event delivery partners — your venue, and occasionally a freight or staffing partner, where delivering your event requires it. We share only what is necessary, such as an access time or a contact name.
We may also disclose information where we are required to by law, or where it is necessary to establish, exercise or defend a legal claim.
6. Google services, ads personalisation and data sharing
If Google services are used on this website, and only after you have given the relevant consent, some data may be shared with Google and used for measurement, remarketing and ads personalisation. That can include online identifiers such as a cookie identifier, your IP address, the pages you viewed on this site and whether you submitted the enquiry form.
Before you consent, Google Consent Mode v2 is initialised with ad_storage, analytics_storage, ad_user_data and ad_personalization all set to denied, and no Google advertising or analytics cookie is set. Your choice updates those states and nothing else.
You can read how Google uses data from sites and apps that use its services here:
- How Google uses information from sites or apps that use our services
- Google Business Data Responsibility — privacy information
You can change or withdraw your consent at any time using , which is also linked in the footer of every page.
7. International transfers
We are based in New Zealand and store enquiry correspondence here. Some of our providers, including Google, operate internationally, so your information may be processed outside New Zealand. Where that happens we rely on the provider’s contractual safeguards, including the European Commission’s standard contractual clauses where the transfer involves personal data from the EEA or the UK.
8. How long we keep it
| Enquiries that do not become bookings | 24 months from your last contact with us, then deleted. |
|---|---|
| Proposals and event files for booked events | 7 years after the event, to meet tax and business record requirements. |
| Invoices and accounting records | 7 years, as required by New Zealand tax law. |
| Server logs | Typically up to 12 months, as set by our hosting provider. |
| Your cookie choice | Up to 12 months, or until you clear it or change your settings. |
9. How we protect it
Access to enquiry correspondence is limited to the people who need it to prepare or deliver your event. Our website is served over HTTPS. We do not take payment details through this website and we do not store card data. Our site loads no third-party tracking scripts of its own, and no advertising or analytics technology at all until you consent.
10. Your rights
Subject to the law that applies to you, you may:
- ask for a copy of the personal information we hold about you;
- ask us to correct information that is wrong or out of date;
- ask us to delete information we no longer need;
- ask us to restrict how we use it, or object to use based on our legitimate interests;
- withdraw consent for analytics or advertising cookies at any time, without affecting anything done before you withdrew it;
- ask for your information in a portable format, where that right applies;
- complain to a supervisory authority.
To exercise any of these, email [email protected]. We acknowledge requests within five working days and aim to resolve them within 20 working days. We may need to confirm your identity first, so that we do not disclose someone else’s information to you.
If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner in New Zealand, or to the data protection authority where you live if you are in the EEA or the UK.
11. Children
Our events are for adults aged 20 and over and this website is not directed at children. We do not knowingly collect personal information about anyone under 20. If you believe a child has sent us information, email us and we will delete it.
12. Changes to this policy
If we change this policy we will update the date at the top of the page. Where a change materially affects how we use information you have already given us, we will tell you directly where we hold contact details for you.
Questions about your data
Ask us about anything in this policy.
Data requests, corrections and deletions are handled by email at [email protected] and acknowledged within five working days.