Privacy Policy

 

Last updated: 13 August 2026

Who we are

Mohaka Rafting Limited, trading as Mohaka Rafting Adventures (“Mohaka Rafting Adventures”, “we”, “us” or “our”), provides rafting and other outdoor-adventure services in Hawke’s Bay, New Zealand.

This policy applies to our services and websites, including:

Our contact details are:

Mohaka Rafting Adventures
3408 State Highway 5
Napier 4182
New Zealand

Email: [email protected]
Office: +64 6 839 1808
Mobile: +64 27 825 8539

Privacy enquiries should be directed to our office using these details.

We handle personal information in accordance with the New Zealand Privacy Act 2020.

Personal information we collect

Depending on how you interact with us, we may collect:

  • your name, email address, telephone number and postal or billing address;

  • the content of enquiries, emails, telephone calls and other communications;

  • booking information, including the selected activity, date, number and names of participants, booking reference, payment status, vouchers, changes, cancellations and refunds;

  • participant information needed to assess suitability and provide a safe activity, which may include age, medical conditions, medication, dietary requirements, accessibility needs, fitness or swimming information, equipment-sizing information and emergency-contact details;

  • transport, accommodation or itinerary information where we are arranging pickups, transfers, helicopter access or multi-day activities;

  • information about children or young people participating in family or school activities;

  • photographs or video recorded during an activity;

  • payment information processed through our booking and payment providers;

  • technical website information, including IP address, browser and device type, approximate location, referring page, pages viewed, visit time, cookie identifiers and website interactions;

  • information supplied through reviews, social-media messages or other platforms when you communicate with us through them.

We only collect information that is reasonably necessary for our activities, safety responsibilities, customer service or legal obligations.

How we collect information

We may collect personal information:

  • directly from you by email, telephone, in person or through an online booking or enquiry;

  • through our booking provider, currently FareHarbor;

  • from a person who books on your behalf;

  • from a school, group organiser, employer, parent or guardian;

  • from an activity partner helping us deliver part of a trip;

  • automatically when you use our website;

  • when photographs or video are taken during an activity.

When we receive information about you from someone else, we will take reasonable steps to make sure you are told about the collection, its purpose, who will receive and hold the information, whether supplying it is voluntary or required, and your rights to access and correct it. Exceptions may apply where permitted by the Privacy Act.

If you give us information about another person, please make sure you are authorised to do so and that the person has been given this policy.

How we use personal information

We use personal information to:

  • respond to enquiries and prepare quotes;

  • create, manage and confirm bookings;

  • process payments, refunds and gift vouchers;

  • communicate changes, meeting instructions and safety information;

  • assess whether an activity is suitable for a participant;

  • select appropriate equipment and accommodate dietary, medical or accessibility requirements;

  • deliver transport, accommodation and activity arrangements;

  • respond to incidents and emergencies;

  • provide trip photographs;

  • maintain accounting, tax, insurance and operational records;

  • manage complaints, disputes and legal claims;

  • secure and maintain our websites and booking systems;

  • understand website use and improve our services;

  • prevent fraud, misuse and security threats;

  • send marketing communications where you have agreed to receive them or where otherwise permitted by law.

You can unsubscribe from electronic marketing at any time. We will not use health, safety or children’s information for marketing.

If you do not provide information required for a booking or safety assessment, we may be unable to confirm the booking or allow the affected person to participate.

Group bookings, schools and young people

Our services may include children and young people. They have the same privacy rights as adults, and we take additional care with their information.

A parent, guardian, school or group organiser may provide participant information to us. We will use it only for managing the booking, providing the activity, meeting safety requirements and handling emergencies or incidents.

FareHarbor bookings must be made by an adult who is authorised to book for the participants concerned.

We will seek appropriate permission before using an identifiable child or young person’s photograph or video for advertising, social media or other promotional purposes.

Online bookings and payments

Our current online booking service is provided by FareHarbor. FareHarbor may collect booking, participant, contact, payment and technical information and may use payment processors and companies within its corporate group.

FareHarbor facilitates payments and transfers the information needed to manage your booking to us. Its terms and privacy information are available at:

https://fareharbor.com/legal/privacy/

Legacy pages may direct users to mohakaraftingbookings.com. We recommend using the booking links on our current website. Any additional privacy notice shown during a legacy booking also applies to information entered there.

Cookies, analytics and embedded services

We use cookies and similar technologies to operate the website, remember privacy choices, understand website use and provide embedded content.

These may include:

  • Cookie preference: records whether cookies were accepted or refused. On the legacy website this is named cookie_notice_accepted and lasts for 30 days.

  • Google Analytics: collects website-use and device information. Google Analytics cookies such as _ga and _ga_<container-id> may last for up to two years unless configured for a shorter period.

  • YouTube: embedded videos may send IP address, browser, device and interaction information to Google or YouTube and may use cookies or local storage.

  • FareHarbor: its booking pages use cookies and similar technologies needed to operate bookings, remember preferences, process payments, prevent fraud and measure use.

  • Google reCAPTCHA: the legacy enquiry form may send technical and interaction information to Google to identify spam or automated submissions.

  • Website delivery and security providers: our hosting, content-delivery and security providers may process IP addresses, request logs and device information needed to deliver and protect the website.

Non-essential analytics and embedded-media technologies should only load in accordance with the choice shown by our cookie controls. You can also block or delete cookies through your browser, although this may affect some website functions.

Links to Facebook, Instagram, Tripadvisor, Google Maps and other external websites take you to services operated under their own privacy policies. Merely displaying a locally hosted link or logo does not give those services your booking information, but they will receive information when you follow the link.

Who we share information with

We may disclose relevant personal information to:

  • FareHarbor and payment-processing providers;

  • website hosting, content-delivery, security, email and IT-support providers;

  • Google, where Analytics, YouTube, reCAPTCHA or Google-hosted resources are used;

  • transport, accommodation, helicopter, catering and other activity partners involved in delivering your booking;

  • schools, parents, guardians and group organisers where appropriate;

  • emergency services, health professionals or search-and-rescue personnel where necessary to protect health or safety;

  • insurers, auditors, accountants, legal advisers and debt-recovery providers;

  • regulators, courts, law-enforcement bodies or government agencies where required or permitted by law;

  • a purchaser or successor if our business is sold or reorganised.

We do not sell personal information.

We limit disclosures to information reasonably required for the relevant purpose.

Overseas processing

Some providers, including FareHarbor, Google, YouTube, Cloudflare and payment or hosting providers, may process information outside New Zealand, including in Australia, the United States or Europe.

Where the Privacy Act’s overseas-disclosure requirements apply, we will take reasonable steps to ensure the recipient is subject to comparable privacy safeguards or that another permitted basis for disclosure applies.

Photographs and video

We may take photographs or video during an activity to provide participants with a record of their trip and for safety or operational purposes.

We will obtain appropriate permission before using identifiable participant images for advertising, social media or promotional publication. You may tell us before an activity if you do not want to be included in general trip photography.

We take particular care with images of children and school groups. Public website images should also be checked to remove unnecessary location or device metadata before publication.

Storage and security

We use reasonable physical, organisational and technical safeguards to protect personal information against loss, unauthorised access, alteration, misuse or disclosure.

These safeguards may include restricted staff access, password and account controls, encrypted connections, secure service providers, staff procedures and secure disposal. No internet or storage system can be guaranteed to be completely secure.

If a privacy breach has caused or is likely to cause serious harm, we will notify the affected people and the Office of the Privacy Commissioner as required by law.

How long we keep information

We keep personal information only for as long as it is needed for the purpose for which it was collected or to meet legal, tax, insurance and dispute-resolution requirements.

Generally:

  • enquiries that do not become bookings may be kept for up to 24 months after the last communication;

  • booking, payment and tax records are normally kept for at least seven tax years;

  • participant health, dietary and equipment information is deleted or de-identified when it is no longer needed for the activity, unless it forms part of a safety, incident, insurance or legal record;

  • waivers, incident and safety records are kept for the period reasonably required for insurance, regulatory and legal purposes;

  • marketing details are kept until you unsubscribe or the information is no longer useful;

  • cookie and analytics information is kept for the period configured in the relevant service;

  • authorised photographs and video may be retained while they remain relevant to the purpose for which permission was given.

Information may be retained longer where a complaint, legal claim, investigation or statutory requirement applies.

Your rights

You may ask us to:

  • confirm whether we hold personal information about you;

  • provide access to that information;

  • correct information that is inaccurate, incomplete or misleading;

  • attach a statement of correction if we do not make a requested correction;

  • consider deleting information that is no longer needed;

  • withdraw a consent or marketing preference.

Access, correction and deletion may be limited where the law requires or permits us to retain or withhold information. We may ask for information needed to verify your identity before responding.

Contact us at [email protected]

Complaints

Please contact Mohaka Rafting and Adventures first so we have an opportunity to address your concern.

If you are not satisfied, you may complain to the New Zealand Office of the Privacy Commissioner:

https://www.privacy.org.nz/your-rights/making-a-complaint/

Changes to this policy

We may update this policy when our services, booking providers, website technologies or legal obligations change. The latest version and its update date will be published on our website.