Privacy Policy

Vivid Fun Land Limited ("we", "us") collects, uses, stores and shares personal information in line with the New Zealand Privacy Act 2020 and its Information Privacy Principles (IPPs).

What we collect

• Account & contact data: name, email, username, password hash, preferences, support communications.
• Age-gate confirmation: confirmation result and timestamp (we do not ask for unnecessary details).
• Payment-related data (if applicable): transaction references and status; card details are handled by payment providers.
• Device/usage data: IP address, device identifiers, browser type, pages viewed, referral URLs, approximate location, and cookie IDs.

How we collect it

Directly from you (forms, account setup, subscriptions), automatically (cookies, logs, analytics), and from service providers (e.g., fraud/security signals, payment confirmations).

Why we use it

• Provide and operate the site and features (including KoruSpin) and verify eligibility/age-gate.
• Manage accounts, subscriptions, and customer support.
• Security, fraud prevention, and maintaining system integrity.
• Analytics and service improvement (e.g., measuring performance and content engagement).
• Comply with legal obligations and respond to lawful requests.

Our legal authority / notice basis

Under the Privacy Act 2020, we collect only what we need for our functions and activities and provide notice at/around the time of collection. Where consent is appropriate (e.g., certain marketing or optional cookies), we will ask for it and you can withdraw it.

Sharing your information

We may share personal information with: (a) vendors who help us run the service (hosting, analytics, email/support, payment processing); (b) professional advisers; (c) regulators, law enforcement, or courts where required/authorised; (d) a buyer/successor in a business transaction. We do not sell your personal information.

Overseas storage and access

Some providers may process/store data outside New Zealand. We take reasonable steps to ensure overseas recipients protect information in a way comparable to NZ privacy protections (including contractual safeguards).

Retention

We keep personal information only as long as needed for the purposes above, to meet legal/accounting requirements, and to resolve disputes and enforce our terms, then securely delete or de-identify it.

Security

We use reasonable safeguards such as access controls, encryption in transit where available, monitoring, and least-privilege practices. No method of transmission or storage is 100% secure.

Your rights (NZ)

• Request access to, and correction of, your personal information.
• If we refuse a request, we will explain why (as required) and how you can complain.
• Complain to our Privacy Officer and/or the Office of the Privacy Commissioner (privacy.org.nz).

Cookies & analytics

We use cookies and similar technologies for essential functions, preferences, and analytics. You can manage cookies via your browser settings; disabling some cookies may affect site functionality.

Contact (Privacy Officer)

Updates

We may update this policy from time to time by posting the revised version on this page with a new effective date.