Privacy Statement

Who to contact

This statement explains how Turn Lantern handles information supplied through this website and enquiries about the cafe. The supplied owner information appears below. Use our public contact for privacy questions, access and correction requests, or a complaint.

Contact Turn Lantern at [email protected] or +6432218695. Our venue address is Suite 15, Level 1, 158 High Street, Christchurch Central, Christchurch, New Zealand.

Information you provide

The enquiry form asks for your name, email, chosen activity, preferred date and time, and number of guests. These fields are required to send the form and help us understand and respond to the request. Phone number, experience level and message are optional. You can contact us directly if you prefer not to complete the form.

Please provide your own contact details. We need only a group size, not other guests’ names or contact information. Avoid including sensitive information that is unnecessary for your enquiry.

How your enquiry is used

We use these details to answer questions, discuss a visit or event, handle follow-up requests and resolve complaints. The form sends an email to [email protected]. The email includes your submitted fields, the website source and an enquiry reference. It is available to people handling enquiries for the cafe and the hosting and email services needed to operate the website and deliver the message.

This website has no customer accounts, payment processing, marketing subscription. Submitting an enquiry does not subscribe you to marketing.

Technical information and security

When you open the form, an essential session cookie supports form security and prevents accidental duplicate sending. The server stores random security tokens and, briefly after a successful submission, an enquiry reference. The application does not keep a separate database of your form messages.

To limit repeated sending, the application converts the network IP address into a keyed security identifier. It records recent submission-attempt times against that identifier; it does not write the raw IP address into this rate-limit record. Website hosting services may also create access and error logs containing network addresses, request paths and technical details.

Form validation, protected server files and restricted message recipients help protect information. The public site is intended to run over HTTPS. No internet service can guarantee absolute security; please use our contact details to report a suspected issue.

Advertising measurement

With your Marketing permission, we use Google Ads to measure website visits and clicks on Send enquiry. Google receives technical information through its tag, such as page and device information and advertising identifiers. The conversion records a button click, not a confirmed enquiry. We do not pass the enquiry fields to Google through this integration.

You can withdraw permission in Cookie settings. Read the Cookie Policy and Google Privacy Policy for more information.

How long information is kept

Form security tokens expire after two hours. Rate limiting uses a ten-minute window, and old rate-limit files are removed on later submission attempts once they are more than two hours old. Expired session files are cleaned up by the server’s session process; expiry does not mean every file is immediately erased. The browser cookie normally lasts for the browser session, although a browser may restore it.

Enquiry emails and replies remain in the cafe’s mailbox for as long as needed to handle the request, any related complaint and applicable record-keeping obligations. Mailbox deletion is a separate administrative process; the website does not automatically erase emails. Hosting logs and backups follow the relevant hosting service’s retention arrangements. Contact us about a particular record or retention question.

Service providers and overseas handling

Hosting and email services process information to run the site and deliver enquiries. We do not promise that all processing occurs in New Zealand. A provider’s role and location determine whether an overseas arrangement requires safeguards under Information Privacy Principle 12. The owner’s foreign address alone does not establish where your data is processed or that an overseas disclosure has occurred.

We do not sell enquiry information. Any further disclosure must have an appropriate basis, such as your authorisation, handling your request through a relevant service provider, or a legal requirement.

Access, correction and complaints

You may ask for access to personal information we hold about you and ask us to correct it. We may need to verify your identity and clarify the request. If we do not make a requested correction, you can ask for a statement of the correction sought to be attached to the information.

Please contact us first so we can consider a concern. You can also contact the Office of the Privacy Commissioner. The Privacy Act 2020 information privacy principles explain the New Zealand framework, including notice of collection, security, access, correction and overseas disclosure.