Privacy.

Farflung is a trading name of XOR Limited, a New Zealand company. This page says what information reaches us when you use farflung.co.nz, what we do with it, and what you can ask of us under the Privacy Act 2020.

What this site collects on its own

Nothing. The pages are static files, there are no accounts, and no form on this site sends anything to a server we run. The only thing stored on your device is an analytics cookie, and only outside Europe: see Analytics below.

When you book a call

The booking page shows a Google Calendar appointment form. Your name, email address and answers go to Google and into our Google Workspace calendar, and Google sends you the invitation. Google processes that information under its own privacy policy. We keep it for as long as we are working with you, and for the records the law requires us to hold afterwards.

When you email us

We hold your message and your address in our mailbox, which is also Google Workspace, and we use them to reply and to plan and book travel if you ask us to. Booking travel means passing the details a supplier needs (names as on passports, dates of birth, contact and payment details, dietary and accessibility needs) to airlines, hotels and operators, many of them outside New Zealand. We pass on what each booking needs and no more.

Analytics

We count visits and see which pages are read, with two tools. Neither is used to identify you personally, and neither runs anywhere but farflung.co.nz. One switch turns both off in your browser: open any page with ?no-analytics=1 added to the address; ?no-analytics=0 turns them back on.

PostHog, hosted in the European Union, is configured cookieless: it stores nothing whatsoever on your device. Visits are grouped with a one-way code PostHog’s servers compute from your IP address and browser with a secret that changes daily and is then destroyed; the code cannot be reversed and your IP address is not stored alongside the events. The requests travel through farflung.co.nz rather than a third-party domain. See PostHog’s privacy policy.

Google Analytics behaves differently depending on where you are, because the law does. In the European Economic Area, the United Kingdom and Switzerland we set Google’s consent signals to denied before the tag loads, so it stores nothing on your device and no cookie is written; Google receives a request with no identifier attached and estimates the rest. Everywhere else, including New Zealand and Australia, it sets its usual _ga cookie to tell a returning browser from a new one. We ask Google for no advertising features at all: no ad personalisation, no ad measurement, no audience building. See Google’s privacy policy and how Google uses data from sites that use its services.

Hosting

The site is served from a server in Germany through Cloudflare, which sits in front of it to deliver pages quickly and to absorb attacks. Both keep ordinary server logs (IP address, time, page requested) for a short period for security and reliability.

Overseas disclosure

Google (United States and Ireland), PostHog (European Union) and Cloudflare (United States) hold information outside New Zealand under their own published terms, which we consider to provide comparable safeguards. Travel suppliers are wherever your trip goes.

Your rights

You may ask to see the personal information we hold about you and ask us to correct it. Write to hello@farflung.co.nz. If you are not satisfied with our answer you can complain to the Office of the Privacy Commissioner, privacy.org.nz.

Operator

XOR Limited, Suite 15496, Level 1, 6 Johnsonville Road, Johnsonville, Wellington 6037, New Zealand. NZBN 9429053218131.