Legal · Cookies

Cookie Policy

1. Contact

2. What cookies and similar technologies are

Cookies are small pieces of data that a website or third-party service may ask a browser to store and return on later requests. Similar technologies can include local or session storage, pixels, tags, device identifiers, cache-based identifiers and server-side identifiers. A session cookie usually expires when the browser session ends. A persistent cookie remains until its stated expiry or until it is deleted. First-party technologies are set in connection with the domain being visited; third-party technologies can be set or read by another service whose content is loaded on the page.

Not every technical request is a cookie. For example, a web server may record an IP address, request time, browser information and requested path in a security or access log without placing a cookie on the device. This policy covers cookies and comparable website technologies, while broader handling of personal information is explained in our Privacy Policy.

3. Our current website approach

The core Selmorienwhiteworks website is designed to work without a user account and without requiring advertising, cross-site behavioural profiling or marketing analytics cookies. The local scripts used for navigation, sliders, responsive components, form preparation and loading the legal company details from adress.json do not need to create an advertising profile. The contact form prepares an email on the visitor’s device rather than sending form data to a third-party form-hosting service.

Hosting, network-security or content-delivery infrastructure used by the eventual hosting provider may still create ordinary technical logs or strictly necessary records for availability, abuse prevention, diagnostics, load management and security. Because hosting infrastructure can be changed independently of the website files, the exact server-side log implementation should be reviewed whenever the site is deployed to a new host.

4. Categories of technology

Strictly necessary technologies support functions that are required to deliver a feature requested by the visitor, protect the service, route traffic, maintain security or remember a privacy choice. Preference technologies remember optional settings that improve convenience. Measurement technologies can be used to understand aggregate website use and performance. Advertising or profiling technologies can be used to select, measure or personalise advertising or to follow activity across services. The current local site code does not intentionally deploy advertising or behavioural-profiling technologies.

Classification depends on actual purpose rather than a label. If a technology that was originally necessary is later used for analytics, marketing or another optional purpose, that additional purpose is treated separately and any consent or notice requirement is assessed before use.

5. Strictly necessary technologies

Where storage or processing is technically necessary for a visitor-requested function, it is limited to that function and is not repurposed to create a behavioural advertising profile. If a consent-management preference is introduced, a small first-party record may be needed to remember the visitor’s choice, prevent the consent interface from reappearing unnecessarily and demonstrate that the choice was respected. Security technologies may also be necessary to identify abusive traffic or protect the website from automated attacks.

6. Embedded map and other third-party content

The contact area contains an embedded Google map. The map is loaded lazily, so the browser generally does not request the external map until the relevant part of the page is approached. When the map loads, the visitor’s browser connects directly to the map provider. That request can disclose technical information such as IP address, browser or device information, referring page and request time, and the provider may use its own cookies or similar technologies according to its independent terms and privacy practices.

Selmorienwhiteworks does not use the map embed as an advertising profile of its own and does not receive a copy of the provider’s complete cookie data through the site code. Nevertheless, third-party processing is distinct from our first-party processing. Visitors who do not wish to load embedded content can avoid interacting with the map and may use the written contact information instead. If additional embeds, analytics, social-media widgets, advertising services or external tracking tools are introduced, this policy and any necessary consent controls must be updated before those optional technologies are enabled where prior consent is required.

7. Consent and withdrawal where GDPR or EEA rules apply

Where European Union or EEA rules apply, storing information on or accessing information from a user’s device for a non-essential purpose generally requires the applicable ePrivacy consent conditions, while any resulting processing of personal data must also have a lawful basis under GDPR. When consent is the basis, it must be freely given, specific, informed and unambiguous. It must be possible to refuse optional technologies without being misled, and withdrawal must be as easy in substance as giving consent.

Consent for one purpose does not automatically authorise a materially different purpose. Optional analytics, advertising or profiling technologies should remain disabled until the required choice has been obtained. Withdrawing consent does not make earlier processing unlawful if it was lawful when performed, but processing based solely on that consent must stop for the future, subject to technically necessary steps needed to record and implement the withdrawal.

8. New Zealand privacy law

New Zealand privacy law regulates personal information rather than creating a cookie-specific consent regime equivalent to the EU ePrivacy framework. If data generated by cookies, logs, device identifiers or similar technology identifies an individual or can reasonably be linked to an individual, we handle that personal information consistently with the New Zealand Privacy Act 2020 and the Information Privacy Principles. That includes collecting information for a lawful and necessary purpose, providing required notice, using reasonable security safeguards, avoiding excessive retention, limiting use and disclosure, and addressing overseas disclosure requirements where relevant.

Where information about a person is obtained indirectly from another source, the applicable notification requirements under Information Privacy Principle 3A are also considered, subject to lawful exceptions. The broader rules concerning access, correction, security, complaints and international disclosure are described in the Privacy Policy.

9. Browser controls and privacy signals

Most modern browsers allow users to view or delete site data, block some or all cookies, restrict third-party storage, clear data when the browser closes, and configure tracking-protection settings. These controls differ by browser and version. Blocking strictly necessary storage on a website that relies on it can prevent a requested feature from operating. The current Selmorienwhiteworks core pages are intended to remain usable without optional advertising or analytics cookies.

Some browsers or extensions transmit privacy preference signals such as Global Privacy Control or Do Not Track. The legal effect of these signals is not uniform across all jurisdictions. We do not interpret a signal as permission to use optional tracking. If the website later deploys technologies for which a recognised signal creates a legal obligation in a relevant jurisdiction, the implementation should be configured to honour that obligation.

10. Cookie duration and data retention

The lifetime of a cookie or similar record should be proportionate to its purpose. Session technologies normally expire at the end of a session, while persistent technologies remain for a defined period unless deleted earlier. Any first-party preference or consent record introduced in the future should be retained only for a reasonable period needed to remember the setting or document the relevant choice, and the choice should be revisited when the purposes materially change or when applicable law requires renewed consent.

Server logs and other personal information generated by website operation are retained only for as long as reasonably necessary for security, diagnostics, legal compliance, dispute handling and other legitimate purposes described in the Privacy Policy. A third-party provider controls retention for information it collects independently, subject to its own policies and applicable law.

11. No sale of cookie data

Selmorienwhiteworks does not sell cookie identifiers or website browsing profiles through the current site implementation. We do not intentionally share contact-form content with advertising networks. If the business model or technology stack changes in a way that materially affects these statements, the policies and consent interface must be updated before the new processing is introduced.

12. External links

Following a link to another website means that the destination website operates under its own privacy and cookie practices. This policy does not control cookies, local storage, pixels or other processing performed by a destination after a visitor leaves selmorienwhiteworks.com. Visitors should review the destination’s own privacy information when appropriate.

13. Children

The website is not designed to use advertising or profiling technologies to build behavioural profiles of children. Family excursion enquiries may contain information about younger participants, but that information should be provided only when reasonably necessary for the requested service and is governed by the Privacy Policy rather than used for behavioural advertising.

14. Security and cookie-related risks

Cookies and browser storage should not be treated as a place for unnecessary sensitive information. We minimise the purposes for which client-side storage is required and avoid placing payment-card details, identity documents or general enquiry text in advertising or analytics storage. Visitors should use current browser versions and ordinary device-security measures because compromise of a device or browser profile can expose stored website data independently of the website operator.

15. Changes to this policy

We may update this policy if website technologies, service providers, hosting arrangements or legal requirements change. The effective date at the top identifies the current version. A materially new non-essential purpose will not be treated as automatically covered by consent obtained for a different purpose. Where a new technology requires prior consent or a new notice, the relevant control should be implemented before that technology is activated for affected visitors.

16. How this policy relates to other terms

This Cookie Policy should be read together with the Privacy Policy, which explains the handling of personal information, and the Terms & Conditions, which govern use of the site and excursion services. If a technology processes personal information, the Privacy Policy applies in addition to this explanation of browser-side technologies.

17. Contact

Cookie and privacy questions may be sent to info@selmorienwhiteworks.com. Operator: Selmorienwhiteworks Limited, 123 Adventure Lane, Wellington 6011, New Zealand.