NURISTAY
Sign inRequest a demoDemo

Privacy Policy

Last updated: 9 November 2026

This policy explains how NURI TECHNOLOGY LIMITED (“we”, “us”), which operates NURISTAY, collects, uses and protects personal information under the Privacy Act 2020 of New Zealand. It covers this website and the NURISTAY service.

1. Whose information, and our role

There are three groups of people whose information we handle:

  • Visitors to this website and people who contact us.
  • Property owners and their staff who use NURISTAY.
  • Guests of the properties that use NURISTAY. The property decides what guest information to collect and why. We store and process it for the property to run NURISTAY, and we do not use it for our own purposes.

2. What we collect

  • Website and contact forms: your name, email address and message, and, if you give them, your phone number, your role at the property, the property’s name, address and website, its number of rooms and the system you use now. We keep a record of your enquiry in NURISTAY, stored in New Zealand, so we can follow it up. If you start a free trial, we use these details to set up your property and owner login in NURISTAY and email you a link to set your password. Our website host (Cloudflare) also processes technical data, such as IP address, to deliver and protect the site, including a spam check on our forms (Cloudflare Turnstile). We also count visits to this website with Cloudflare Web Analytics. It uses no cookies and shows us totals only, such as how many people viewed a page and from which country, not who you are.
  • Owners and staff: name, email, login details (passwords are stored in protected form), PIN, role, and records of sign-ins and actions in NURISTAY.
  • Guest information entered by a property: name, contact details, stay details, booking channel, payments and notes.
  • Online check-in: guests may upload photos of identification and a payment card, and guest signatures, when the property asks them to.
  • Payments: if a property takes card details for a booking, they are handled as described in section 5. We never store card security codes (CVV).
  • Billing: for subscription customers, business and invoice details.

3. Why we use it

  • to provide, secure, support and improve NURISTAY;
  • to reply to enquiries and give demos;
  • to invoice subscribers and manage subscriptions;
  • to send service messages, such as password or PIN notices and important changes;
  • to meet legal obligations.

We do not sell personal information, and we do not use guest information for advertising.

4. Who we share it with

We share information only with service providers who help us run NURISTAY, and only as needed:

  • Microsoft: cloud hosting (Azure, New Zealand North region) and Microsoft 365 email. When a property connects its mailbox, NURISTAY reads booking emails live and does not store them.
  • Stripe: online payments, where a property uses them.
  • Our channel connection provider: to exchange availability, rates and bookings with channels such as Booking.com and Expedia, where a property uses them.
  • Cloudflare: website hosting and DNS, the spam check on our website forms, and visitor statistics for this website (Cloudflare Web Analytics, which uses no cookies and shows us totals only).
  • Resend: if we use it, delivers your message to our support inbox when NURISTAY can’t.

Some providers may process information outside New Zealand. We use providers that protect personal information to standards comparable to the Privacy Act, or we ensure appropriate safeguards are in place.

We may also disclose information when the law requires it, or to protect safety or rights.

5. Security and how long we keep information

  • Data is encrypted in transit, access is limited by login, role and PIN, and sign-ins and key actions are logged.
  • Guest identification and card photos are encrypted, shown to staff only after a PIN, and deleted 7 days after check-out. They are not included in emails, PDFs or backups.
  • If full card numbers are collected for a booking, they are stored encrypted, shown only after a PIN, and deleted 7 days after check-out.
  • Booking, payment and invoice records are kept while the property uses NURISTAY, and as long as the law requires for business and tax records (generally seven years in New Zealand).
  • Enquiries from our website forms are kept to follow them up. If an enquiry does not lead to a subscription, we delete it 12 months after our last contact about it.
  • After a subscription ends we delete or return the property’s data within a reasonable time on request, except for records we must keep by law.

No system is perfectly secure. If a privacy breach is likely to cause serious harm, we will notify affected people and the Office of the Privacy Commissioner as the law requires.

6. Your rights

You can ask us to confirm whether we hold personal information about you, to give you access to it, and to correct it. If you are a guest of a property, please ask the property first, as it is responsible for your booking information. We can help the property respond.

Contact our privacy officer at support@nuristay.co.nz. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner (privacy.org.nz).

7. Cookies

This website does not use advertising or tracking cookies, and its visitor statistics work without cookies. The NURISTAY app uses cookies needed to sign in and to remember your device and property.

8. Children

NURISTAY and this website are for businesses and are not directed at children.

9. Changes

We may update this policy and will show the date of the latest update. For significant changes we will let property owners know.

10. Contact

NURI TECHNOLOGY LIMITED, 12 Lorne Street, Melville, Hamilton 3206. Email: support@nuristay.co.nz.