Privacy policy

Effective date: 4 August 2026  ·  Applies to: mirenovanta.com

1. Scope and who this policy is for

This Privacy Policy explains how Mire Novanta handles personal information when people visit the website, contact the editorial or privacy addresses, submit business information for possible directory coverage, request a correction, or exercise a privacy right.

The website is intended for adults aged 18 and over and is directed primarily to New Zealand design, procurement, construction, hospitality and casino-industry audiences. Mire Novanta is an informational interiors publication, not a casino or gambling operator.

“Personal information” generally means information about an identifiable individual. Business information can also be personal information where it identifies a sole trader, employee, artist, consultant or contact person.

2. Information we may collect

Information you provide directly

• Correspondence: name, email address, organisation, job title, telephone number, message content, email metadata and attachments when you contact us.
• Supplier submissions: business profile, service area, team biographies, project experience, reference contacts, technical literature, images and rights or attribution information.
• Correction and privacy requests: the statement or information concerned, supporting evidence, your preferred response details and limited identity-verification information where reasonably required.
• Feedback: factual updates, complaints, questions and other information you voluntarily provide.

Please do not submit casino security plans, access credentials, surveillance layouts, cash-handling procedures, personal financial records, health information, identity documents or other confidential/sensitive information unless we have specifically requested an appropriate method for providing it.

Information generated when the site is used

• Technical logs: hosting or security systems may record IP address, request date and time, requested file, response status, referrer, browser or user-agent data and diagnostic information.
• Age-confirmation preference: after you confirm you are 18 or older, the browser stores mn_age_confirmed=yes locally on your device.
• External font request: the browser may connect to Google Fonts to obtain typography files, which can expose ordinary connection information to Google.

Mire Novanta does not currently deploy behavioural analytics, advertising cookies, session replay, marketing pixels or cross-site profiling. See the Cookie Policy for a current technology table.

Information obtained from public or third-party sources

For editorial research, we may review supplier websites, professional directories, project credits, portfolios, public registers, media material, event information and information provided by designers, project participants or readers. Where information about an identifiable person is collected indirectly, we will consider the applicable New Zealand notification requirements, the source, reasonable expectations, sensitivity, practicality and any relevant exception.

3. Purposes for which information may be used

We may use relevant information to:

• respond to enquiries, submissions, complaints and correction requests;
• research, assess, fact-check, commission, edit and maintain directory or editorial content;
• contact references or rights holders where appropriate and authorised;
• attribute work and maintain records of licences, permissions and provenance;
• protect website availability, diagnose errors, prevent misuse and investigate security events;
• exercise or defend legal rights and manage editorial accountability;
• meet applicable legal, regulatory, tax, audit or record-keeping obligations;
• improve the structure, accessibility and usefulness of our content without behavioural advertising.

We will not use personal information for an unrelated purpose unless the use is authorised, reasonably expected and permitted by applicable law, or we obtain appropriate permission.

4. Age confirmation and children’s information

The website is restricted to people aged 18 or older because it discusses commercial casino environments. The age gate records only a browser preference. We do not request a date of birth or perform identity-based age verification.

We do not knowingly solicit personal information from children through this website. If you believe a person under 18 has provided personal information, contact us so the circumstances and appropriate deletion or restriction can be assessed.

5. When information may be shared

We do not sell personal information. Information may be disclosed only where reasonably connected with the purposes described above, including to:

• service providers supporting website hosting, email, security, storage, technical support or professional advice;
• editorial participants where limited information is required to verify a project, attribution, claim or permission;
• authorities or other persons where disclosure is required or permitted by law, needed to protect rights or safety, or relevant to suspected fraud, malicious activity or a security event;
• a successor organisation as part of a genuine reorganisation or transfer, subject to appropriate confidentiality and privacy safeguards.

Publication is itself a disclosure. We therefore aim to publish professional information that is relevant, accurate, appropriately attributed and reasonably expected in context. Personal contact details supplied only for verification will not ordinarily be published without permission.

Processing and disclosure outside New Zealand

Some email, hosting, font-delivery or infrastructure providers may operate or store information outside New Zealand. Where a transfer is legally treated as an overseas disclosure, we will assess the safeguards required by Information Privacy Principle 12. Where an offshore provider acts only as our storage or processing agent, Mire Novanta remains responsible for information handled on its behalf.

6. Storage, security and retention

We use safeguards proportionate to the limited information and foreseeable risks. Measures may include access limitation, reputable service providers, authentication controls, software maintenance, backups and minimisation of unnecessary records. No internet, email or storage system is completely secure; absolute security cannot be promised.

Retention is based on purpose rather than a single period:

• general enquiries may be retained while the matter is active and for a reasonable record period;
• published-content research, permissions and correction records may be kept longer to document accuracy, provenance and editorial decisions;
• unsuccessful or irrelevant submissions may be deleted or reduced when no longer useful;
• technical logs are retained according to operational security and hosting needs;
• information required for legal claims or obligations may be preserved for the relevant period.

When information is no longer reasonably required, we may delete, anonymise or securely dispose of it, subject to backups and legitimate archival records.

Privacy breaches

If a privacy breach occurs, we will take reasonable steps to contain it, assess the information and likely impact, reduce harm, document the response and improve controls. Where a breach has caused or is likely to cause serious harm, the Privacy Act may require notification to the Office of the Privacy Commissioner and affected people as soon as practicable, subject to lawful exceptions.

7. Access, correction and other requests

Subject to the Privacy Act 2020 and applicable exceptions, an individual may:

• ask whether we hold personal information about them;
• request access to that information;
• ask for incorrect, incomplete or misleading information to be corrected;
• ask that a statement of correction be attached if a requested change is not made;
• raise a concern about collection, use, disclosure, security or retention.

New Zealand organisations generally must respond to access or correction requests within 20 working days, although the period can be extended in permitted circumstances. Access may sometimes be withheld or limited where legislation provides a reason; if so, the response will explain the basis where required.

To protect information, we may ask for enough detail to identify the relevant record and may verify identity or authority. An authorised representative should provide evidence of authority. Avoid emailing identity documents unless specifically requested.

Complaints

Please contact us first so we can investigate. If you are not satisfied, you may contact the Office of the Privacy Commissioner. Its website explains complaint processes, access and correction rights and the Privacy Act’s information privacy principles.

8. External websites

The directory links to independent suppliers, authorities and support services. Mire Novanta does not control their privacy practices, content or security. Review the relevant third party’s policy before providing personal information. An external link is not an endorsement or confirmation of ongoing availability.

9. Contact and policy changes

Privacy questions, requests or concerns can be sent to privacy@mirenovanta.com. Include enough context for us to locate the relevant information, but do not include unnecessary sensitive material.

We may update this policy if website features, legal requirements, service providers or information practices change. Material changes will be reflected in the effective date and, where appropriate, explained more prominently.