Legal
Privacy Policy.
Last updated: April 2026
About this policy
This privacy policy explains how Zongbao New Zealand Ltd (NZBN 9429030595286), trading as Lorenzo Motor Lodge, collects, uses, discloses, stores and protects your personal information.
We are bound by the Privacy Act 2020 (New Zealand) and the thirteen Information Privacy Principles set out in that Act. We are committed to handling your personal information with care, transparency and security.
Information we collect
We collect personal information about you when:
- You make an online booking through “Book Direct” — the booking form opens in a popup window served by our booking-engine provider Seekom IBEX (Seekom Limited). Seekom collects your name, email address, phone number, check-in and check-out dates, room type, guest count, payment information and any notes, in order to confirm and hold your reservation. The completed booking is forwarded to us.
- You make a booking enquiry through our enquiry form — your name, email address, phone number, check-in and check-out dates, room preference, guest count, and any notes you choose to include.
- You submit our contact form — your name, email address, phone number (optional), enquiry type and message.
- You stay with us — your name, contact details, payment information (handled directly by Seekom IBEX or in person at reception), vehicle registration (for parking allocation), and any preferences or requests relevant to your stay.
- You browse this website — anonymous usage statistics including pages visited, time on page, device type, browser, and approximate location (city level), via Google Analytics.
How we use your information
We use your personal information to:
- Respond to booking and general enquiries
- Process and confirm your accommodation booking
- Provide accommodation services during your stay
- Issue invoices, statements and receipts
- Respond to feedback and resolve any issues
- Send booking confirmations and pre-arrival information
- Improve our website and services through anonymised usage analytics
- Comply with legal obligations including tax and accounting requirements
We do not send marketing emails unless you have explicitly opted in, and you can unsubscribe at any time.
Third parties who handle your information
We use the following third-party services to operate the website and run the lodge. Each handles personal information under its own privacy policy:
- Cloudflare, Inc. — website hosting, content delivery network, and Turnstile (privacy-respecting bot protection on our forms). Cloudflare privacy policy.
- Seekom Limited (Seekom IBEX) — our online direct-booking engine, opened in a popup window when you select “Book Direct”. Seekom IBEX collects the personal information you enter to make a reservation (name, contact details, dates, room type, payment information) and processes that information to secure your booking and take payment on our behalf. Booking and payment data is held under Seekom’s privacy policy in addition to ours. Seekom website.
- Formspree, Inc. — processes submissions from the contact and booking-enquiry forms and forwards them to us via email. Formspree privacy policy.
- Google LLC (Analytics & Maps) — anonymous website usage statistics (Google Analytics 4) and embedded map on the Contact page (Google Maps). Google privacy policy.
- Booking.com, Expedia, TripAdvisor and similar OTAs — when you book through these platforms, they share your booking details with us. We are bound by both their privacy terms and ours.
- Sky Network Television Ltd — Sky TV is provided in-room under the lodge's commercial agreement; no guest data is shared.
Cookies and tracking
This website uses a small number of cookies and similar technologies:
- Essential cookies — for site functionality (e.g. remembering your form-input progress).
- Analytics cookies — Google Analytics 4 cookies for anonymous usage statistics (no personally identifiable information is collected).
- Cloudflare cookies — for security, performance and Turnstile bot protection.
- Seekom IBEX cookies — set inside the booking-engine popup window only, to maintain your booking session and remember your selections between steps.
You can disable cookies in your browser settings. Doing so may affect some site functionality but will not prevent you from browsing or making a booking enquiry.
Data security
Your information is transmitted to and from this website over an encrypted connection (HTTPS/SSL) provided by Cloudflare. Online bookings are processed by Seekom IBEX under its security standards. Contact and enquiry-form submissions are processed by Formspree under its security standards.
Payment card information is never stored on this website. All online card transactions are handled directly inside the Seekom IBEX booking engine under PCI-DSS compliance.
Our internal systems for managing bookings, statements and guest records are access-controlled and limited to the owners and staff who need them.
How long we keep your information
We retain personal information only for as long as we need it for the purposes we collected it, or as required by law:
- Booking enquiries: 24 months from the date of enquiry.
- Confirmed booking records: 7 years from the date of stay (for tax and accounting purposes per the Inland Revenue Department).
- Contact-form messages: 24 months unless they relate to an ongoing matter.
- Anonymous analytics data: retained per Google Analytics' default 14-month window.
Your rights under the Privacy Act 2020
You have the right to:
- Access the personal information we hold about you
- Request correction of any information that is inaccurate, incomplete or out of date
- Withdraw consent for marketing or optional communications at any time
- Request deletion of personal information we hold (subject to legal retention requirements)
- Make a complaint if you believe we have mishandled your personal information
To exercise any of these rights, please contact us: phone +64 3 348 8074 or via the contact form. We will respond within 20 working days as required by the Privacy Act 2020.
Complaints
If you have a privacy complaint, please contact us first using the details above so we can attempt to resolve it.
If you are not satisfied with our response, you can refer the matter to the Office of the Privacy Commissioner:
Changes to this policy
We may update this Privacy Policy from time to time. The current version will always be available at this URL, with the "last updated" date at the top.
Contact
Privacy questions? Phone +64 3 348 8074 or use our contact form.
