New Zealand Privacy Compliance

New Zealand Privacy Compliance

Last Updated: May 21, 2026 | Effective Date: May 21, 2026 | Version: 1.0

NEW ZEALAND PRIVACY ACT 2020 COMPLIANCE

This document outlines RentalTide's compliance with the New Zealand Privacy Act 2020, the 13 Information Privacy Principles (IPPs), the notifiable privacy breach scheme, the Consumer Guarantees Act 1993, and the Fair Trading Act 1986. It explains the rights and protections available to New Zealand residents and supplements our main Privacy Policy.

1. Introduction

RentalTide Inc. (Delaware), a Delaware corporation, and RentalTide Inc. (Canada), a Canadian corporation (Business Number 783525165) (together "RentalTide," "we," "us," or "our"). The two companies share a name but are separate legal persons, and the one responsible to you is the one that contracts with you under Section 1.2 of the Terms of Service. RentalTide is committed to protecting the privacy of New Zealand residents in accordance with the Privacy Act 2020 and the 13 Information Privacy Principles (IPPs).

New Zealand Privacy Contact: RentalTide Inc. Privacy Officer 110 Didsbury Road, Ottawa, Ontario K2T 0C2, Canada 1111B S Governors Ave STE 48363, Dover, DE 19904, United States Email: privacy@rentaltide.com Phone: (888) 709-2650

2. Scope and Applicability

The Privacy Act 2020 applies to our handling of personal information where:

• You are a New Zealand resident using our Services
• You make bookings with New Zealand rental operators on our platform
• We carry on business in New Zealand, regardless of where the information is held, the Act has extraterritorial reach to overseas agencies carrying on business in NZ

2.1 Key Definitions

• Personal Information: Information about an identifiable individual
• Agency: A body or person that handles personal information (this includes RentalTide)
• IPPs: The 13 Information Privacy Principles in the Privacy Act 2020

3. The 13 Information Privacy Principles (IPPs)

IPP 1 & 2: Purpose and Source of Collection

We collect personal information only for a lawful purpose connected to our functions and only where collection is necessary. We collect directly from you wherever practicable (e.g., account registration, bookings, support).

IPP 3: Collection From the Individual

When we collect personal information from you, we take reasonable steps to make you aware of: why it is collected, who will receive it, that overseas recipients may be involved, whether collection is required by law, and your rights of access and correction.

IPP 4: Manner of Collection

We collect personal information by lawful and fair means that are not unreasonably intrusive.

IPP 5: Storage and Security

We protect personal information with reasonable safeguards against loss, misuse, and unauthorized access or disclosure, including 256-bit TLS in transit, AES-256 at rest, access controls, multi-factor authentication, and regular security testing.

IPP 6: Access

You have the right to request access to readily retrievable personal information we hold about you. Email privacy@rentaltide.com with proof of identity. We respond as soon as reasonably practicable, and within 20 working days.

IPP 7: Correction

You may request correction of personal information. If we decline, you may ask us to attach a statement of the correction sought.

IPP 8: Accuracy

Before using or disclosing personal information, we take reasonable steps to ensure it is accurate, up to date, complete, and not misleading.

IPP 9: Retention

We do not keep personal information for longer than is required for the purposes for which it may lawfully be used. See the retention section of our Privacy Policy.

IPP 10 & 11: Use and Disclosure

We use and disclose personal information only for the purpose for which it was collected, for a directly related purpose, or where an exception applies (e.g., your authorization, or as required or permitted by law). We do not sell personal information.

IPP 12: Cross-Border Disclosure

Before disclosing personal information to an overseas person or entity, we take reasonable steps to ensure the information is protected by comparable safeguards to the Privacy Act 2020, or rely on your authorization where appropriate. Your information may be transferred to and processed in:

• Canada (primary processing)
• United States (cloud services, payment processing)
• Other countries where our sub-processors operate (see Sub-Processors)

Safeguards include contractual data-protection clauses, security assessments, and encryption.

IPP 13: Unique Identifiers

We do not assign a unique identifier to you unless necessary for our functions, and we do not require you to disclose a unique identifier assigned by another agency except as permitted.

4. Notifiable Privacy Breaches

Under the Privacy Act 2020, if we have a privacy breach that it is reasonable to believe has caused, or is likely to cause, serious harm, we will:

1. Notify the Office of the Privacy Commissioner (OPC) as soon as practicable; and
2. Notify affected individuals as soon as practicable, with information about the breach and recommended steps.

You can report a concern to us at privacy@rentaltide.com.

5. Automated Decision-Making and AI

RentalTide publishes a full inventory of every AI-driven feature in our AI Usage and Data Commitment document, including which features produce recommendations, our human-in-the-loop posture, and the outcomes that are not decided by automated systems (bookings, refunds, account terminations, waiver decisions). You may request a plain-language explanation of any automated output and request human review by emailing privacy@rentaltide.com.

6. Consumer Protection (CGA & Fair Trading Act)

6.1 Consumer Guarantees Act 1993

Where you acquire our services as a consumer, the CGA guarantees that services are provided with reasonable care and skill, are fit for purpose, and are provided within a reasonable time. These guarantees cannot be contracted out of for consumer transactions. If a service fails a guarantee, you are entitled to a remedy.

6.2 Fair Trading Act 1986

We must not engage in misleading or deceptive conduct or make false representations about our services, pricing, or your rights.

6.3 Protection Products Disclaimer

IMPORTANT: Optional protection products (damage waivers, tow waivers, liability waivers, cancellation protection) offered through our platform are NOT INSURANCE and are not regulated under the Insurance (Prudential Supervision) Act 2010 or supervised by the Reserve Bank of New Zealand or the Financial Markets Authority as insurance. They are contractual waivers between you and rental operators. If you need insurance, consult a licensed insurance professional. See the Protection Plan Terms.

7. Your Privacy Rights Summary

8. Complaints

Step 1 - Contact RentalTide: Email our Privacy Officer at privacy@rentaltide.com or call (888) 709-2650. We acknowledge within 7 days and respond within 20 working days.

Step 2 - Office of the Privacy Commissioner: If you are not satisfied, you may complain to the OPC:

Office of the Privacy Commissioner PO Box 10094, The Terrace, Wellington 6143 Phone: 0800 803 909 Website: www.privacy.org.nz

Consumer matters: Commerce Commission (comcom.govt.nz) or the Disputes Tribunal.

9. Additional Resources

• Privacy Act 2020: www.legislation.govt.nz
• Information Privacy Principles: www.privacy.org.nz/privacy-act-2020/privacy-principles
• Consumer Guarantees Act: consumerprotection.govt.nz

10. Changes to This Document

We may update this document. Material changes will be posted here with an updated "Last Updated" date and notified where required.

---

Contact Us:

• Email: privacy@rentaltide.com
• Phone: (888) 709-2650
• Mail: Privacy Officer, RentalTide Inc., 110 Didsbury Road, Ottawa, Ontario K2T 0C2, Canada

This document supplements our main Privacy Policy and should be read together with our Terms of Service, Customer Terms, and other platform policies.