Privacy and data policy
Effective 3 November 2026
1. Who we are
This policy explains how No.31 Restaurant & Bar (“No.31”, “we”, “us”) collects, uses, stores and shares personal information when you visit restaurant-no31.nz, book a table, join our mailing list, apply for a job, contact us or visit our venue. No.31 is run by the same owners as our sister venue, Tease Robo Cafe Bar and Eatery, in Hanmer Springs, New Zealand.
We follow the New Zealand Privacy Act 2020 and its Information Privacy Principles. Our Privacy Officer can be reached at info@restaurant-no31.nz or 03 315 7031, or by post at 31 Amuri Avenue, Hanmer Springs 7334.
2. What we collect
- Bookings: your name, phone number, email address, booking date and time, number of guests, and any notes you give us, such as a special occasion, seating preferences, dietary requirements or allergies.
- Dining history: a record of your past bookings, cancellations and no-shows, so we can recognise regular guests and manage availability.
- Mailing list: your name and email address when you sign up, plus basic information about which emails you open or click.
- Enquiries: whatever you send us through our contact form, by email, phone or social media.
- Job applications: your name, contact details, availability, work rights in New Zealand, CV, and anything else you choose to tell us.
- Online purchases: if you buy anything from our website, such as a gift voucher, we collect your name, contact and billing details. Card payments are handled by a secure payment processor; we do not see or store your full card number.
- CCTV footage: images recorded by security cameras at our venue (see “Security cameras (CCTV)” below).
- Website use: technical information such as your IP address, browser, device, the pages you visit and how you found us, collected through cookies (see “Cookies and analytics” below).
We collect most information directly from you. Sometimes we receive it from someone else, for example when a friend books a table for a group and gives us your name, or when you book through a third-party booking service.
3. Allergies and dietary information
Information about allergies, intolerances or medical dietary needs is health information, so we treat it with extra care. We only use it to prepare your meal safely and to brief the staff looking after your table. It is kept with your booking and is not used for marketing.
4. Security cameras (CCTV)
We operate CCTV cameras at No.31 for the safety and security of our guests and staff, to prevent and investigate crime, theft and damage, and to help us meet our obligations as a licensed premises. Signs at the venue let you know cameras are in use.
- Cameras cover areas such as entrances, dining and bar areas, and outdoor and service areas. They are never placed in toilets or changing areas.
- Footage is stored securely and is automatically overwritten after a limited period, unless we need to keep a recording to deal with an incident, complaint, insurance claim or legal matter.
- Only the owners and authorised managers can view footage, and only when there is a good reason to.
- We may give footage to the Police or other authorities when they request it to investigate an offence, or where the law otherwise allows or requires it. We do not use CCTV for marketing, and we do not post footage online.
- You can ask to see footage of yourself (see “Your rights”). We may need to blur or withhold images of other people to protect their privacy.
5. How we use your information
- To take, confirm, change and manage your bookings, including reminder messages and contacting you if something changes.
- To look after you on the day, including allergies, special occasions and seating.
- To reply to your enquiries, feedback and complaints.
- To consider job applications and contact applicants.
- To process online purchases and gift vouchers.
- To send news about No.31 and Tease Robo Cafe Bar and Eatery, such as new menus, events and seasonal openings, where you have agreed to this or we are otherwise allowed to (see “Marketing emails”).
- To understand how our website is used, so we can improve it.
- To keep our venue, staff and guests safe, prevent fraud and misuse of our website, and meet our legal obligations (for example tax, liquor licensing and employment law).
We will not use your information for a purpose that is unrelated to why we collected it, unless you agree or the law allows it.
6. Marketing emails
We send our newsletter through a professional email marketing service. We may email you if you have signed up on our website, agreed to marketing when booking, or have dined with us before and we reasonably believe you would like to hear from us, as allowed under the Unsolicited Electronic Messages Act 2007.
Every marketing email includes an unsubscribe link. Once you unsubscribe you will stop receiving marketing from both No.31 and Tease Robo Cafe Bar and Eatery within five working days, although we may still contact you about a booking you have made. You can also ask us to remove you by emailing info@restaurant-no31.nz.
7. Sharing between Tease and No.31
Tease and No.31 are sister venues with the same owners. We keep a combined guest and mailing list so that we can recognise our regular guests at either venue and let them know about news at both. We do not sell, rent or trade your personal information to anyone.
8. Our suppliers and who we share information with
Like most businesses, we use trusted suppliers to help run our venues and website. They only receive the information they need to provide their service to us, and they must keep it secure and use it only for that purpose. They include:
- our table booking and reservation system provider
- our website hosting and email marketing provider
- website analytics and spam-protection services
- email, cloud storage and IT service providers
- payment processors for online purchases
- our accountant and professional advisers, when needed.
We may also disclose information if the law requires it, for example to the Police, a court, Inland Revenue, a liquor licensing inspector or public health authorities, or to prevent a serious threat to someone’s health or safety.
9. Storing information overseas
Some of our suppliers store or process information outside New Zealand, for example in Australia, the United States, Europe or Asia. Where this happens, we choose suppliers that are subject to privacy laws or contractual safeguards that give comparable protection to the New Zealand Privacy Act, as required by Information Privacy Principle 12.
10. Cookies and analytics
Cookies are small files stored on your device. Our website uses:
- Essential cookies that make the website, forms, booking tools and shopping cart work.
- Analytics cookies (Google Analytics) that tell us which pages are visited and how people find our website. We do not use them to identify you personally.
- Spam protection on some forms, which checks that you are a real person.
You can block or delete cookies in your browser settings, and you can opt out of Google Analytics using Google’s browser add-on at tools.google.com/dlpage/gaoptout. Some parts of the website may not work properly without cookies. We do not use advertising or social media tracking cookies, and if that ever changes we will update this policy first.
11. How long we keep information
- Booking records, including dining history: while you remain a guest, and deleted or anonymised after about three years without a booking.
- Allergy and dietary notes: with the related booking, or longer only if you ask us to remember them for future visits.
- Mailing list: until you unsubscribe. After that we keep your email on a suppression list only, so we don’t contact you again.
- Job applications: up to 12 months, in case another suitable role comes up, unless you ask us to delete yours sooner. Successful applicants’ details become part of their employee records.
- CCTV footage: overwritten automatically after a limited period, unless needed for an incident or legal matter.
- Purchase and financial records: seven years, as required by New Zealand tax law.
12. Keeping your information safe
We take reasonable steps to protect personal information from loss, misuse and unauthorised access. These include password-protected systems, secure (HTTPS) connections on our website, limiting access to staff who need it, and using reputable suppliers. If a privacy breach happens that is likely to cause serious harm, we will notify the people affected and the Office of the Privacy Commissioner, as the law requires.
13. Your rights
You have the right to ask for a copy of the personal information we hold about you, including CCTV footage of you, and to ask us to correct it if it is wrong. You can also ask us to delete your information or stop sending you marketing. Email info@restaurant-no31.nz or call 03 315 7031. We may need to confirm your identity first. We will respond within 20 working days and will not charge you for making a request.
If you are in the European Union or United Kingdom, you may have additional rights under the GDPR, and we will help you exercise them.
14. Children
Our website and mailing list are intended for adults. We do not knowingly collect personal information from children under 16 without a parent or guardian’s involvement. A parent or guardian may make bookings that include children.
15. Complaints
If you have a concern about how we have handled your personal information, please contact our Privacy Officer first at info@restaurant-no31.nz and we will do our best to put it right. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner at privacy.org.nz or on 0800 803 909.
16. Changes to this policy
We may update this policy from time to time, for example when we start using a new service. The latest version will always be on this page, with the date it took effect.