Privacy Policy

This Privacy Policy explains how the operator of the Local Drag platform (the Platform) collects, uses, discloses, and protects your personal information. We handle personal information in accordance with the Privacy Act 2020 and its Information Privacy Principles (IPPs).

In this Policy, we, us, and our refer to the operator of the Platform, and you and your refer to any person whose personal information we hold, including members of the public, registered performers, and people who manage business listings.

1. The information we collect

1.1

Depending on how you use the Platform, we may collect:

• Account information — your name, email address, login credentials or third-party sign-in identifiers, and roles.
• Performer profile information — stage name, performer type, biography, pronouns, location and service areas, images, social links, service tags, and a verified contact email address.
• Business listing information — business name, description, location and service areas, contact details, links, images and logos, and, where you purchase a subscription, billing-related details.
• Contact and enquiry information — the content of enquiries sent through contact forms, and the email address used to forward them.
• Payment information — where you purchase a paid subscription, payment is processed by our payment provider (Stripe). We do not store full card numbers; we receive limited billing and subscription details (such as customer and subscription identifiers and payment status) from Stripe.
• Technical and usage information — IP address, device and browser information, pages viewed, interactions, and similar analytics and event data, including information collected to protect the Platform from automated abuse (for example through Cloudflare Turnstile).

1.2

Most personal information we collect comes directly from you. Where an administrator creates a performer profile on a performer's behalf, we may hold information until that profile is claimed. We may also receive information from service providers such as our payment and security providers.

1.3

Providing personal information is voluntary, but if you choose not to provide certain information (for example your name, email, or contact details), we may be unable to provide services that depend on it, such as creating an account, forwarding enquiries, or processing a subscription.

2. Why we collect and use your information

2.1

We collect, hold, and use personal information to:

• create and administer accounts, performer profiles, and business listings;
• operate, secure, moderate, and improve the Platform;
• display public profiles and listings, and forward contact enquiries;
• process and manage paid subscriptions and billing;
• verify genuine use of the Platform and prevent fraud, abuse, and security incidents;
• respond to your enquiries, complaints, and requests; and
• comply with our legal obligations and enforce our terms.

2.2

We will only use your personal information for the purposes for which it was collected, for directly related purposes, or as otherwise permitted or required by law.

3. Information made public

3.1

Some information is published on the Platform and is publicly accessible by its nature. For performers this includes the stage name, biography, images, location, pronouns, and social links. For business listings this includes the business name, description, location, images, and contact options.

3.2

A performer's verified contact email address is not displayed publicly; it is used only to forward contact enquiries. You acknowledge that once information is published, it may be cached or indexed by third parties (such as search engines), and we cannot guarantee its removal from all external caches.

3.3

We do not publish a performer's legal name; the public identity is the stage name. Performers and businesses control the location shown on a profile or listing and may limit it to a general area or service areas rather than a precise address. We will not publish location information that is more precise than you provide.

4. Who we share information with

4.1

We share personal information with:

• Other users, where the Platform's purpose requires it — for example forwarding a contact enquiry to the relevant performer, or displaying public profile and listing information.
• Service providers who help us run the Platform, including cloud hosting and storage (Amazon Web Services), content delivery and security (Cloudflare), payment processing (Stripe), and email delivery. These providers may only use the information to provide their services to us.
• Others where permitted or required by law, including to investigate complaints, enforce our terms, protect rights, property, or safety, or respond to a lawful request.

4.2

We do not sell your personal information, and we do not share it with advertisers for their own marketing purposes.

4.3

When we receive a request from law enforcement or another authority for personal information, we disclose only what we are lawfully required or permitted to disclose, limit any disclosure to the minimum reasonably necessary, and require valid legal process where it applies. Where we are lawfully able to do so, we will tell the affected person about a request for their information.

5. Sending information overseas

5.1

Some of our service providers store or process personal information outside New Zealand. In particular, our cloud hosting is located in Australia, and our security, content-delivery, and payment providers operate internationally. Where we disclose personal information to an overseas provider, we take reasonable steps to ensure it is subject to comparable safeguards to those required under the Privacy Act 2020, consistent with IPP 12.

6. Cookies and tracking

6.1

The Platform uses cookies and similar technologies for essential functions (such as keeping you signed in and protecting against automated abuse) and for analytics that help us understand and improve how the Platform is used. You can control cookies through your browser settings, but disabling some cookies may affect how the Platform works.

7. How long we keep information

7.1

We keep personal information only for as long as it is needed for the purposes described in this Policy, or as required by law. When you close your account or remove a profile or listing, it will be unpublished, and we may retain a copy for a reasonable period for backup, legal compliance, dispute resolution, and enforcement purposes before secure deletion or de-identification.

8. Keeping information secure

8.1

We take reasonable steps to protect personal information from loss, misuse, and unauthorised access, disclosure, or modification. These steps include encrypting information at rest and restricting access to authorised personnel. No system can be guaranteed completely secure, and you are responsible for keeping your account credentials safe.

8.2

If we become aware of a privacy breach that is likely to cause serious harm, we will notify affected individuals and the Office of the Privacy Commissioner as required by the Privacy Act 2020.

9. Accessing and correcting your information

9.1

You have the right to ask for a copy of the personal information we hold about you, and to ask us to correct it if you think it is wrong. You can manage much of your information directly through your account. To make a request, contact us at hi@localdrag.co.nz. We may need to verify your identity before acting on a request, and in limited circumstances we may decline a request as permitted by law, in which case we will explain why.

10. Children

10.1

Registration is restricted to people aged at least 18: registered performers and people managing business listings must be 18 or over. Public pages are intended for a general audience and are not directed at children, and some listings or content may be unsuitable for children. We do not knowingly collect personal information from children in a manner that requires a parent or guardian's consent without it.

11. Complaints

11.1

If you have a concern about how we have handled your personal information, please contact us at hi@localdrag.co.nz so we can try to resolve it. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

12. Changes to this Policy

12.1

We may update this Policy from time to time. Any change takes effect from the time it is published on the Platform. Where a change materially affects how we handle your personal information, we will use reasonable efforts to bring it to your attention.

13. Contact us

13.1

If you have any questions about this Policy or about how we handle personal information, please contact us at hi@localdrag.co.nz.