Browsing the site
Like almost every web server, ours keeps access logs: your IP address, the address of the page requested, the time, the browser's user-agent string and the referring page. They are used for security and to fix problems, are not combined with anything else, and are rotated daily and deleted after about two weeks. There are no tracking scripts, no analytics service, no advertising, no social-media widgets and no cookies — the site's fonts and scripts are served from our own server.
Maps
The map page and venue pages show a map drawn with tiles from OpenStreetMap. To load those tiles your browser connects to OpenStreetMap's tile servers, which receive your IP address, your browser's user-agent and (depending on your browser) the address of the page you were on. OpenStreetMap's own privacy policy covers what they do with it. Pages without a map make no such request.
"Directions", "Menu", "Website" and similar buttons are ordinary links to Google Maps or the venue's own sites. Nothing is sent to those sites unless you tap the link, and then their own privacy policies apply.
Contact and correction forms
When you send a message through the contact or corrections form, we store what you typed (your reason, optional name and email, the venue or page, and your message) together with your IP address, your browser's user-agent and the time, in a private inbox on our server that is not reachable from the web. A copy is emailed to the editor. To limit spam, the server also keeps a small file, named after your IP address, listing when that address sent messages; only the last hour's entries are used, but the file itself is not deleted automatically. The owners' form on /list-your-place works the same way and keeps the details you enter with your IP address and user-agent.
We use these messages only to answer you and to correct the site. We don't publish them, sell them or add you to any list. Messages are not deleted automatically: they stay in the private inbox until the editor removes them. If you want a message you sent deleted, email us and we will delete it.
Your rights
Under the New Zealand Privacy Act 2020 you can ask for a copy of personal information we hold about you and ask for it to be corrected or deleted. Email contact@pictonfood.co.nz. If you are not satisfied with our response you can complain to the Office of the Privacy Commissioner (privacy.org.nz).
Changes
If the site starts doing anything that affects this — adding a service that sets a cookie, for example — this page will say so first, and the date above will change.