Privacy policy – Nzgridironbets
Only the personal information needed to run an information site about NFL and other betting in New Zealand is collected by Nzgridironbets. The governing law is the Privacy Act 2020, with its information privacy principles in section 22.
The responsible agency
Responsibility for personal information gathered through Nzgridironbets rests with the body operating the site. Its name, address and e-mail address are at gridironbetsnz.com, and every question about personal information goes through that same channel.
Information collected
Opening a page makes the server write a log line: IP address, date and time, the address requested, the volume of data sent, the referring page and the browser type. Logs exist for security and for spotting abuse, and after 90 days they are erased or cut down so they no longer identify anyone. A person writing to the editors also supplies a name, an e-mail address and the message, used only for the reply. Because the site has no reader accounts, no deposits and no bets, no payment details or identity documents are gathered.
Reasons and principles
Collection has lawful purposes linked to running the site: keeping it working and secure, answering messages and, after a banner choice, measuring audience (IPP 1). People are told what is collected and why (IPP 3), and the information is used only for those ends (IPP 10). No automated decisions are made and no profiles are built.
Providers and transfers abroad
Nothing is sold. Information goes to the providers that host the site, deliver its content and handle e-mail, and to public authorities where the law demands. A provider may store data outside New Zealand; disclosure abroad happens only where the recipient is bound by comparable safeguards or the person has been informed and agrees, as IPP 12 provides.
Protection and retention
Reasonable safeguards guard the information against loss and misuse (IPP 5). Retention follows purpose (IPP 9): server logs up to 90 days, correspondence until the matter closes plus the time needed for any claims. A notifiable privacy breach, one that has caused or is likely to cause serious harm, is reported to the Privacy Commissioner and to those affected.
Access and correction
Anyone may ask to see the information held about them (IPP 6) and to have it corrected (IPP 7). Answers come as soon as reasonably practicable and no later than 20 working days after the request arrives (section 40).
Complaints
A person who thinks their privacy has been breached may complain to the Office of the Privacy Commissioner.
Last updated: 26 October 2026.
