5.1 Who is responsible for personal information
Astralis Ltd. T/A Firefly Cinema, trading as Firefly Cinemas NZ, is the agency responsible for personal information covered by this policy under the Privacy Act 2020. Privacy contact: info@fireflycinemas.co.nz.
5.2 Scope
This policy applies to personal information collected through our website, ticketing and booking checkout forms, Stripe payments, enquiries, VIP movie club subscriptions, and event operations.
5.3 Information collected directly
Depending on your interaction, Firefly may collect:
- First name, last name, email address, and mobile phone number.
- Vehicle license plate (rego) and vehicle profile (sedan / SUV / van) to assist with gate marshalling.
- Payment transaction identifiers (processed securely via Stripe).
- Region or city preference for localized screening announcements.
5.4 Information collected indirectly
If someone books tickets on your behalf, we receive your attendee details to deliver your scannable gate pass.
5.5 Why Firefly collects information
We use your information exclusively to:
- Issue, email, and verify your digital PDF E-Tickets.
- Send essential day-of event updates, gate opening reminders, and weather alerts.
- Manage vehicle capacity, site marshalling, and sightline layout.
- Deliver advance screening presales if you opted into our VIP Movie Club.
5.6 Data minimisation and optional information
We only ask for details strictly necessary to process your booking and ensure site safety. Optional fields are clearly marked.
5.7 Collection notices
Every form clearly informs you of why your information is required before you submit.
5.8 Payment processing and Stripe
All credit and debit card transactions are processed directly by Stripe via PCI-DSS compliant tokenization. Card numbers never touch or store on our web servers.
5.9 Technology and ERP providers
We use enterprise systems including Odoo ERP for registration tracking and secure cloud hosting providers.
5.10 Disclosures
We never sell or rent your personal data to third parties. Information is disclosed only to essential service contractors (e.g. emergency staff or gate marshals) as required for event delivery or legal compliance.
5.11 Overseas processing
Where cloud infrastructure resides overseas, providers are vetted to ensure comparable privacy protections under NZ IPP 12.
5.12 Cookies and analytics
We use minimal session cookies essential for website navigation and anonymous visitor analytics.
5.13 Marketing email and SMS
We send promotional screening announcements only to users who explicitly opt in. Every marketing message contains a simple 1-click unsubscribe link.
5.14 Event photography
Crowd photographs may be captured during events. If you prefer not to appear in promotional media, simply notify our event staff upon arrival.
5.15 Children's privacy
We do not knowingly collect personal data directly from children under 16 without parental consent.
5.16 Accuracy
We take all reasonable steps to ensure attendee records are accurate and up to date.
5.17 Security
Our website utilizes 256-bit SSL encryption, restricted administrative access, and strict firewall protocols.
5.18 Retention and disposal
Financial transaction records are retained for statutory tax requirements (7 years) and non-essential contact data is safely purged when no longer required.
5.19 Access and correction rights
Under the NZ Privacy Act 2020, you have the right to request access to or correction of any personal information we hold about you. Email info@fireflycinemas.co.nz.
5.20 Deletion requests
You may request deletion of your contact profile at any time by contacting our privacy team.
5.21 Privacy breaches
In the unlikely event of a privacy incident, we adhere to the mandatory notification guidelines of the Office of the Privacy Commissioner.
5.22 Complaints
If you have any privacy concerns, please contact us first. You also have the right to contact the Office of the Privacy Commissioner at privacy.org.nz.
5.23 Policy updates
Any revisions to this policy will be posted on this page with an updated revision date.