万国旅行社
0800 116 688

Privacy Policy

Last updated: 8 October 2026

中文版本：隐私政策

1. Scope

This Privacy Policy applies to personal information collected by Worldwide Holidays Limited, trading as Worldway Travel (万国旅行社) ("Worldway Travel"), through its website wanguo.co.nz, the member website and app, and its customer messaging channels on Facebook Messenger, Instagram and WhatsApp.

Worldway Travel handles personal information in accordance with the New Zealand Privacy Act 2020.

2. Information collected

Contact details: name, phone number, email address and any other contact details provided in an enquiry or booking.
Booking information: selected tours, travel dates, traveller details, passport details required for travel arrangements, payment and refund records.
Messaging information: when a customer contacts Worldway Travel through Facebook Messenger, Instagram or WhatsApp, the platform provides the customer's platform-specific ID, display name, profile picture (Messenger and Instagram), WhatsApp phone number, message content and any attachments sent, such as photos or documents.
Advertising referral information: when a conversation starts from a Worldway Travel advertisement on Facebook or Instagram, Meta provides the advertisement identifier and headline so that the enquiry can be matched to the relevant tour.
Technical information: device type, browser type and pages visited on the website, used for security and service improvement.

3. Use of information

Messaging information is not sold, rented or used to build advertising profiles. Message content is not shared with any party other than the service providers listed in section 4.

Responding to enquiries and providing travel quotations.
Assigning each enquiry to a travel consultant and maintaining a record of the conversation so that the customer does not need to repeat information.
Processing bookings, payments, travel documents and visa-related arrangements.
Sending service messages about bookings, such as confirmations, itinerary changes and departure reminders.
Meeting legal, tax and consumer protection obligations, and preventing fraud and misuse.

4. Service providers

Personal information is shared only with the following service providers, and only to the extent necessary for the stated purpose:

Meta Platforms, Inc. (Facebook Messenger, Instagram, WhatsApp Business Platform): delivery of messages between customers and Worldway Travel.
Amazon Web Services: secure hosting of the website, member system and message records.
Cloudflare: website delivery and protection against malicious traffic.
Tencent (WeChat), Google and Apple: account sign-in where the customer chooses these options.
Payment processors: processing of tour payments and refunds.
Tour operators, airlines, hotels and transport providers: fulfilment of bookings made by the customer.

5. Storage and security

Personal information is stored on secure servers hosted by Amazon Web Services. Access is restricted to authorised staff, and each travel consultant can access only the enquiries assigned to them.

Messaging records are retained for up to three years after the last contact, unless they form part of a booking record. Booking and payment records are retained for the period required by New Zealand tax and consumer protection law.

6. Data deletion

Any person may request deletion of the personal information Worldway Travel holds about them, including records of conversations on Facebook Messenger, Instagram and WhatsApp.

Send an email to [email protected] with the subject "Data Deletion Request".
Include the channel used (Facebook Messenger, Instagram, WhatsApp, website or app) and the name or phone number used on that channel, so that the records can be identified.
Worldway Travel will confirm receipt within 5 working days and complete the deletion within 30 days, then send written confirmation.
App users may also delete their account directly in the app under My > Settings > Delete Account.
Records that must be retained by law, such as completed booking and payment records, are kept only for the required period and are no longer used for any other purpose.

7. Access and correction

Under the Privacy Act 2020, any person may request access to, or correction of, the personal information held about them by contacting [email protected]. Complaints that are not resolved may be referred to the Office of the Privacy Commissioner (privacy.org.nz).

8. Children

The services are intended for adult travellers. Bookings for travellers under 16 years of age must be made by a parent or guardian.

9. Changes to this policy

Updates to this policy are published on this page with a revised "Last updated" date.

10. Contact

Entity: Worldwide Holidays Limited, trading as Worldway Travel
Address: 14C/155 Queen Street, CBD, Auckland 1010, New Zealand
Phone: 0800 116 688
Email: [email protected]