Privacy
Last updated: 4 June 2026
Verisa is an independent wellness travel platform. We are committed to handling personal information carefully, transparently and only where it is reasonably necessary to operate, improve and protect Verisa.
As the platform grows, our approach to privacy will remain grounded in the same principle: collect only what we need, use it responsibly, and be clear about how personal information is handled.
This Privacy Policy explains what personal information we collect, why we collect it, how we use it, how long we keep it, and the choices you have in relation to your information.
1. Who we are
For the purposes of this Privacy Policy, “Verisa”, “we”, “us” and “our” refers to Joshua Winter, trading as Verisa.
Verisa may later operate through a formal legal entity. If that occurs, this Privacy Policy will be updated.
Contact: hello@verisa.travel
This policy applies to the Verisa website, including our notify list, property application forms and any other forms made available through the website.
2. Information we collect
We only collect personal information where it is reasonably necessary for Verisa.
The information we may collect includes:
Information you provide directly:
- Your email address, when you join the Verisa notify list.
- Your name, email address, property name, property website, location and any other information you choose to provide when submitting a property application or enquiry form.
- Any information you include when contacting us directly by email.
Information collected automatically:
- Basic website analytics information, such as pages visited, referral source, approximate location, device type, browser type and time spent on the site.
- Technical information such as IP address, which may be processed by our hosting, analytics or security providers for website performance, analytics and security purposes.
Information generated for property content:
- If you upload property images through a Verisa application or admin process, those images may be processed to generate or assist with image alt text.
- We do not currently offer user-facing AI features.
We do not intentionally collect sensitive personal information through the website.
3. How we collect information
We collect personal information when you:
- subscribe to our notify list;
- submit a property application or enquiry form;
- contact us by email;
- visit or interact with the website;
- provide property information or media for review.
Where possible, we collect information directly from you.
4. Why we collect and use information
We collect and use personal information for the following purposes:
- to send updates about Verisa to people who have joined the notify list;
- to respond to enquiries;
- to review property applications;
- to communicate with accommodation operators, partners or applicants;
- to manage property listings and related media;
- to understand how visitors use the website;
- to improve the website, user experience and Verisa’s services;
- to maintain the security and performance of the website;
- to comply with legal obligations.
We do not sell personal information.
We do not use personal information for third-party advertising.
5. Legal basis for processing
Depending on where you are located, privacy law may require us to identify a legal basis for collecting and using your personal information.
We rely on the following bases:
- Consent: where you voluntarily subscribe to the notify list, submit a form, upload information, or contact us.
- Legitimate interests: where we use limited analytics, hosting, security, website performance data or enquiry information to operate, improve and protect Verisa.
- Business communication or pre-contractual steps: where you submit a property application or enquiry and we need to assess, respond to or manage it.
- Legal obligation: where we are required to retain or disclose information by law.
This policy is intended to be consistent with the New Zealand Privacy Act 2020, alongside other applicable privacy laws.
6. Service providers we use
Verisa uses trusted third-party service providers to operate the website and related systems.
These may include:
- Vercel for website hosting and deployment.
- Neon for managed database hosting.
- Cloudflare R2 for media and file storage.
- Payload CMS for managing website and property content.
- Resend for transactional and broadcast email.
- Plausible for privacy-conscious website analytics.
- Mapbox for property location maps.
- OpenAI for assisting with image alt text generation in admin workflows.
These providers may process limited personal information only as needed to provide their services to Verisa.
We may update this list as Verisa grows or changes providers.
7. Analytics
We use Plausible Analytics to understand basic website usage.
Plausible helps us understand which pages are visited, how visitors find the website and how the site can be improved.
We do not use Google Analytics, Meta Pixel or third-party advertising trackers unless this Privacy Policy is updated to say so.
8. Cookies
We use only cookies and similar technologies that are required for the website to function properly, or for basic privacy-conscious analytics.
We do not use marketing cookies.
We do not use advertising cookies.
We do not use third-party behavioural tracking cookies.
9. Email communications
If you join the Verisa notify list, we will use your email address to send updates about Verisa.
Emails are managed using Resend.
You can unsubscribe at any time by using the unsubscribe link in our emails or by contacting hello@verisa.travel.
10. Property applications and uploaded media
If you submit a property application, we may collect the information you provide, including contact details, property details, location information, website links and any supporting information or media.
Property images and media may be stored using Cloudflare R2 and managed through Payload CMS.
Where Verisa uses AI-assisted tools to generate or assist with image alt text, property images may be processed by OpenAI for that limited purpose.
We do not use uploaded property media to create unrelated public content without permission.
11. When we share information
We do not sell personal information.
We may share limited personal information with trusted service providers who help us operate Verisa, including hosting, database, storage, email, analytics, map, CMS and technical support providers.
We may also disclose information if required by law, regulation, legal process, or where necessary to protect the rights, safety or security of Verisa, our users or others.
12. International processing
Verisa may use service providers located outside your country of residence. This means personal information may be processed or stored in other jurisdictions.
Where this occurs, we take reasonable steps to ensure that personal information is handled securely and consistently with this Privacy Policy.
13. Data retention
We only keep personal information for as long as reasonably necessary for the purpose it was collected.
As a guide:
- Notify list email addresses are kept until you unsubscribe or ask us to delete them.
- Enquiry and application form submissions are kept for as long as needed to review, respond to and manage the enquiry or application.
- Property application information and media may be retained while the property is under review, listed, waitlisted or otherwise being considered by Verisa.
- Analytics information is retained according to the settings of our analytics provider.
- Email correspondence may be retained for reasonable business, legal or administrative purposes.
You may request deletion of your personal information at any time by contacting hello@verisa.travel.
14. Your rights
Depending on where you are located, you may have rights to:
- request access to the personal information we hold about you;
- ask us to correct personal information that is inaccurate or incomplete;
- ask us to delete your personal information;
- unsubscribe from Verisa emails;
- object to certain uses of your personal information;
- make a privacy complaint.
If you are in the European Union or the United Kingdom, you may have additional rights under the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.
To exercise these rights, contact hello@verisa.travel.
We may need to verify your identity before responding to certain requests.
If you are not satisfied with how we have handled a privacy concern, you may make a complaint to the New Zealand Office of the Privacy Commissioner at privacy.org.nz.
15. Security
We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure. These steps include:
- HTTPS encryption for data transmitted between your device and the website;
- access controls on admin systems, with the principle of least privilege applied to internal access;
- trusted infrastructure providers with their own security certifications and practices;
- regular review of service providers and their security posture.
However, no method of online transmission or electronic storage is completely secure. We cannot guarantee absolute security.
16. Children
Verisa is not directed at children and we do not knowingly collect personal information from children.
17. Governing law
This Privacy Policy is governed by the laws of New Zealand, unless otherwise required by applicable privacy laws.
18. Changes to this policy
We may update this Privacy Policy from time to time as Verisa grows.
The updated version will be published on this page with a new “Last updated” date.
19. Contact
For privacy questions, access or correction requests, or deletion requests, contact hello@verisa.travel.