top of page

Privacy Policy

Last Updated October 29th, 2026

​

1. INTRODUCTION

Myma Digital Limited and its subsidiaries (we, us, our, Myma.ai, Aiva, Book Me Bob) complies with the New Zealand Privacy Act 2020 (the Act) when dealing with personal information. Personal information is information about an identifiable individual (a natural person). This policy sets out how we will collect, use, disclose and protect your personal information. This policy does not limit or exclude any of your rights under the Act. If you wish to seek further information on the Act, see www.privacy.org.nz.

​

Where applicable, we also comply with other relevant privacy and data protection laws, including the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA). When providing services to business customers, we may process personal information on their behalf in accordance with contractual obligations and documented instructions.

​

2. CHANGES TO THIS POLICY

We may change this policy by uploading a revised policy onto the website. The change will apply from the date that we upload the revised policy. You should check back here periodically to see if the Privacy Policy has been updated as we will always show the date of the latest modification of the Privacy Policy at the top of the page so you can tell when it was last revised.

​​

3. WHO DO WE COLLECT YOUR PERSONAL INFORMATION FROM

We collect personal information about you from:

  • you, when you provide that personal information to us, including via the website and any related service, through any registration or subscription process, through any contact with us (e.g. telephone call or email), or when you buy or use our services and products

  • third parties where you have authorised this or the information is publicly available. If possible, we will collect personal information from you directly.

​

The types of personal information we may collect include names, email addresses, telephone numbers, company details, job titles, account information, IP addresses, device and browser information, service usage records, and communication histories. Where applicable, we may also process guest enquiries, reservation information, stay preferences, and other information provided through our AI-powered hospitality communication services.

 

We collect only the personal information reasonably necessary for the relevant business, operational, contractual, or legal purpose.

​

4. HOW WE USE YOUR PERSONAL INFORMATION

We will use your personal information:

  • to verify your identity

  • to provide services and products to you

  • to market our services and products to you, including contacting you electronically (e.g. by text or email for this purpose)

  • to improve the services and products that we provide to you

  • to undertake credit checks of you (if necessary)

  • to bill you and to collect money that you owe us, including authorising and processing credit card transactions

  • to respond to communications from you, including a complaint

  • to conduct research and statistical analysis (on an anonymised basis)

  • to protect and/or enforce our legal rights and interests, including defending any claim

  • for any other purpose authorised by you or the Act.

 

There are no financial incentives offered to data subjects for sharing data with Myma.ai.

​

Where Myma.ai processes personal information on behalf of its business customers, those customers generally determine the purposes and lawful basis for processing, and Myma.ai acts in accordance with their documented instructions and applicable data processing agreements as provided to Myma.ai by the business customer.

​

5. DISCLOSING YOUR PERSONAL INFORMATION

We may disclose your personal information to

  • another company within our group

  • any business that supports our services and products, including any person that hosts or maintains any underlying IT system or data centre that we use to provide the website or other services and products

  • a credit reference agency for the purpose of credit checking you

  • other third parties (for anonymised statistical information)

  • a person who can require us to supply your personal information (e.g. a regulatory authority)

  • any other person authorised by the Act or another law (e.g. a law enforcement agency)

  • any other person authorised by you.

  • A business that supports our services and products may be located outside New Zealand. This may mean your personal information is held and processed outside New Zealand.

​​

Where personal information is shared with third-party service providers, we take reasonable steps to ensure that appropriate contractual, confidentiality, and security obligations are in place. Such providers are expected to process personal information only for authorised purposes, implement appropriate security measures, and comply with applicable data protection requirements.

​

6. PROTECTING YOUR PERSONAL INFORMATION

We will take reasonable steps to keep your personal information safe from loss, unauthorised activity, or other misuse.

​

We maintain appropriate technical and organisational security measures designed to protect personal information, including access controls, authentication mechanisms, encryption where appropriate, security monitoring, vulnerability management, employee confidentiality obligations, and periodic security reviews. Access to personal information is restricted to authorised personnel based on business requirements.

​

We maintain procedures for identifying, reporting, investigating, containing, and remediating suspected or confirmed personal data breaches. Employees and contractors are required to promptly report suspected privacy or security incidents. Where a breach meets applicable legal notification thresholds, we will notify relevant authorities, affected individuals, or business customers within the timeframes required by applicable law and contractual obligations.

​

7. ACCESSING AND CORRECTING YOUR PERSONAL INFORMATION

Subject to certain grounds for refusal set out in the Act, you have the right to access your readily retrievable personal information that we hold and to request a correction to your personal information. Before you exercise this right, we will need evidence to confirm that you are the individual to whom the personal information relates.

​

In respect of a request for correction, if we think the correction is reasonable and we are reasonably able to change the personal information, we will make the correction. If we do not make the correction, we will take reasonable steps to note on the personal information that you requested the correction.

 

If you want to exercise either of the above rights, email us at hello@myma.ai. Your email should provide evidence of who you are and set out the details of your request (e.g. the personal information, or the correction, that you are requesting).

We may charge you our reasonable costs of providing you with copies of your personal information or correcting that information.

​

Our designated privacy function is responsible for overseeing privacy compliance, coordinating privacy requests and complaints, and supporting the review of privacy practices. Employees and contractors who handle personal information must comply with applicable privacy and security requirements and promptly report suspected violations. Privacy concerns or complaints may be submitted to hello@myma.ai. We will investigate complaints and provide a response within a reasonable period, subject to applicable legal requirements. Individuals may also raise complaints with the relevant privacy supervisory authority.

​

8. DELETING YOUR PERSONAL INFORMATION

We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, meet contractual obligations, comply with applicable legal requirements, resolve disputes, or maintain security. Retention periods are determined according to the nature of the information, its processing purpose, applicable laws, and contractual requirements.

 

Subject to certain grounds for refusal set out in the Act, you have the right to request the deletion of your personal information that we hold. Before you exercise this right, we will need evidence to confirm that you are the individual to whom the personal information relates.

​

If you want to exercise the above rights, email us at hello@myma.ai. Your email should provide evidence of who you are and set out the details of your request.

​

9. DATA TRANSFERS OUTSIDE THE EU/EEA

When we transfer personal data from the European Economic Area (EEA) we will ensure such transfers are in compliance with relevant data protection laws, including, if applicable, EU Standard Contractual Clauses, or a European Commission positive adequacy decision under Article 45 of the GDPR. In other words, your rights and protections remain with your data.

​

10. EU REPRESENTATIVE

We value your privacy and your rights as a data subject and have therefore appointed Prighter Group with its local partners as our privacy representative and your point of contact for the following regions:

  • European Union (EU)

 

Prighter gives you an easy way to exercise your privacy-related rights (e.g. requests to access or erase personal data). If you want to contact us via our representative, Prighter or make use of your data subject rights, please visit the following website: https://prighter.com/q/14718598995

​

11. CHILDREN DATA

None of our services are intentionally directed at children under 16. We do not knowingly collect personal data from anyone under 16 years of age. If we become aware that we have unknowingly collected personal data from a child under the age of 16, we will make reasonable efforts to delete such information from our records. 

​

12. INTERNET USE

While we take reasonable steps to maintain secure internet connections, if you provide us with personal information over the internet, the provision of that information is at your own risk.

 

If you post your personal information on the website’s message board or social media, you acknowledge and agree that the information you post is publicly available.

 

If you follow a link on our website to another site, the owner of that site will have its own privacy policy relating to your personal information. We suggest you review that site’s privacy policy before you provide personal information.

 

We use cookies (an alphanumeric identifier that we transfer to your computer’s hard drive so that we can recognise your browser) to monitor your use of the website. You may disable cookies by changing the settings on your browser, although this may mean that you cannot use all of the features of the website. Cookies may be used for essential website functionality, performance analytics, user preferences, and marketing purposes where applicable. Where required by law, we obtain consent before placing non-essential cookies. Users may manage or withdraw cookie consent through available cookie preference controls, where implemented, or adjust their browser settings. Disabling certain cookies may affect website functionality.

​

bottom of page