Privacy Policy

What we collect

If you RSVP to an event

• First name and email address
• RSVP response (going, maybe, or can't make it)
• Check-in status if the host marks you as checked in at the event
• Mailing list opt-in, if the event organiser has enabled it and you choose to check the box. This gives your name and email to that organiser for their own contact list — it is separate from your RSVP and optional.

If you host an event

• Your name and email address. We send you a confirmation link to verify your email before your event is listed — events from unverified addresses are not published.
• Event details you provide (title, description, date, location, address)
• An event cover photo, if you upload one

If you create an account

Creating an account is optional — you can RSVP and host events without one. An account lets you manage everything from a single dashboard.

• Email address, used to send you a one-time sign-in link (we don't store a password)
• Display name, required when you complete your profile
• Bio and social media links, optional, displayed on your public profile page
• Profile photo, optional, displayed on your public profile page

If you submit an organisation profile

• Organisation name, description, and contact email
• Logo and cover image, optional

Automatically

• An RSVP cookie is stored on your device when you RSVP to an event. It contains a random identifier (not your name or email) so the site can recognise your existing RSVP when you return. One cookie is set per event and expires after 365 days.
• An auth session cookie is set when you sign in via magic link. It maintains your signed-in state across page loads and is cleared when you sign out.
• Server logs recorded by our hosting provider (Netlify) may include your IP address, browser type, and pages visited. These are used for security and operational purposes only. IP addresses are also used temporarily to limit the rate of RSVP submissions — they are not stored beyond the request.
• Address text you type into the location field when creating an event is sent to Google Places in real time to generate autocomplete suggestions.
• Device location, if you use the “Near me” filter. Your browser will ask for permission before sharing your location. Your coordinates are used only in your browser to sort nearby events by distance — they are never sent to our servers, stored, or shared with any third party. You can decline the permission prompt without affecting any other functionality.

We do not use analytics, tracking pixels, or advertising cookies.

Why we collect it

We collect personal information to:

• Manage event listings, RSVPs, and attendance records
• Verify email ownership before an event is published
• Send event hosts transactional emails about their event's status (submission confirmation, approval, rejection, deletion)
• Allow hosts to view and manage their RSVP list
• Maintain optional user profiles and organisation pages
• Pass attendee names and email addresses to event hosts when an attendee has opted in to receive communications from that host

We only collect information that is necessary for these purposes.

How we collect it

We collect personal information directly from you when you submit a form on the site (RSVP form, event hosting form, sign-in form, or profile and organisation form). We do not collect personal information from third parties.

What is publicly visible

When you RSVP to an event

• Your first name and response appear in the attendee list on the event page once your RSVP is approved — or immediately if the event does not require approval. Your email address is never shown publicly.
• The full event address is shown to all visitors for events that do not require RSVP approval. For events with approval required, the full address is only visible to approved attendees.
• If you opt in to receive communications from the host, your email address will be shared with that host.

When you host an event

• Your name is displayed on the event page as the host. Your email address is not shown publicly.

When you have a profile or organisation page

• Your display name, bio, social links, and profile photo are displayed publicly on your profile page. Organisation pages work the same way.

Who we share information with

We use the following third-party services to operate the platform. Your information may be transferred to and stored in countries outside New Zealand as a result.

Event host mailing list opt-in

When you RSVP to an event, you may be given the option to opt in to receive communications from the event host. If you opt in, your name and email address are included in the host's RSVP data. From that point the host is the agency responsible for that email under the Privacy Act 2020 and the Unsolicited Electronic Messages Act 2007. Opportunity For is not responsible for how hosts manage their mailing lists — to unsubscribe, contact the host directly.

We do not sell or share your personal information for advertising or unrelated purposes.

Data retention and deletion

• Active event listings and RSVP data are retained for as long as the event remains on the platform.
• Server logs recorded by our hosting provider are retained according to their own policies.
• When an event is deleted, we retain the event and its RSVP data for a period before permanent deletion. Contact us if you need data removed sooner.
• You can request deletion of your personal information at any time by contacting us (see below).
• Cookies can be cleared through your browser settings at any time.

Your rights

Under the Privacy Act 2020, you have the right to:

• Access any personal information we hold about you
• Request correction if you believe any information is inaccurate or incomplete
• Request deletion of your personal information

To exercise any of these rights, contact us at the address below.

If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner:

• Website: privacy.org.nz
• Phone: 0800 803 909

Privacy breaches

If we become aware of a privacy breach that is likely to cause serious harm, we will notify affected individuals and the Office of the Privacy Commissioner as required by the Privacy Act 2020.

Contact

For any questions or requests about your personal information:

hello@opportunityfor.nz

Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page. This policy was last updated on 5 May 2026.