Privacy

Last updated 19 September 2026. Plain words; this is what we actually do.

Who we are

Holdall is software in development for lodges and hotels to record what is arranged for guests, and to assist with tracking revenue.

Whose information, and why

The property is the customer and decides what goes into Holdall. It typically holds guests' names, room numbers, stay dates, email addresses and mobile numbers, notes the desk writes about a stay, and the items and charges arranged for the guest. The property uses this to run its desk, prepare guest itineraries, post charges to its own property management system, pay outside operators and close its month. Holdall holds it on the property's behalf and for no other purpose. We do not sell it, use it for marketing, or share it with anyone except the services below that keep the system running.

Staff members' names, initials, email addresses and sign-in records are held so that each entry is attributed to the person who made it.

Where it is kept

Each property's data lives in its own database on a server in Sydney, Australia (Fly.io), with an encrypted backup copy in object storage. Email sent from Holdall goes through the property's own mail provider. We use no analytics or advertising services on the application.

How long

For as long as the property uses Holdall. When a property leaves, we hand over an export of its data and delete the database and backups within 30 days, unless the law requires us to keep records longer.

Access and correction

If you are a guest and want to know what a property holds about you, or to correct it, ask the property; they control the record and can see and change it directly. If you contact us instead we will pass the request to the property and help them answer it. Staff members can ask their manager or us.

Security

Connections are encrypted (HTTPS). Sign-ins use a personal email and PIN; PINs are stored hashed, not in plain text. Access is limited to the property's own staff. If we ever become aware of a breach that could cause harm, we will tell the property and the Office of the Privacy Commissioner as the Privacy Act 2020 requires.

Questions

nick@holdall.co.nz. If you are not satisfied with our answer you can contact the Office of the Privacy Commissioner, privacy.org.nz.