Last updated 24 April 2026. Short, plain-English, and compliant with the NZ Privacy Act 2020.
Orchard Spin is a casino-affiliate editorial desk operating from Auckland, New Zealand, under the domain plantexpressnz.co.nz. Contact [email protected] for any privacy-related enquiry. This policy describes how we collect, use and share personal information under the New Zealand Privacy Act 2020.
When you load any page on plantexpressnz.co.nz, the Cloudflare edge records your IP address, browser identifier, the page requested, and a truncated session cookie for traffic analytics. We do not collect names, email addresses or payment information unless you voluntarily submit them via the contact form.
When you click an affiliate link to a casino, Linkly receives the click event — your IP, a short-form referrer, the destination, and a timestamp. No personal identifiers are attached.
The site runs minimal cookies: a Cloudflare session cookie for performance caching, and an anonymous analytics cookie that expires after 30 days. We do not run third-party advertising pixels, retargeting scripts, or cross-site behavioural tracking. Browser-level "do not track" signals are respected — analytics cookies are not set if the browser flag is on.
When you click a CTA marked "Visit [casino name]" or equivalent, your browser is redirected through linkly.link and then to the casino's landing page. The casino receives a subid identifying us as the referrer, and any standard web-request data their servers log. They do not receive anything Orchard Spin knows about you that their server would not record anyway.
If you submit the contact form, we retain your message, name and email to respond. Messages are kept in the shared team inbox for one year then deleted. We do not add you to any marketing list and there is no email newsletter to opt out of.
Under Information Privacy Principles 6 and 7, you have the right to access any personal information we hold about you and to request correction of inaccurate information. Given the minimal collection above, in practice this covers any contact-form email we have received from you. Email [email protected] with the subject "Privacy request" and we will respond within 20 working days, which is the statutory window.
Cloudflare, Linkly and Google Fonts all process some data on servers outside New Zealand (primarily the United States and Europe). We do not transfer data for our own purposes beyond what those providers require to deliver the service.
The site runs on HTTPS end-to-end. Our team inbox uses two-factor authentication. We do not store casino account credentials, payment instruments or KYC documents at any point — those stay between you and the casino you chose.
Online casino content is restricted to adults aged 18 or over. We do not knowingly collect any personal information from anyone under 18. Orchard Spin is not directed at children and we take reasonable steps to ensure our content is not accessible to minors.
We will post revisions here with a revised "last updated" date at the top. Material changes that affect how we handle your data will be flagged with a banner on the homepage for at least 14 days.
If you believe we have mishandled your personal information, email [email protected] first — we read every message. If you are not satisfied with our response, you may escalate to the Office of the Privacy Commissioner: privacy.org.nz, 0800 803 909.