Health & Safety Policy & Objectives

1. Policy Statement Waka on Avon, is committed to providing and maintaining a safe and healthy environment for all manuhiri (guests), visitors, workers, contractors, managers, and directors involved in or affected by our operations on and beside the Ōtākaro Avon River. As a PCBU under the Health and Safety at Work Act 2015, we accept our primary duty of care and will take all reasonably practicable steps to eliminate or minimise risks to health and safety. For us this is not only a legal duty but an expression of manaakitanga and kaitiakitanga: the safety of our manuhiri and kaimahi, and the mana of our organisation, are paramount. Safety overrides revenue, always.

2. Context & Business Objectives Our core purpose is to share mātauranga Māori and authentic cultural experiences with manuhiri while acting as guardians of the awa, our heritage, and the safety of all who take part. Waka on Avon was established in March 13 2003 and operates from 794 Colombo Street Oxford Terrace, Ōtautahi Christchurch, currently employing approximately 15 workers. Our operations comprise the Kaitiaki (45 min) and Manaaki (75 min) on-water waka experiences, the Te Ara guided walking tour (8 stops), catered traditional food service, and cultural performances. Effective health and safety management directly supports our objective of delivering these experiences to Qualmark Gold standard, sustainably and without harm.

3. Our Commitment Waka on Avon will: • Provide the systems, processes, equipment, information, training and supervision needed for a safe and healthy environment. • Identify hazards and assess and control risks in line with AS/NZS ISO 31000:2018 and our Risk Management Plans. • Engage and consult with workers on health and safety matters that affect them. • Report, record and investigate incidents and near misses, and learn from them. • Prepare for emergencies and maintain the competence of our crew through training and drills. • Verify that our controls are carried out in practice, not just documented, through independent assurance. • Continuously improve our health and safety performance and culture. • Honour Te Tiriti o Waitangi by working in partnership, supporting equitable and culturally safe outcomes, and actively protecting mātauranga Māori, tikanga and the wellbeing of kaimahi, manuhiri, whānau, hapū and iwi connected to our mahi.

4. Our Values & Culture Our health and safety culture is grounded in kaupapa Māori values that guide every operational decision:

• Kaitiakitanga — guardianship of the awa, our heritage, and the safety of our people and manuhiri. • Manaakitanga — genuine care and hospitality, ensuring physical and cultural safety. • Whanaungatanga — strong relationships with our people, community and iwi. • Tikanga — upholding correct cultural protocols in all we do.

Alongside these, all personnel are expected to demonstrate: Responsibility (play an active role, assume nothing is covered by someone else); Stop, think & act (anticipate what could go wrong before acting); Communication (raise concerns openly and promptly); and Partnership (health and safety is everyone's responsibility).

5.Our Vision & Mission Health and Safety Vision: Waka on Avon will be recognised as a safe, culturally authentic and responsible Māori tourism operator that uses appropriate technology, effective systems and strong cultural leadership to protect the wellbeing of manuhiri, kaimahi, contractors, whānau and the wider community.

Health and Safety Mission: We will plan, deliver and continuously improve all Waka on Avon experiences so that cultural integrity, visitor care, operational discipline, environmental responsibility and legal compliance are embedded into everyday work on and beside the Ōtākaro Avon River.

6. Legislation & Standards This policy aligns with the Health and Safety at Work Act 2015 and regulations, the Maritime Transport Act 1994 and Maritime NZ requirements, AS/NZS ISO 31000:2018, AS/NZS 4804:2001, Qualmark Gold standards, and the principles of Te Tiriti o Waitangi. 8. Responsibilities, Communication & Review Specific duties for officers, managers, crew roles and workers are set out in the companion Roles & Responsibilities document (WOA-HSR-2026-001). This policy is communicated to all personnel through induction and ongoing engagement, displayed at our base, and reviewed at least annually or after any significant incident or change in operations. Any changes are communicated to all personnel.

Privacy Policy

We collect data in relation to the usage of the websites; kotane.co.nz and its newsletters, to facilitate bookings, enhance visitors' experiences, and to stay in touch with people who are interested in our products.

We respect your privacy and take care in our handling of information. This includes any data and personal information that we may collect during your visit to the websites, your bookings for any of our products, and subscriptions to our email newsletter.

This privacy policy governs our data collection, processing and usage practices. It also describes your choices regarding use, access and correction of your personal information.

If you do not agree with the data practices and protection described in this policy, please adjust your browser to block all cookies, or discontinue using the websites. Continued use of the websites confirms that you accept the practices described in this privacy policy.

YOUR BROWSING

You are free to explore the websites without the requirement to provide any personal information. We will not know your name, your email address or any other personally identifiable information through your websites browsing activity unless you access the website from a link in an email that we sent to you or continue to book an activity with us through our websites.

INFORMATION WE COLLECT AND HOW WE USE IT

When we need to collect personally identifiable information from you to process your booking or to add you to our newsletter list, we will ask you to provide us with the information required.

HOW WE USE INFORMATION THAT WE COLLECT

1. Cookies and Pixel Tags

Our websites may use cookies and pixel tags to aggregate and understand trends, audience demographics, and usage of the websites and the pages within it, to enhance your experience of the websites and to provide you with relevant content of interest across the websites, social media and online advertising platforms. We monitor usage of our websites to improve the quality of the site for future users and to identify any issues with the site's performance.

• Cookies and pixel tags are encrypted strings of text that your computer downloads when visiting websites. They do not corrupt or damage your computer, programs or computer files, and they do not ascertain any personally identifiable information about you apart from what you voluntarily provide us. Accepting a cookie does not give us access to your computer or personal information stored on your hard drive under any circumstances.

• You have the option to set your browser to refuse cookies, however this may impact on your browsing experience of this and other websites. You also have the ability to delete cookies from your browser at any time.

2. Information Collected from Surveys and Offers

We may occasionally conduct online surveys, newsletter subscriptions and promotional offers via pop-up windows on our websites.

• Participation in such surveys and offers is voluntary, and you may decline to participate. Data collected through these surveys and offers will be used by our business and will not be shared with any third parties other than those retained to administer the surveys and offers.

Survey responses will not be personally identifiable unless you choose to add your name and email address to your responses.

3. Information Collected for Prospecting Purposes

Information that we collect and manage for our marketing activities is used and protected according to this Privacy Policy.

• Our websites use a third-party booking system that allows visitors to complete their booking for experiences within the websites. The booking provider is contractually prohibited from using any personally identifiable information collected through this system for any other purpose.

• Please note that despite the best efforts possible, no one can give absolute assurance that information intended to be maintained as private, whether transmitted via the Internet or otherwise, cannot be accessed inappropriately or unlawfully by third parties. We have taken and will continue to take reasonable steps to ensure the secure and safe transmission of your personal information, however we encourage you to exercise caution with storage and disclosure of your personal information in any forum – digital or otherwise.

4. Emails/Newsletters

From time to time, we may use your personal information for internal or external marketing and promotional purposes or analytical purposes. For example, we may send you our monthly email newsletter with updates about our tour experiences and special offers. On occasion, we may offer a special promotion in conjunction with a promotional partner and may share your response to that specific promotion with that partner to fulfil the promotion’s deliverables.

Every time you receive an email, you will be provided the choice to opt out of future emails by following the instructions provided in the email. You may also opt out by contacting us.

We will never send you an email requesting any password, credit card number, social security or IRD number or other similar personal or private identification information. If you receive an unsolicited email that looks like it is from Ko Tāne, but asks you for personal information, it is a fraudulent email, and you should not reply or provide such information. If you do receive an email that you suspect is fraudulent, we’d like to know about it so we can warn other customers. Please contact us via a separate email (not by replying to the suspicious email) with the details and preferably a screenshot of the suspicious email – please don’t forward us the email.

5. Content/Tour Media

From time to time, we may share content/photos/videos/other media taken during tours onto our social media. We tend to ask if guests are happy to have their image taken and used for this purpose.

Guests are welcome to request not to be used in our social media posts and stories, however, if not indicated we may use content acquired on tours. We also welcome guests to share media taken of our Waka’s and staff members. Content may be used for promotion or shared with approved third parties, such as tour operators for sharing with their group. Please contact us if you would prefer not to have your image in content taken, promoted or shared.

SECURING THE STORAGE OF PERSONAL INFORMATION

We treat the personal information you provide to us as confidential information. We have taken and will continue to take reasonable steps to ensure the secure and safe storage of your personal information.

• When purchasing a ticket for a tour from our website, Ko Tāne - Waka on Avon may collect

personal information, including email address, phone number, customer’s name, for the purpose of reservation.

• Personal data is retained only for as long as necessary for the purposes for which it was collected, including legal or record-keeping requirements.

DELETION OF PERSONAL INFORMATION

If you would like us to delete all your personal information (except for information that we keep for record-keeping and billing purposes) and/or remove your name and address from promotional lists (including any personal information gathered by our service providers) and place your name on our “do not contact” list, please contact us.

DISCLOSURE OF INFORMATION TO THIRD PARTIES

We use the services of third parties, such as marketing agencies, online booking services, email service providers and digital platforms, to assist us with marketing the websites and processing customer bookings.

These parties are contractually prohibited from using personally identifiable information for any purpose other than for the purpose specified by us. We provide non-personally identifiable information to selected service providers to enable them to perform their contractual obligations to us, such as improving the online browsing experience for our visitors. We do not sell personal information.

OTHER SITES

We are responsible for the privacy policy statement and content of all websites. We are not responsible for the privacy practices or the use of cookies on websites that you have accessed these websites from, or to any websites that you may access from these websites.

LEGAL ISSUES

This Privacy Policy statement will be governed by and construed in accordance with New Zealand law, and you agree to submit to the jurisdiction of the courts located under the jurisdiction of the Court of Appeal of New Zealand for the resolution of any disputes.

CHANGES TO THE PRIVACY POLICY

In the future, we may need to update this privacy statement. All changes will be made here so that you will always know what information we gather, how we might use that information and whether we will disclose it to anyone. This statement was last updated on 15 June 2026.

CONTACTING US ABOUT PRIVACY ISSUES

Please contact us if you have any comments, suggestions or questions about our privacy policy statement or privacy practices.