Privacy

The only place this site asks you for anything is the contact form. It asks for your name, your email address, a phone number, your business name, what your site is doing badly, a budget band and a timeframe. Your business website is optional. That is eight questions, and there is nothing else on the site to fill in.

The form also sends two things you did not type: one hidden field a person never sees, and how long the page had been open when you pressed send. Both exist to tell a script apart from a person. They are read once, when your enquiry arrives, and they are not included in the email or kept afterwards.

To stop the form being used to send us thousands of messages, the server counts submissions from your network address and refuses more than three in an hour or ten in a day. That count lives in the server’s memory, is never written to a file or a database, and is lost whenever the server restarts. It is not joined to anything else about you.

If you accept analytics cookies, Google Analytics records how the site is used. See the cookies section below and the cookies page.

We use what you put in the contact form to read your enquiry, look at your site and reply to you. That is the whole purpose. We do not add you to a mailing list and we do not use your details for advertising.

We use analytics, if you allow it, to see which pages are read and where visitors arrive from, so we can make the site better. Analytics data is aggregated and we do not use it to identify you.

Sending the form sends two emails through Resend, an email delivery service. The first is your enquiry, to us. The second is a copy back to the address you gave, so you have a record of what you sent. Resend processes both on our behalf and its servers may be outside New Zealand. Your enquiry then sits in our mailbox.

Analytics data, if you have accepted it, is processed by Google Analytics on servers that may be outside New Zealand. Nothing is sent to Google until you accept.

The site is hosted by Vercel, whose servers may also be outside New Zealand, so every page you ask for passes through them. We use their Speed Insights measurement to see how quickly pages load. It sets no cookies and does not identify you.

We do not sell personal information and we do not share it with advertisers.

The site stores one entry of its own in your browser, to remember whether you accepted or rejected analytics. It holds your answer, the date you gave it and the version of the notice you answered, it stays in your browser, and it is never sent to us. Google Analytics sets its cookies only after you accept. You can change your choice at any time from the cookies page, and withdrawing consent stops analytics from that point.

There are no accounts and no logins. There is nothing to sign up for, nothing to post, and no comment field. Nothing you send us is published on the site or shown to another visitor: an enquiry goes to our mailbox and stops there. The pages are written as code in one repository rather than typed into a content system, so there is no third party holding a copy of them and no user-supplied content rendered back into a page.

We do not profile you, build an advertising audience, or make any decision about you automatically. The only thing that reads your enquiry is a person.

The site is served over HTTPS only, and browsers are told to refuse an unencrypted connection to it for the next two years. It sends a content security policy that names the few places a page is allowed to load anything from, which is itself and Google Analytics and nothing else, along with headers that stop the browser guessing file types, limit what is passed on when you follow a link away, and switch off camera, microphone, location and ad-targeting access for the site entirely.

We keep an enquiry for as long as we are talking with you about it, and for a reasonable time afterwards in case you come back. If you ask us to delete it, we delete it from our mailbox.

Under the Privacy Act 2020 you can ask to see the personal information we hold about you, ask for it to be corrected, and ask for it to be deleted. To do any of those, send a message through the contact form saying what you want. We will reply within one to two working days and act on it as soon as we can.

If you are not satisfied with how we have handled your information, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

If this page changes, the date at the top changes with it. We will not change what we do with information you have already given us without telling you.