Draft — to be reviewed before launch. This page isn't final and isn't legal advice yet.

Privacy policy

What we collect, why, who sees it, and how to see or correct it. In plain English.

Draft of 12 October 2026. Not yet in force.

The short version

  • We collect what you tell us (like your name, mobile and business details) so we can build your free preview and talk to you about it.
  • Your enquiry is emailed to us. It isn't stored in a database on our website.
  • Card details go straight to Stripe. We never see your full card number.
  • No analytics, no advertising trackers and no tracking cookies.
  • We never sell your information.
  • You can ask to see or correct your information any time: support@kiwifront.co.nz.
On this page

Who we are

Kiwifront is a New Zealand business. We build and look after websites for New Zealand businesses. In this policy, "we" and "us" means Kiwifront, and "you" means anyone whose personal information we hold.

This policy covers kiwifront.co.nz, the example websites on it, and the services we provide. It follows the New Zealand Privacy Act 2020.

You can reach our privacy officer at support@kiwifront.co.nz.

What we collect

When you ask for a free preview

The form asks for your name, mobile number, email address, business name and the kind of business you run. You can also add your current website, notes, and the plan you picked on our price builder.

When you contact us

If you email, phone or message us (including on WhatsApp), we keep what you send us so we can reply and follow up.

When you become a customer

  • Billing details: your name, business name, email, billing address and, if you give it, your GST number. You enter these on Stripe's secure checkout.
  • Card details: these go straight to Stripe. We only see limited details, such as the card type, the last four digits and whether a payment worked.
  • Your website content: the words, photos, logo and business details you give us for your site.

Technical information

Like every website, ours receives some technical details when you visit: your IP address, browser and device type, the page you asked for and the time. Our host, Cloudflare, uses these to deliver pages and protect the site from attacks. Our website also checks your IP address briefly to stop the enquiry form being flooded with spam. We don't use these details to build a profile of you.

You don't have to give us any information. If you don't give us a way to contact you, though, we can't build or send your preview.

Information from other places

To build a preview that looks like your business, we may look at information you've already made public, such as your current website, your Google Business Profile, your social media pages and public business listings. This can include your business name, address, opening hours, services, photos and reviews, and sometimes a person's name (for example, a sole trader's).

When we send you a preview, we'll tell you where its information came from. If you'd rather we didn't use it, tell us and we'll remove it.

Why we collect it

We use your information to:

  • build your free preview and talk to you about it;
  • set up, run and update your website if you become a customer;
  • bill you, send GST invoices and keep the business and tax records the law requires;
  • answer your questions and give you support;
  • keep our website and your website secure;
  • meet our legal obligations.

We only use your information for these purposes, or for something directly related. We'll only send you marketing emails if you've agreed to get them, and every one will have an easy way to unsubscribe.

Who we share it with

We never sell your information. We use a small number of trusted services to run Kiwifront. They handle your information only to provide their service to us.

ServiceWhat it does for usWhere it's based
CloudflareHosts our website and our customers' websites, protects them from attacks, and forwards email.USA, with servers around the world
Microsoft 365Runs our email inbox, where enquiries and messages arrive. Enquiries from our website form are sent to that inbox through Microsoft 365 (Microsoft Graph).USA company; may store data outside New Zealand
ResendWe may use Resend as a backup to send enquiries from our website form to our inbox.USA
StripeTakes card payments and runs monthly billing.USA and Ireland
XeroOur accounting system, for invoices and tax records.New Zealand company; data held in the USA
WhatsApp (Meta)Only if you choose to message us on WhatsApp.USA

We may also share information with our professional advisers (such as our accountant or lawyer), or when the law requires it, for example with a court or a government agency.

Storage outside New Zealand

Most of the services above store information outside New Zealand, mainly in the USA and Australia. They hold it on our behalf to provide their service, and they aren't allowed to use it for their own purposes. That means we stay responsible for it under the Privacy Act, wherever it's stored.

We choose services with strong security and privacy commitments. If we ever need to send your information to someone overseas for their own use, we'll only do so where the Privacy Act allows it (Information Privacy Principle 12), for example where they're bound by privacy rules comparable to ours, or you've agreed after we've told you the risks.

How long we keep it

We keep information only as long as we need it, then delete it.

InformationHow long
Enquiries that don't go aheadUp to 12 months after we last talked, then deleted.
Your previewTaken down when you say no, and deleted within 30 days.
Your website contentWhile you're a customer. After you leave, we send you a copy and delete ours within 90 days.
Billing and invoices7 years, because New Zealand tax law requires it.
Technical logsA short time (usually days) for troubleshooting and security.

Keeping it safe

  • Enquiries are emailed to us, not stored in a database on our website, so there's less to protect.
  • Our website and your website use secure, encrypted connections (HTTPS).
  • Our accounts use strong passwords and two-step sign-in, and only people who need your information can see it.
  • Card payments are handled by Stripe, which meets the card industry's security standard (PCI DSS).

No system is perfectly secure. If a privacy breach happens that's likely to cause serious harm, we'll tell you and the Privacy Commissioner as soon as we practicably can.

Seeing and correcting your information

You can ask us for a copy of the personal information we hold about you, and ask us to correct anything that's wrong. Email support@kiwifront.co.nz. It's free.

We'll reply within 20 working days. We may need to check who you are first, so we don't give your information to someone else. If we don't agree to make a correction, you can ask us to keep a note of the correction you asked for with your information.

Complaints

If you're unhappy with how we've handled your information, please tell us first at support@kiwifront.co.nz. We'll look into it and get back to you.

If you're still not happy, you can complain to the Office of the Privacy Commissioner at privacy.org.nz or on 0800 803 909.

Cookies and local storage

Our website doesn't use analytics, advertising trackers or tracking cookies.

Some of our example websites (for made-up businesses) remember a few small things in your own browser, so they work the way you'd expect. Nothing here is sent to us:

  • whether you've turned the sound on or off;
  • the items in a demo order, while you try out the ordering pages;
  • whether you've already seen a page-opening animation during this visit.

You can clear these any time in your browser settings.

Cloudflare, our host, may set a strictly necessary security cookie if it needs to check that a visitor isn't a bot. When you pay, Stripe's checkout page uses its own cookies to prevent fraud. Stripe's privacy policy explains these.

If we ever add analytics, we'll update this policy first.

Your customers' information

When we run your website, people may contact you through it, for example with a booking request or a message. That information is sent to you. We handle it only to run your website for you, and we don't use it for anything else.

Your business is responsible for how you use your customers' information, and your website should have its own privacy policy. We're happy to help you with one.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed. If we make an important change, we'll email our customers before it takes effect.

Contact us

For any privacy question or request, email support@kiwifront.co.nz.