Privacy Policy

Last updated: 1 October 2026

1. Introduction

Welcome to Tasman Tech. Tasman Tech Ltd ("we", "us" or "our") respects your privacy and is committed to protecting your personal information. This privacy policy explains how we collect, use, store and share personal information when you visit our website, use our dashboard or engage our services, and the rights you have under the New Zealand Privacy Act 2020. It forms part of our Terms of Service.

2. Our Ethical Commitment to Your Data

Tasman Tech adopts the principles of Ngā Tikanga Paihere. We view ourselves as Kaitiaki (guardians) of our clients' data. We ensure data use is transparent, culturally appropriate and handled with Pono & Tika (truth and fairness). We are committed to establishing ourselves as a highly ethical, transparent guardian of client data in New Zealand.

3. The Information We Collect

Personal information means any information about an identifiable individual. Depending on how you interact with us, we may collect:

  • Identity and contact information: your name, username, email address, phone number, company name and, if you add them, a profile photo and bio.
  • Account information: your password (stored only as a secure hash) or, if you sign in with Google, your Google account identifier, name and email address.
  • Project and enquiry information: details you provide when you request a quote, contact us, book a consultation or message us through the dashboard, including your website address and a description of the work.
  • Agreement and billing information: the agreements you sign (including your typed signature, the date and time of signing, and the IP address and browser used to sign), quotes, invoices, hourly rates, worklogs and payment status.
  • Access credentials: login details, API keys, access tokens or invitations to your systems (such as a CMS, source code repository, hosting, software or APIs) that you give us so we can complete agreed work.
  • Technical and usage information: your IP address, browser type and version, device and operating system, time zone, and how you use our website, collected through server logs, cookies and analytics tools (see section 6).

We collect most of this information directly from you. We may also receive information from Google when you use Google sign-in, and we may come across personal information stored in your website or systems while carrying out work for you. We only use that information to complete the agreed work.

4. How We Use Your Information

We use personal information to:

  • respond to enquiries, prepare quotes and schedule consultations;
  • create and manage your account and dashboard;
  • prepare, send and keep records of agreements, and carry out the agreed work;
  • issue invoices, collect payment and recover overdue amounts;
  • send service emails such as confirmations, signed agreements and invoices;
  • keep our website and systems secure and prevent misuse;
  • understand how our website is used and improve it, including measuring our advertising; and
  • meet our legal, tax and accounting obligations.

If you choose not to provide information we ask for, we may not be able to provide some services; for example, we cannot complete work on your website without access to it.

Handling of Access Credentials

Access credentials are only used for the task you have agreed to and are never shared outside the team working on it. Credentials you give us directly are deleted when the task is complete or the agreement ends. Where you grant access through a collaborator or invitation system (for example Shopify, Wix, Squarespace or GitHub), please revoke our access when the work is done.

5. Who We Share Your Information With

We do not sell your personal information. We share it only with service providers that help us run our business, and only as needed for the purposes above:

  • Google: cloud hosting and database services, business email, Google Calendar and Google Meet for bookings, Google sign-in, and Google Analytics.
  • Meta (Facebook): the Meta Pixel, used to measure the effectiveness of our advertising.
  • Our professional advisers (such as accountants and lawyers) and debt collection agencies, where needed to recover overdue amounts.

We may also disclose information where required by law, or where necessary to prevent a serious threat to someone's health or safety.

Overseas Storage and Disclosure

Some of these providers store or process information on servers outside New Zealand, including in the United States. We use reputable providers that are subject to privacy and security obligations comparable to those in the Privacy Act 2020.

6. Cookies and Analytics

We use essential cookies to keep you signed in to your account. After you first interact with a page, our website loads Google Analytics and the Meta Pixel, which use cookies and similar technologies to collect usage information such as pages visited, device and approximate location. You can block or delete cookies in your browser settings, and you can opt out of Google Analytics using Google's browser add-on. Blocking essential cookies may stop you from signing in.

7. How Long We Keep Your Information

  • Accounts that do not verify their email address within 7 days are permanently and automatically deleted.
  • Signed agreements, quotes and invoices are kept for at least 7 years, as required for New Zealand tax and business records, and so that we can show what was agreed.
  • Access credentials are deleted when the task is complete or the agreement ends.
  • Other information is kept while your account is active or while we need it for the purposes above, and then deleted or anonymised.

8. Data Security

We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. These include encrypted connections, hashed passwords, and limiting access to those employees, agents and contractors who have a business need to know. If a privacy breach occurs that is likely to cause serious harm, we will notify you and the Office of the Privacy Commissioner as required by the Privacy Act 2020.

9. Your Rights

You have the right to ask for a copy of the personal information we hold about you and to ask us to correct it. You can update most account details in your dashboard, or contact us using the details below. We will respond within 20 working days. We may need to verify your identity first, and we may keep information we are legally required to retain. If you are not satisfied with how we handle your request or complaint, you can contact the Office of the Privacy Commissioner at privacy.org.nz.

10. Changes to This Policy

We may update this privacy policy from time to time. The "Last updated" date above shows when it last changed. Significant changes will be highlighted on this page.

11. Contact Us

If you have any questions about this privacy policy, want to access or correct your information, or want to make a complaint, please contact us at: