Privacy policy
How Bathroom Renovation NZ handles your personal information, under the Privacy Act 2020.
Who we are
Bathroom Renovation NZ is a trading name of Kauri Ridge Holdings Limited, NZBN 9429050000017. Level 1, 12 Kōwhai Lane, Grey Lynn, Auckland 1021. Privacy enquiries: hello@bathroom-renovation.co.nz.
What we collect, and why
- When you book or join the waitlist for a visit: your name, email, phone, the property address or suburb, and what you told us about the bathroom, the budget band and your preferred times. We need this to arrange and carry out the visit and to write the plan.
- When you email yourself a calculator estimate: your email address and the estimate.
- When you use the contact or trade-partner form: whatever you put in it.
- When you pay: Stripe collects and holds your card details on its own hosted checkout. We never see or store your card number. We receive a record that a payment succeeded, the amount, and the name and email on it.
- When you browse: anonymous analytics about which pages and steps are used, and standard server logs including IP address. We do not use advertising trackers.
We collect this directly from you. Giving it is voluntary, but without it we cannot arrange a visit or reply to you.
What we do with it
- Arrange and carry out your visit, and produce your plan, budget and consent assessment.
- Reply to you, and send the confirmation and follow-up emails for something you asked for.
- Where a job proceeds, share what a subcontractor needs to do their part: the address, access details, the scope and your contact details for arranging a time.
- Meet our legal and tax obligations.
- Understand, in aggregate, which parts of the site are useful.
We do not sell your information, and we do not send marketing you did not ask for. If we ever start a mailing list it will be opt-in with an unsubscribe link.
Referrals
The visit form has an unticked box asking whether, if we do not cover your area, we may pass your enquiry to a bathroom specialist who does. We may be paid a referral fee for that. We only pass anything on if you tick it, and no referral arrangement exists yet, so nothing is being passed on today.
Photographs
Photographs taken at a visit, or that you send us, are used to prepare your plan and to brief the trades on your job. They are never published and never used in marketing unless you separately give written permission.
Who else handles it, and where
We use overseas service providers, so your information is stored and processed outside New Zealand. We only use providers that are subject to privacy laws or contractual protections comparable to the Privacy Act 2020, as required by information privacy principle 12.
| Provider | What they do | Where |
|---|---|---|
| Vercel | Hosts this website and runs its server code | United States and other regions |
| Stripe | Processes card payments on its own hosted checkout, and holds the payment record | United States, Ireland and Australia |
| Notion | Stores form submissions and enquiries so we can act on them | United States |
| Resend | Sends the emails we send you | United States |
| PostHog | Product analytics: which pages and steps are used, in aggregate | United States |
We also share your details with the subcontractors on your job where that is needed to do the work, and with our accountant and, if ever necessary, our lawyer or insurer.
How long we keep it
- Waitlist entries: until you ask us to remove you, or two years with no contact.
- Visit records, plans and budgets: seven years, because they document work we were paid for and may be needed for a warranty claim.
- Records packs for a completed renovation: kept for as long as we hold them, and given to you on completion.
- Financial records: seven years, as tax law requires.
- General enquiries: two years.
Your rights
Under the Privacy Act 2020 you can ask us for a copy of the personal information we hold about you, and ask us to correct it if it is wrong. Email us and we will respond within 1 working day and in any case within 20 working days. You can also ask us to delete information we no longer need.
Cookies and analytics
The site uses PostHog to understand which pages and steps are used. It sets a cookie to tell one visit from another. We do not run advertising or retargeting trackers and we do not sell analytics data. If your browser sends a Do Not Track signal, or you block the analytics script, the site works normally.
Security
The site is served over HTTPS. Payments run on Stripe's hosted checkout so card details never reach our systems. If we ever have a privacy breach that is likely to cause serious harm, we will notify you and the Office of the Privacy Commissioner as the Privacy Act requires.
Complaints
Email us first. If you are not satisfied, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.
Changes
We may update this policy. The date at the top says when it last changed. Material changes will be described here rather than made quietly.
See also our terms of trade.