Who PolicyPatch is
PolicyPatch is a New Zealand website compliance implementation service for small businesses. We are based in Auckland and operate as a fixed-scope implementation provider. PolicyPatch is not a law firm and does not provide legal advice.
What information PolicyPatch collects
Depending on how you contact us or use our intake flow, PolicyPatch may collect:
- Contact and business details such as your name, business/trading name, and email address.
- Website details such as your website URL, platform, and site type.
- Scope and setup information relevant to fit review, including form types, payment/checkout status, embedded tools/widgets, and submission-routing details.
- Tool information you provide (for example, analytics/tracking tools, email marketing tools, booking/form tools, and payment provider details where relevant).
- Optional privacy contact details if you provide a dedicated privacy contact name and email.
- Optional message content and later correspondence with PolicyPatch.
- Project administration information, and where relevant, invoicing/accounting details if you proceed with service delivery.
How information is collected
PolicyPatch currently collects information in these ways:
- Through the Request Setup form. In the current build, this form drafts an email to hello@policypatch.co.nz using your device email app (mailto) rather than sending to a separate embedded form processor.
- Through direct emails sent to hello@policypatch.co.nz.
- Through follow-up communications needed to review fit, confirm scope, request access, and progress work.
The Free Website Check on this website is a local on-page indicator only. In the current build, those quick-check answers are not submitted to PolicyPatch. The website also does not currently include analytics scripts, ad pixels, or cookie-banner consent tooling.
The current Request Setup form also does not include hidden personal-information fields or hidden marketing/tracking identifiers.
Why PolicyPatch collects and uses it
PolicyPatch uses personal information to run the service in a practical, limited way, including to:
- review whether your website is a fit for the core package;
- respond to enquiries and communicate next steps;
- confirm scope, access needs, and implementation details;
- prepare and manage service delivery and completion records;
- maintain business and administration records, including invoicing/accounting where relevant; and
- meet legal or regulatory obligations where required.
Who information may be shared with
PolicyPatch does not sell personal information. Information may be shared where reasonably necessary to operate the business and deliver services, including with service providers that support:
- website platform and hosting operations (including Carrd where relevant);
- email and business workspace tools (for example Google Workspace);
- internal project administration tools (for example Google Docs and Google Sheets); and
- accounting/invoicing operations (for example Hnry).
Information may also be disclosed where required by law, or where needed to protect PolicyPatch’s legal rights.
Overseas storage or service providers
Some service providers used by PolicyPatch may store or process information outside New Zealand. PolicyPatch uses established providers and takes reasonable steps to ensure information is handled appropriately for business operations.
Whether information is required or optional
Some details in the Request Setup intake are required so PolicyPatch can assess fit and respond properly. This includes core contact details and key scope-review information.
Other details are optional, such as optional message content, optional tool detail fields, and optional dedicated privacy contact fields (where a separate privacy contact is used). If required details are not provided, PolicyPatch may not be able to process your request.
Access and correction
You can ask for access to personal information PolicyPatch holds about you, and you can ask for it to be corrected if it is inaccurate. Please email hello@policypatch.co.nz.
How information is protected
PolicyPatch uses practical safeguards appropriate for a small business service workflow, including limiting access to business records, using provider account protections, and only using information for service and administration purposes. No method of online transmission or storage is completely risk-free, and PolicyPatch cannot guarantee absolute security.
How long information is kept
PolicyPatch keeps personal information only for as long as reasonably needed for the purpose it was collected for, and for related business recordkeeping or legal obligations. Information that is no longer needed is deleted or otherwise handled appropriately.
Privacy contact / privacy officer
Privacy Officer, PolicyPatch
hello@policypatch.co.nz
Complaints
If you have a privacy concern or complaint, contact PolicyPatch first so we can try to resolve it. You may also make a complaint to the Office of the Privacy Commissioner if needed.
Changes to this policy
PolicyPatch may update this Privacy Policy from time to time to reflect changes to website features, business operations, or legal requirements. The latest version will be published on this page with an updated date.