Privacy Policy
Last updated: 27 July 2026
1. Who We Are
SiteLenz Ltd (“SiteLenz”, “we”, “us”, or “our”) operates the property intelligence service at sitelenz.co.nz. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the New Zealand Privacy Act 2020.
2. Information We Collect
We collect the following information:
- Email address: Provided when you purchase a report. Used to deliver your report and for transactional communications.
- Property address: The Auckland address you search or purchase a report for. Used to generate your report.
- Payment information: Processed directly by Stripe. We do not store your card details. We receive a transaction reference and payment status from Stripe.
- Usage data: Information about how you use the service, such as searches, page visits, and reports purchased. Analytics data may be linked to an account or email address where you sign in or make a purchase.
- Technical data: IP address, browser type, and device information collected automatically via server logs and standard web infrastructure.
3. How We Use Your Information
We use your information to:
- Generate and deliver your property report.
- Process your payment via Stripe.
- Send transactional emails (report delivery, receipts).
- Improve the accuracy and quality of our service.
- Comply with legal obligations.
We do not use your information for unsolicited marketing without your consent.
4. Data Sharing
We do not sell your personal information. We share data only with the following service providers who process it on our behalf:
- Stripe – Payment processing. Stripe's privacy policy applies to data they collect.
- Resend – Transactional email delivery (report emails, receipts).
- Supabase – Database and backend infrastructure, hosted in Australia (ap-southeast-2 region).
- Vercel – Web hosting and serverless functions.
- PostHog – Website and product analytics used to understand service use and improve the website. SiteLenz records explicit funnel events and does not send searched property addresses to PostHog.
- Meta – Advertising measurement for Facebook and Instagram campaigns. Browser events are loaded after the page settles. Completed purchases may be matched using a one-way hashed email address so browser and server conversion events can be deduplicated.
- Google Analytics and Google Ads – Website measurement and advertising attribution. SiteLenz sends page and funnel events without searched property addresses, email addresses, report tokens, or payment-session identifiers in page URLs. Google advertising storage, advertising user data, ad personalisation, and Google Signals are disabled by default.
- Google Maps Platform – Address search, map, and Street View features where you use those features.
All service providers are contractually bound to handle your data securely and only for the purposes we specify.
5. Data Retention
We retain your data as follows:
- PDF reports: We aim to retain generated PDF reports for up to 30 days after generation.
- Analysis data: We aim to retain cached analysis data for up to 90 days to improve performance.
- Payment records: Retained as required for financial and tax compliance (typically 7 years under New Zealand law).
- Email address: Retained for as long as necessary to provide the service and comply with legal obligations. You may request deletion at any time.
We review and delete data that is no longer needed in line with these retention periods.
6. Your Rights
Under the New Zealand Privacy Act 2020, you have the right to:
- Request access to the personal information we hold about you.
- Request correction of inaccurate personal information.
- Request deletion of your personal information (subject to legal retention requirements).
- Complain to the Office of the Privacy Commissioner if you believe we have breached the Privacy Act.
To exercise any of these rights, contact us at hello@sitelenz.co.nz. We will respond within 20 working days.
7. Cookies and Tracking
We use essential cookies for functions such as session management. We also use analytics services, including PostHog, Meta, and Google Analytics, to understand how the service is used and measure advertising performance. Advertising storage and ad personalisation are disabled by default for Google. These integrations are kept out of the critical page-rendering path. You can manage cookies through your browser settings.
8. Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. These include encrypted connections (HTTPS), database row-level security, and restricted API access using server-side keys.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised “last updated” date. Continued use of the service after changes are posted constitutes acceptance of the revised policy.
10. Contact
For privacy enquiries, please contact us at hello@sitelenz.co.nz. You may also contact the Office of the Privacy Commissioner at privacy.org.nz.