Privacy Policy

Last updated 4 November 2026

The short version

• If we've emailed you a concept: we used only what your business already publishes, mainly your own website. We don't buy lists or track whether you open emails.
• Say "no thanks" and the concept comes down, the emails stop, and we keep only enough to make sure we never contact you again.
• This website sets no cookies and runs no analytics.
• We never sell personal information or use it for advertising.
• Ask us what we hold about you, or to correct or delete it, any time: [email protected].

Who we are

Knack Web is a trading name of Knack Limited (New Zealand company number 9444632, NZBN 9429053814234), Auckland, New Zealand. Its registered office is recorded on the New Zealand Companies Register. We handle personal information under the Privacy Act 2020.

Our Privacy Officer is Joe Mills, [email protected].

Most of the people we deal with are businesses. Information about a business is personal information when it's about an identifiable person, for example a sole trader's name, mobile number or email, so we treat it that way.

1. If we've emailed you about a concept homepage

We find trade businesses whose websites could work harder, build a free concept homepage, and email the owner a private link to it. Because we collect this information from public sources rather than from you, here is exactly what we have and why.

What we collect

• Your business name, trade, the suburb or area you work in, and the phone number shown on your listing.
• The text, images and logo on your website, and screenshots of how it looks on a computer and a phone.
• Checks on your website: whether it's secure, how fast it loads, whether it works on a phone, and similar.
• The email address your business publishes on its website, and the page we found it on.
• When we emailed you and whether you replied.

Where it comes from

Your own website, your Google business listing, and trade association member directories (for example Master Electricians' "find a member" listings). We don't buy lists and we don't use software to harvest email addresses. Each address is checked and recorded by a person, and only if it's published for business enquiries.

Why

To check your current site, build a concept homepage from your real details, and send you one email about it, with at most two short follow-ups. Every email says who it's from and how to opt out.

What we don't do

• No tracking pixels or open tracking in our emails.
• The concept is on an unlisted link, marked as a concept, and not indexed by search engines. It has no email addresses in it.
• Nothing about you is shared with other businesses or used for advertising.

How long we keep it

• The concept link comes down about two weeks after our first email, or the same day if you ask.
• Within 90 days after that, we delete our copies of your images, the screenshots and the concept files, and the website text we pulled, unless you're talking to us about a site.
• A basic record (business name, website, the email we used, dates and the outcome) is deleted after two years without contact.
• If you ask us not to contact you, we keep your business name, website address and email on a do-not-contact list for as long as we send outreach, so it never happens again. Deleting that would mean losing track of your request.

2. If you contact us or use the form on this site

We collect what you send: your name, business name, email, phone if you give it, your website and your message. We use it to reply and to build the concept you asked for. The form is handled by Web3Forms, which emails it to us and keeps a copy for a limited time under its own policy. We keep enquiry emails for as long as we need them to deal with your request, and delete ones that don't lead to work within two years.

3. If you're a client

To build and run your site we collect:

• The details you give us on our intake form or on the phone: names, contact details, services and areas, licence and registration numbers, domain and hosting details, links to your social and Google listings, reviews you choose to show, and your photos.
• The plan you're on, and records of what we've invoiced and what's been paid. Card payments are handled by Stripe; we never see or store your card number.
• Access to the accounts we need, such as your domain registrar, Google Business Profile and Search Console, only for as long as we need it.

The intake form saves your answers on your own phone as you type, so you don't lose them if you close the page. They're cleared from your phone once you send the form.

We keep client records for as long as we work together and then for 7 years, because tax law requires us to keep business records that long. Photos and working files for a site we no longer host are deleted within 12 months of the agreement ending, after we've handed you the files.

4. If you sent an enquiry through a site we built

The business whose website you used collects your enquiry and is responsible for it. Their site's privacy page tells you how to contact them. We run the website and pass your enquiry to their email, using an email delivery service, Resend. We don't keep your enquiry in our own systems or use it for anything else; Resend keeps a delivery record under its own policy. Questions about your enquiry are best sent to the business you contacted, but you can also email us.

5. Visiting this website

This site sets no cookies and runs no analytics, tracking or advertising scripts. Our web host, Cloudflare, keeps standard server logs, including IP addresses, for security, and may set a strictly necessary security cookie if it detects unusual traffic. Fonts are loaded from Google Fonts, which means your browser asks Google's servers for them and Google sees your IP address.

6. Who handles it for us

We don't sell personal information or give it to anyone for their own use. We use these service providers to run the business. Each handles information only to provide its service to us, and most are based overseas, so your information may be stored or processed outside New Zealand. We choose established providers that protect information to a standard comparable to New Zealand law.

Our own records, such as the list of businesses we've contacted and our working files, are kept on our computer in New Zealand and its backups. We may also disclose information where the law requires it.

7. Keeping it safe

Access to our records is limited to the people at Knack Web who need it, and client sites are plain files with no login or database to break into. No system is perfectly secure; if a privacy breach is likely to cause serious harm, we'll tell the people affected and the Privacy Commissioner as the law requires.

8. Your rights

You can ask to see the personal information we hold about you and ask us to correct it. We'll respond within 20 working days. You can also ask us to delete it, and we will, except for anything we have to keep by law, and the do-not-contact entry described in section 1 if you've asked us not to contact you. Email [email protected]; we may need to confirm it's you first.

9. Complaints

If you're unhappy with how we've handled your information, tell us first and we'll try to put it right. You can also complain to the Office of the Privacy Commissioner at privacy.org.nz.

10. Changes

We'll update this policy when what we do changes, and change the date at the top. If a change matters to current clients, we'll email them.