Privacy Policy

Retrology Repair collects personal information in order to repair your equipment and talk to you about it. We handle it in accordance with the Privacy Act 2020.

This policy is short because our data handling is short. We are a one-person repair workshop, not an advertising business.

What we collect

When you use the contact form: your name, email address, what the device is, what is wrong with it, how you want to get it to us, and whether you are happy for us to publish photographs of the repair.

When you send us a device: your postal address and phone number, so we can return it and reach you about the job.

When you visit this site: nothing that identifies you. We do not use advertising trackers, and we do not sell or share data with anyone for marketing. Our host keeps standard server logs, described below.

We do not ask for, and do not want, payment card details. Payments are handled by Stripe, which collects those directly — we never see your card number.

Why we collect it

• To diagnose, quote, and carry out the repair.
• To contact you about your device, including when a quote needs approval.
• To issue invoices and meet our tax record-keeping obligations.
• To honour your choice about photographs (§18 of our Terms).

We do not use your details to market to you.

Who else sees it

Running a website means using other companies’ infrastructure. The ones that touch your information are:

• Cloudflare — hosts this site and handles the contact form. Sees your IP address and standard request logs. Also provides the anti-spam check on the form (Turnstile), which is designed to work without tracking you across sites.
• Resend — delivers the contact form to our inbox as email, and so processes what you wrote in it.
• Stripe — processes payments, if you pay online.

Some of these store data outside New Zealand. That is normal for web infrastructure, and the Privacy Act permits it where comparable safeguards apply, but you should know it is the case.

We do not otherwise disclose your information, except where the law requires it.

Photographs

We publish repair logs with photographs of the equipment we work on. We do not publish anything identifying you — no names, no addresses, no contact details.

Publication is our default, and you can decline it on the contact form or at any time afterwards. If you later want a log removed, ask and we will remove it. You do not need a reason.

If your device carries something identifying — an asset tag, an engraving, a name plate, personal data on a screen — tell us and we will crop or exclude it.

How long we keep it

Job records and invoices are kept for seven years, which is what Inland Revenue requires for tax records.

Contact form enquiries that do not turn into jobs are deleted once they are clearly finished with — usually within twelve months.

Your rights

Under the Privacy Act 2020 you can:

• ask what we hold about you, and get a copy; and
• ask us to correct it if it is wrong.

Email [email protected] and we will respond as quickly as we can, and within 20 working days as the Act requires. There is no charge.

If you are not happy with how we have handled your information, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

Security

Your information sits in our email and our job records. We take reasonable care of it — accounts are protected by strong, unique passwords and two-factor authentication where available.

We will not pretend to be more than we are: this is a small workshop, not a bank. Please do not send us anything highly sensitive through the contact form.

Changes

If we change this policy we will update the date at the top of this page.

Contact

Email [email protected] with any privacy question.