1. What we collect
- Free check: your email, your store's address, and your results (your scores and which checks need work).
- If you tick the box for emails: that you said yes, the exact words you agreed to, and when.
- Contact and set-up forms: your name, email, store and whatever you tell us.
2. Why we use it
- To email your free check report — that's what you asked for.
- To reply when you contact us.
- Only if you ticked the box: to send the occasional short email with tips for your store.
Nothing else. (In GDPR terms: your report and replies are the service you asked for; the extra emails are your consent.)
3. Who sees it
Only Hiria. We never sell it, share it, or hand it to advertisers. Google stores it for us — see below.
4. Where it's kept
In Google Cloud (Google's data centre in Iowa, USA) and in our Google email. Google keeps it encrypted and secure under its own privacy and security terms.
5. How long we keep it
- Free check records are deleted automatically 12 months after your check.
- Messages you send us stay in our inbox while we're working together, and you can ask us to delete them any time.
6. Emails from us
- Your report: once, because you asked for it.
- Anything else: only if you ticked yes. Every one has an unsubscribe link, or just reply "stop".
7. Cookies and tracking
- We don't use tracking or advertising cookies, and we don't use Google Analytics or anything like it.
- Our servers keep a basic record of page visits (date, page and internet address) for 30 days. We only use it to count how many people visit each page.
- The "Verify you are human" box on the free check is run by Cloudflare. It may leave a small technical cookie to tell people from bots. It isn't used for tracking or advertising.
8. Keeping it safe
- Everything travels encrypted (HTTPS) and is stored encrypted by Google.
- Our admin area needs a Google sign-in, and only our own account is allowed in.
- The free check has a bot check and limits on how often it can be run, and it refuses to look at private or internal addresses.
- No passwords or keys are kept in our code.
- We review our website's code against the OWASP Top 10 (a widely used security checklist) and fix what we find. Last review: October 2026.
9. Your rights
Under New Zealand's Privacy Act 2020 and Europe's GDPR you can ask us to:
- show you what we hold about you, or send you a copy
- correct it
- delete it
- stop emailing you, or take back your yes at any time
Email hiria@wharehauora.nz and we'll reply within 20 working days. If you're not happy with our answer, you can complain to New Zealand's Privacy Commissioner (privacy.org.nz) or, in Europe, your local data protection authority.
10. If something goes wrong
If your information is ever exposed in a way that could seriously harm you, we'll tell you and New Zealand's Privacy Commissioner as soon as we can.
11. Who we are
Miallies. Our privacy officer is Hiria — hiria@wharehauora.nz.