Privacy
What we collect, and what we do with it.
Short version: we collect what you send us, we use it to reply to you, and we don't sell it to anyone.
This policy explains how Nullnil handles personal information under the New Zealand Privacy Act 2020. Last updated August 2026.
What we collect
When you email us or fill in something on this site, we collect what you choose to send — typically your name, your business name, an email address, a phone number, and whatever you tell us about your business.
When you visit the site, our hosting and analytics providers collect standard technical information: pages viewed, rough location by region, device and browser type, and performance timings. We use this to understand which pages are useful. It isn’t used to identify you individually.
If we work together, we may be given access to your business systems. That access is covered by the agreement we sign with you, and we only use it for the work you’ve asked us to do.
Why we collect it
- To reply to your enquiry and talk about your business
- To carry out work you’ve engaged us for
- To send invoices and keep proper business records
- To understand which parts of this website are working
We don’t add you to a mailing list, and we don’t sell, rent or trade personal information to anyone.
Who else sees it
Only the providers we need to run the business — website hosting and analytics, email, and accounting software. Some of these store data outside New Zealand. Where they do, we choose providers with comparable privacy protections.
We’ll also release information if we’re legally required to. That’s the only other case.
How long we keep it
Enquiries that don’t go anywhere are deleted within twelve months. Client records are kept for seven years, because New Zealand tax law requires it.
Keeping it safe
Access to your information is limited to the people who need it to do the work, protected by two-step login, and held in reputable business systems rather than on personal devices. No system is perfect, and we won’t claim otherwise — but if something did go wrong that put you at risk of harm, we’d tell you and the Privacy Commissioner, as the Act requires.
Access to your business systems
If you become a client, we’ll usually need access to systems you already run — your accounting, your job management, your inventory. Four commitments on that:
- We ask only for the access the work actually needs, at the lowest level that will do the job. Read-only wherever read-only is enough.
- We keep a written list of every system we hold access to, and we’ll send it to you on request.
- When an engagement ends, that access is removed and we confirm in writing that it’s gone.
- We hold no formal security certification and won’t claim one. If you need a supplier who does, we’ll say so rather than let you assume otherwise.
Seeing or correcting your information
You can ask us what we hold about you, and ask us to correct or delete it. Email info@nullnil.net and we’ll respond within 20 working days, which is the statutory limit.
If you’re not happy with how we’ve handled it, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.
Cookies
This site uses a small amount of local storage to remember whether you chose light or dark mode. Our analytics providers may set cookies to count visits. You can block cookies in your browser and the site will still work.
Changes
If we change this policy we’ll update the date at the top. Any substantial change gets a note on this page.