Skip to content
PoweredNZ

Privacy Policy

Effective date: 6 April 2026 | Version: 1.0.0

PoweredNZ Limited ("PoweredNZ," "we," "us," or "our") is committed to protecting the privacy of everyone who uses our website at powerednz.com (the "Platform"). This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, and how you can exercise your rights under the Privacy Act 2020 (NZ).

This policy applies to all visitors, homeowners requesting quotes ("Homeowners"), and installers listed on the Platform ("Installers"). If you are an Installer, you should also read the Installer Terms of Service, which contain additional obligations regarding Homeowner data you receive through the Platform.

1. Information We Collect

1.1 Information you provide directly

When you use the Platform, you may provide us with personal information including:

  • Quote requests: Your name, email address, phone number, property details, and a description of the work you need. This information is shared with matched Installers as described in Section 4.1.
  • Installer accounts: Business name, contact name, email address, phone number, business address, service categories, service areas, credential documents, and licence numbers.
  • Reviews: Your name, email address, star rating, and review text.
  • Contact forms and support requests: Your name, email address, and the content of your message.
  • Cookie preferences: Your choice of essential-only or all cookies.

1.2 Information collected automatically

When you visit the Platform, we may automatically collect:

  • Usage data: Pages visited, time spent on pages, clicks, and navigation patterns. This data is collected only if you opt in to analytics cookies (see our Cookie Policy).
  • Device and browser information: Browser type, operating system, screen resolution, and general geographic location (country or region level only, not precise location). This data is collected via Google Analytics 4 through Firebase Analytics and only when you have opted in.
  • Log data: Your IP address, request timestamps, and referring URLs. This data is recorded in server logs for security and operational purposes and is not linked to your identity.

1.3 Information from third parties

We may receive information from third-party services we use to operate the Platform:

  • Firebase Authentication: When an Installer signs in, Firebase provides us with a user identifier and authentication status. We do not receive or store passwords.
  • Stripe: When an Installer subscribes or purchases credits, Stripe provides us with a customer identifier, subscription status, and payment outcome. We do not receive or store credit card numbers or bank account details.

2. How We Use Your Information

We use the personal information we collect for the following purposes:

  • Providing the service: Matching Homeowners with Installers, delivering leads, processing subscriptions, and displaying listings and reviews.
  • Communication: Sending quote confirmations, lead notifications, payment receipts, credential expiry reminders, and responding to support requests.
  • Platform improvement: Analysing usage patterns (with your consent via analytics cookies) to improve the user experience, fix issues, and develop new features.
  • Security and fraud prevention: Detecting and preventing fraudulent activity, abuse, and security incidents.
  • Legal compliance: Meeting our obligations under New Zealand law, including the Privacy Act 2020, the Fair Trading Act 1986, and tax record-keeping requirements.

We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects.

3. Legal Basis for Processing

Under the Privacy Act 2020 (NZ), we collect and use personal information in accordance with the Information Privacy Principles ("IPPs"). In particular:

  • We collect personal information directly from you wherever practicable (IPP 2).
  • We collect only the information reasonably necessary for the purposes described in this policy (IPP 1).
  • We use personal information only for the purpose for which it was collected, or a directly related purpose (IPP 10).
  • We take reasonable steps to ensure information is accurate, complete, and up to date (IPP 8).

4. Sharing Your Information

4.1 With Installers (Homeowner data)

When you submit a quote request, your name, email address, phone number, and project details are shared with up to three matched Installers. Your email and phone number are encrypted at rest on our servers and only decrypted when delivered to matched Installers. Installers are bound by the Installer Terms of Service to use your data only for the purpose of responding to your quote request.

4.2 With service providers

We use the following third-party service providers to operate the Platform. Each provider receives only the data necessary to perform their function:

  • Stripe (payment processing) — Installer subscription and credit purchase data. Stripe's privacy policy applies to data they process.
  • Firebase / Google Cloud (authentication, hosting, analytics) — Installer authentication tokens and, where you have opted in, anonymised usage analytics.
  • Resend (transactional email) — Email addresses and message content for system notifications such as lead alerts, payment receipts, and credential reminders.
  • Vercel (hosting) — Server logs containing IP addresses and request data, retained for operational and security purposes.

4.3 With regulators and law enforcement

We may disclose personal information if required by law, court order, or a lawful request from a New Zealand government agency. We may also disclose information if we believe in good faith that disclosure is necessary to protect the safety of any person, prevent fraud, or defend our legal rights.

4.4 Business transfers

If PoweredNZ is acquired, merged, or sells substantially all of its assets, your personal information may be transferred as part of that transaction. We will notify you of any such transfer and any changes to this policy.

4.5 No selling of personal information

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

5. Data Retention

We retain personal information only for as long as it is needed for the purpose it was collected, or as required by law. Specific retention periods are:

  • Lead data (Homeowner quote requests): 365 days from the date of the request. After this period, lead data is eligible for deletion. Encrypted contact details (email and phone) are deleted along with the lead record.
  • Installer account data: Retained for the duration of the account, plus a reasonable period after closure for legal and record-keeping purposes.
  • Review data: Retained for as long as the associated Installer listing exists on the Platform, or as required by law.
  • Server logs: Retained for up to 90 days for security and operational purposes.
  • Analytics data: Retained in accordance with Google Analytics 4 default settings (up to 14 months), and only where you have opted in.

6. Your Rights

Under the Privacy Act 2020 (NZ), you have the right to:

  • Access the personal information we hold about you (IPP 6).
  • Request correction of any personal information that is inaccurate, incomplete, or misleading (IPP 7).
  • Request deletion of your personal information, subject to any legal obligations we have to retain it.
  • Withdraw consent for data sharing (for Homeowners who have submitted quote requests) at any time.

How to exercise your rights

  • Homeowners: Use the self-service data portal at powerednz.com/my-data to request access to or deletion of your data. Alternatively, email support@powerednz.com.
  • Installers: Contact support@powerednz.com to request access, correction, or deletion of your account data.
  • All users: You may also contact the Office of the Privacy Commissioner at privacy.org.nz if you believe we have breached the Privacy Act 2020.

We will respond to access and correction requests within 20 working days, as required by the Privacy Act 2020.

7. Cookies

We use a small number of cookies to operate the Platform. For full details, see our Cookie Policy. In summary:

  • Essential cookies (always active): Firebase session authentication and your cookie consent preference.
  • Analytics cookies (opt-in only): Google Analytics 4 via Firebase Analytics, used to understand how visitors use the Platform. These are only set if you click "Accept All" on the cookie banner.

We do not use advertising or tracking cookies.

8. Security

We take reasonable steps to protect your personal information from unauthorised access, disclosure, alteration, and destruction. Our security measures include:

  • Encryption at rest: Homeowner email addresses and phone numbers in lead records are encrypted using AES-256-GCM before storage.
  • Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS (HTTPS).
  • Access controls: Only authorised personnel have access to personal information, and access is limited to what is necessary for their role.
  • Third-party security: Our service providers (Stripe, Firebase, Vercel) maintain their own security certifications and practices. Stripe is PCI-DSS Level 1 certified.

No system is completely secure. If you become aware of any security vulnerability or incident, please contact us at support@powerednz.com immediately.

9. Children's Privacy

The Platform is not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16 without appropriate consent, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at support@powerednz.com.

10. International Data Transfers

PoweredNZ is based in New Zealand. Our service providers (including Google, Stripe, and Vercel) may process data in countries outside New Zealand. Where personal information is transferred overseas, we ensure that appropriate safeguards are in place as required by IPP 12 of the Privacy Act 2020, including that the recipient is subject to privacy protections comparable to those in New Zealand.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the version number and "last updated" date at the top of this page. If we make material changes that affect how we use your personal information, we will take reasonable steps to notify you, such as posting a notice on the Platform or sending an email to affected users.

12. Contact Us

For privacy inquiries, questions about this policy, or to exercise your rights:

You may also contact the Office of the Privacy Commissioner of New Zealand at privacy.org.nz if you have concerns about how we handle your personal information.