Privacy notice
Here is what personal information reaches Repagevia through repagevia.site, the reasons we hold it, the places it is processed and the choices you have about it.
Who we are
Repagevia holds the personal information described in this notice; you can reach us about it at hello@repagevia.site. Repagevia is a New Zealand website redesign business. We do not publish a street address because we work remotely. This notice is written with the Privacy Act 2020 in mind.
What we collect
When you use the contact form
The contact form asks for your name, your email address and your message. It also has optional fields for your website address and a budget range. We use these details to reply to your enquiry and, if you go ahead with a project, to manage it.
To protect the form from automated abuse, our server also records a short-lived, one-way scrambled version of the network address your request came from, along with the time. This lets us limit how many messages can be sent in a short period. The scrambled value cannot practically be turned back into your network address, and it is deleted automatically once it is a day old.
When you email us
If you email hello@repagevia.site, we receive your email address, your name if your email shows it, and whatever you choose to write.
When you become a client
If you hire us, we will also hold the information needed to deliver the project and invoice you, such as your business name, billing details and the contact details of the people we work with. Project terms are covered in our terms.
What we do not collect
The website does not use analytics, advertising trackers or social media widgets. The redesign planner and migration checklist work entirely inside your browser, and their contents never reach us. The checklist saves your ticks in your own browser's local storage, which we cannot see.
Why we collect it
We use personal information to:
- Reply to enquiries and answer questions
- Prepare quotes and deliver projects
- Send invoices and keep business records
- Protect the website and contact form from abuse
We do not sell personal information. We do not use it for marketing unless you have asked to hear from us, and we do not add enquirers to mailing lists.
Information about other people
If you give us information about someone else, for example a colleague we should contact about your project, please make sure they know you are sharing it and why. Since 1 May 2026, information privacy principle 3A has required agencies that collect personal information indirectly to take reasonable steps to make the person aware, subject to exceptions1. Where it applies to information you give us, we will take those steps. Our guide to privacy and contact forms explains IPP 3A for other businesses.
Where information is processed
Our website hosting provider and our email provider may store or process information on servers outside New Zealand. They do so on our behalf, to deliver the website and our email, and do not use it for their own purposes. In that situation, the Office of the Privacy Commissioner explains, the information is treated as still held by us2, and we remain responsible for protecting it.
If we ever need to disclose personal information to someone overseas who would use it for their own purposes, we will only do so where information privacy principle 12 allows, for example where the recipient is subject to comparable safeguards or where you have authorised it after being told the risks3.
How we protect it
The website uses HTTPS, so information you send through the form is encrypted in transit. Contact form messages are delivered to our inbox by email; the form does not store your message on the web server. Access to our inbox and project files is limited to the people who need it and protected by strong passwords and two-step sign-in.
If a privacy breach occurs that has caused or is likely to cause serious harm, we will notify the Privacy Commissioner and affected people as soon as practicable, as the Privacy Act requires4.
How long we keep it
- If an enquiry goes no further, we delete it within twelve months of our last contact.
- Records for clients are kept for as long as needed to deliver the project and meet tax and business record-keeping obligations, then deleted.
- Scrambled network address records used for rate limiting are deleted automatically once they are a day old, the next time the contact page is loaded or used.
- Our hosting provider keeps standard web server logs, which include full network addresses, for its own security and operations. The provider sets how long those logs are kept.
Your rights
Under the Privacy Act 2020, you can ask to see the personal information we hold about you and ask us to correct it. You can also ask us to delete information we no longer need. Email hello@repagevia.site. We will respond as soon as we can and within the timeframes the Act sets.
If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.
Cookies
The contact page uses one strictly necessary session cookie to protect the form against forged submissions. No other cookies are set. See our cookie notice for details.
Changes to this notice
We may update this notice from time to time. The last-updated line near the heading records the most recent change. Significant changes will be noted on this page.
Sources
Each source was opened and checked against the sentence it supports on 3 November 2026.
- New privacy information principle now in force Government
- Sending information overseas Regulator
- Principle 12 - Disclosure outside New Zealand Regulator
- What is a notifiable privacy breach? Regulator
Ready to plan your redesign?
Tell us what your current site does well and what holds it back. You get a written, fixed quote in NZD before any work starts.