Privacy policy

This policy explains what we collect through this website, why, who sees it and what you can do about it. It is written against the Information Privacy Principles in the Privacy Act 2020.

Who we are

Ultrafire Protection Limited ("Ultrafire"), Unit 29 / 38 Ashley Place, Papamoa Beach, Tauranga 3118, New Zealand. We are the agency collecting and holding the information described below.

What we collect, and why

Through an enquiry or quote form we collect what you type: your name, email address, and optionally your phone number, company, the building address, and whatever you write in the message.

If you apply for a job, we also collect what you put into the job application: your name, email address, phone number, the role you are after, whether you can work in New Zealand, optionally where you are based, your driver licence and a message — and the CV you attach.

We collect an enquiry for one purpose: to answer it and, if it becomes a job, to carry out that work. We use a job application only to consider you for work with us. We do not use either for marketing, we do not build a profile from them, and we do not sell or trade them.

Supplying it is voluntary. If you would rather not, call us instead — the numbers are on the contact page. The only consequence of not supplying it is that we cannot reply to a form you did not send.

Form security and tracking

We do not run analytics or advertising pixels, and we do not use your form details for marketing. When Cloudflare Turnstile is enabled on our forms, it runs a security check in your browser to help distinguish people from automated submissions. Cloudflare processes technical signals such as your IP address and browser information for that check; it does not receive what you type in the form or your CV. See Cloudflare's Turnstile Privacy Addendum.

How it is stored

Form submissions are sent to us by email and are not stored on this website. There is no database behind this site. Once an enquiry reaches our inbox it is held in our normal business email system, which is restricted to named staff.

Everything you send is transmitted over an encrypted connection.

Information sent overseas

This matters and is easy to gloss over, so plainly: when you submit a form, that information passes through service providers located outside New Zealand.

• Railway (United States) hosts this website, so form submissions pass through its servers on the way to our email provider.
• Brevo (France) delivers the form submission to us as email.
• Cloudflare checks form submissions for automated activity when Turnstile is enabled. It receives technical signals and a verification token, not the enquiry text or CV.

Information held overseas may not be protected by privacy laws comparable to New Zealand's. By submitting a form you agree to it being sent to those providers for the sole purpose of reaching us. If you would rather your details stayed in New Zealand, telephone us instead.

Who else sees it

Ultrafire staff who need it to answer you. If your enquiry becomes a job, the details may be entered into our job management system so the work can be scheduled and invoiced. Where a job needs a subcontractor, they receive only what they need to do the work.

We do not otherwise disclose your information, unless the law requires it.

How long we keep it

Enquiries that do not become work are kept for up to 24 months and then deleted. Enquiries that become jobs are kept as part of that job's records, because building compliance records have their own retention requirements — the Building Act requires annual reports on a compliance schedule to be kept for two years, and in practice service history is worth keeping longer than that.

Job applications, CVs included, are kept only for as long as we need them to consider you for work, and then deleted.

Seeing it, and correcting it

You can ask us for a copy of any personal information we hold about you, and you can ask us to correct it. Email [email protected] or write to the address above. We will respond as soon as we reasonably can, and within 20 working days.

There is no charge for a request, and you do not need a reason to make one.

Our privacy officer

Privacy enquiries and complaints go to our Privacy Officer at [email protected], or by phone on 07 39 444 39.

If something goes wrong

If we have a privacy breach that is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and the people affected, as Part 6 of the Privacy Act requires.

If you are unhappy with how we have handled your information and we have not resolved it, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

Other sites

Our customer portal is operated by Simpro and is a separate system with its own privacy terms. Links from this site to other organisations are provided for convenience; we are not responsible for their privacy practices.

Changes

If we change this policy we will update the date at the top. Material changes will be noted here rather than made quietly.