Privacy Policy

This privacy policy explains how BackOffice Co Ltd ("we", "us", "our") collects, uses, stores, and discloses personal information about you. We are committed to protecting your privacy and complying with the New Zealand Privacy Act 2020.

What we collect

When you submit an enquiry through our website, we collect:

• Your name and contact details (email, phone)
• Your business name, trade type, and team size
• The services you are interested in and the systems you currently use
• Any message or context you choose to provide
• Technical metadata such as the date of submission

We do not use cookies or tracking pixels for advertising. Cloudflare Turnstile is used on our enquiry form to detect automated submissions; it does not track you across the web.

Why we collect it

We use your information solely to:

• Respond to your enquiry and provide a tailored proposal
• Communicate with you about the services you have asked about
• Maintain a record of who has contacted us

We do not sell or rent your information to anyone, ever.

Who we share it with

Your information is stored and processed by the following service providers operating on our behalf:

• Supabase — hosts our enquiry database (servers in Australia/USA)
• Resend — sends our notification and reply emails
• Netlify — hosts the website infrastructure
• Cloudflare — provides DNS and spam protection

Each of these providers is contractually required to handle your data responsibly and only for the purposes we have engaged them. We do not share your information with anyone else without your consent, except where required by law.

How long we keep it

We retain enquiry records for as long as necessary for our business records, typically up to seven years after our last interaction with you. After that, records are securely deleted. You can request earlier deletion at any time — see "Your rights" below.

How we protect it

Access to your information is restricted to authorised BackOffice Co staff only, via encrypted connections and secure authentication. Data at rest is encrypted by our service providers. We do our best to protect your information, but no system is perfectly secure — please don't include highly sensitive information (financial details, passwords, etc.) in form messages.

Your rights

Under the New Zealand Privacy Act 2020 you have the right to:

• Request a copy of the personal information we hold about you
• Ask us to correct any information that's wrong or out of date
• Ask us to delete your information
• Withdraw consent for us to contact you at any time

To exercise any of these rights, email us at hello@backofficeco.org. We'll respond within 20 working days.

Complaints

If you have a concern about how we've handled your information, please contact us first at hello@backofficeco.org. If you're not satisfied with our response, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

Changes to this policy

We may update this policy from time to time. Material changes will be announced on this page with a new "last updated" date.