Privacy Policy
Last updated: 5 July, 2026
Who we are
Tuizee is operated by Digiconsult Ltd, a New Zealand registered company. Our Privacy Officer is the Director. You can contact us at support@tuizee.com.
This policy explains what personal information we collect, why, and what we do with it. It complies with the Privacy Act 2020 (New Zealand), including IPP3A (effective 1 May 2026).
Your role and our role
If you are a business user (business owner, sole trader, tradesperson, or team member with a Tuizee account), you control the personal information you enter into Tuizee. We process that information on your behalf to provide the Service.
If you are a customer of a Tuizee user, your tradesperson or business has entered your details into Tuizee to manage your job. They are responsible for getting your permission and handling your requests. Tuizeestores this information on their behalf. However, as an agency holding your information under the Privacy Act 2020, we will still act on legitimate requests from you (see “Your rights as a customer” below).
IPP3A — Indirect collection of customer information
When a business user enters customer information into Tuizee, that information is collected indirectly (not from the customer directly). Under IPP3A of the Privacy Act 2020 (effective 1 May 2026), agencies must take reasonable steps to ensure individuals are aware when their information is collected indirectly.
Tuizee acts as a data processor on behalf of business users. Business users are responsible for notifying their customers that their information is being entered into a trade management system, and for ensuring customers are aware of the purpose, recipients, and their access and correction rights.
Where a business user has already made their customer aware, further notification by Tuizee is not required. If you are a customer and were not notified, you can contact us directly at support@tuizee.com or request removal of your information (see “Takedown requests”).
What we collect
From business users
- Name, email, phone, company name, industry, team size
- Documents and photos you upload to job records
- Basic account and technical data needed to run the Service
From customers (entered by business users)
- Name, contact details, job address, job notes, and any photos the business user uploads to your job record
What we don't collect
- No GPS or location tracking
- No telemetry or behavioural tracking
- No payment card or bank account details (payments are handled by Stripe or matched by reference only)
- No IRD numbers, payroll, or sensitive financial data
Cookies
We use essential cookies to keep you logged in and remember your session. We don't use advertising or tracking cookies.
We may add privacy-preserving analytics in future (likely Plausible), which doesn't use tracking cookies or collect personal information. We'll update this policy if we do.
You can control cookies through your browser settings. If you disable essential cookies, you won't be able to log in.
How we use your information
- To provide and operate the Service
- To manage your account and subscription
- To enable collaboration within your workspace
- To share job information with customers via secure links
- To communicate with you about the Service
- To maintain security and prevent misuse
- To comply with legal obligations
Sharing your information
We share personal information only as needed to operate the Service:
- Within your workspace: Business owners can see information about users they've invited. Team members can see job records, photos, and notes within their workspace.
- With customers: Business users can share job information with customers via private secure links.
- With our service providers: We use third-party providers to run the Service (see below).
- For legal reasons: Where required by law, court order, or to protect rights and safety.
Third-party providers and data location
We use these providers to operate the Service. Your information may be processed in these locations:
| Provider | Service | Location |
|---|---|---|
| Supabase | Database and image storage | Singapore |
| Vercel | Application hosting | Australian APAC region |
| Resend | Email delivery | Japan APAC region |
| Stripe | Payment processing | Global |
We have agreements with these providers requiring confidentiality and security standards consistent with the Privacy Act 2020.
Security
We take reasonable steps to protect your information, including encrypted transmission, access controls, and restricted internal access. Documents and photos are encrypted at rest and in transit.
Data retention
We keep your information while your account is active. After account cancellation or termination:
- Data is retained for 90 days to allow for reactivation and dispute resolution
- After 90 days, all data is permanently deleted from production systems and backups
- Customer secure links are revoked immediately upon cancellation
Where law requires longer retention (e.g., tax records), we retain only what is necessary.
Your rights
As a business user, you can:
- Request access to your personal information
- Request correction of your personal information
- Request deletion of your account and data
- Export your data (self-service export is in development)
- Withdraw consent where applicable
Contact us at support@tuizee.com. We aim to respond within 10 working days (20 working days maximum, as required by law).
As a customer of a Tuizee user, you can:
- Contact your tradesperson or business directly — they are responsible for your data
- Contact us at support@tuizee.com if you can't resolve it with them or prefer not to
We will act on legitimate requests from customers, including access, correction, and deletion, in accordance with the Privacy Act 2020.
Takedown requests
If you are a customer and believe your information has been added to Tuizee without your consent — for example, a photo of your property — you can request its removal directly from us.
Email support@tuizee.com with:
- What content you want removed
- The job or business it relates to (if you know)
- Your contact details
We will review and action requests within 5 working days where practicable.
Children
Tuizeeis for users 18 and over. We don't knowingly collect information from anyone under 18. If we learn we have, we'll delete it.
Changes to this policy
We may update this policy. We'll notify business users of material changes by email or in-app at least 30 days before they take effect. The “Last updated” date shows when it was last revised.
Contact
Privacy Officer
Digiconsult Ltd
Email: support@tuizee.com
If you have a privacy complaint, contact us first. If unresolved, you can complain to the Office of the Privacy Commissioner at privacy.org.nz or 0800 803 904.