Privacy Policy

When you use our website or services, we may collect the following personal information:

• Contact details: your name, email address, phone number, and business name, provided when you submit our contact form.
• Project details: information about your business, website preferences, design inspiration and content you provide during onboarding.
• Payment information: processed securely through Stripe. We do not store your card details on our servers.
• Usage data: anonymised data about how you interact with our website, collected through Google Analytics and the Meta Pixel, including pages visited, time on site, and general location (country/city level).
• Cookies: small data files stored on your device to help us understand site usage and improve your experience.

We collect personal information to:

• Provide our services: designing, building and running your website and automations.
• Communicate with you: project updates, brand concepts, and invoices via email.
• Process payments: securely handling transactions through Stripe.
• Improve our website: understanding how visitors use our site so we can make it better.
• Measure advertising: the effectiveness of any Meta (Facebook/Instagram) campaigns we run.

We will only use your information for the purpose it was collected, unless you give us permission to use it for something else.

We do not sell your personal information. We may share your data with third-party services that help us run our business:

• Cloudflare: website hosting and content delivery (USA/Global).
• Resend: transactional email delivery (USA).
• Stripe: payment processing (USA/Global).
• Google Analytics: anonymised website usage analytics (USA).
• Meta (Facebook): advertising measurement via the Meta Pixel (USA).

Each provider has its own privacy policy and data protection measures. We only share the minimum information necessary for each service to function.

Our website uses the following technologies:

• Google Analytics (gtag.js): anonymised data about page views, session duration and traffic sources.
• Meta Pixel: tracks conversions from our Facebook and Instagram campaigns, including page views and form submissions.

You can disable cookies through your browser settings at any time, though this may affect some functionality. You can opt out of Google Analytics with the Google Analytics Opt-out Browser Add-on, and adjust your Meta ad preferences in your Facebook account settings.

Your data is stored securely using:

• Encrypted storage: project data is stored with encryption at rest.
• HTTPS: all data transmitted between your browser and our servers is encrypted using SSL/TLS.
• Access controls: only authorised team members can access your project data.

We retain your personal information for as long as necessary to provide our services and comply with our legal obligations. If you request deletion, we will do so within a reasonable timeframe unless we are legally required to retain it.

Under the New Zealand Privacy Act 2020, you have the right to:

• Access: request a copy of the personal information we hold about you.
• Correction: ask us to correct any inaccurate or outdated information.
• Deletion: request that we delete your personal information, subject to any legal obligations.
• Complaint: lodge a complaint with the Office of the Privacy Commissioner if you believe your privacy has been breached.

To exercise any of these rights, contact us at office@byrocket.co.nz. We will respond within 20 working days, as required by law.

We may update this privacy policy from time to time to reflect changes in our services or legal requirements. Any changes will be posted on this page with an updated date. We encourage you to review this policy periodically.