KiwiFix Privacy Policy

Last Updated: [DATE]

This Privacy Policy is a draft prepared to be consistent with the privacy commitments in KiwiFix's Terms & Conditions and the New Zealand Privacy Act 2020. It has not been reviewed by a lawyer — have it checked by one before relying on it as your final, published policy.

1. Who This Policy Covers

This Privacy Policy explains how PENZO GROUP LIMITED ("KiwiFix", "we", "us") collects, uses, discloses and protects personal information when you use the KiwiFix website, mobile application, or platform — whether you're a customer posting a job or a tradesperson ("Tradie") offering services.

PENZO GROUP LIMITED
New Zealand Company Number: [COMPANY NUMBER]
NZBN: [NZBN]
Registered Office: [REGISTERED ADDRESS]

This Policy should be read together with our Terms & Conditions, which it forms part of.

2. Information We Collect

We collect information you give us directly, and some information generated automatically as you use KiwiFix:

3. How We Use Information

We use personal information to:

• create and manage your account;
• match job postings with suitable, nearby Tradies;
• let customers and Tradies communicate about a job through KiwiFix;
• verify Tradie identity, licences and qualifications where required by law;
• send account, security and job-related notifications (e.g. one-time verification codes, "you've been accepted" notices, new-job alerts) by email or in-app message;
• process payments and subscriptions, where applicable;
• investigate fraud, abuse, or breaches of our Terms;
• maintain and improve the security and performance of the platform;
• comply with our legal obligations.

4. Minimising What We Share Between Users

KiwiFix is built to limit unnecessary sharing of personal information between customers and Tradies:

• A Tradie does not see a customer's exact address, phone number, or property access details (unit number, gate code, parking instructions, notes) just because they've applied for or been accepted onto a job.
• A customer's general area (suburb/region) is visible to help a Tradie judge distance and relevance — the exact address is not.
• If a customer wants to share their phone number or exact address with a specific Tradie, they can do so themselves, directly, through KiwiFix's in-app messaging once they've accepted that Tradie for a job.
• A Tradie's own contact details are likewise never shared with a customer beyond what the Tradie has chosen to put on their public profile.

5. When We Disclose Information

We do not sell personal information. We may disclose personal information:

• to the other party in a job (e.g. a customer's name once a Tradie is accepted for their job) — only to the extent described in Section 4 above;
• to service providers who help us run KiwiFix, including cloud hosting and database providers, email delivery providers, and payment processors — each only receives what it needs to perform its function;
• where required by law, regulation, or a valid legal process;
• to protect the rights, safety or property of KiwiFix, our users, or the public (e.g. investigating fraud or abuse);
• in connection with a business transaction (e.g. a merger or sale of the business), subject to this Policy continuing to apply to your information.

6. Where Your Information Is Stored

Personal information is stored using reputable third-party infrastructure providers (for example, cloud database and file storage services). Data may be processed or stored outside New Zealand by these providers. Where this happens, we take reasonable steps to ensure your information continues to be protected consistently with this Policy and the New Zealand Privacy Act 2020.

7. Data Security

We use reasonable technical and organisational measures to protect personal information, including access controls, encrypted connections, and hashed/salted verification codes and passwords. No online service can guarantee absolute security. You're responsible for keeping your own account credentials confidential, and should tell us immediately if you suspect unauthorised access to your account.

8. Data Retention

We keep personal information for as long as your account is active, and for a reasonable period afterwards where needed for legitimate business purposes such as dispute resolution, fraud prevention, or legal compliance. You can ask us to delete your account and associated personal information at any time, subject to information we're legally required to retain.

9. Your Rights

Under the Privacy Act 2020, you have the right to:

• ask what personal information we hold about you;
• ask us to correct information that is inaccurate, incomplete, or out of date;
• ask us to delete your account and personal information, subject to legal retention requirements;
• withdraw consent to optional information sharing (e.g. choosing not to share your address/phone with a Tradie).

To exercise any of these rights, contact us using the details in Section 12 below.

10. Cookies & Similar Technology

KiwiFix may use cookies or similar local storage technology to keep you signed in and to remember basic preferences. We do not use this to build advertising profiles or sell your browsing activity to third parties.

11. Children's Privacy

KiwiFix is not directed at, and is not intended to be used by, children. We do not knowingly collect personal information from children.

12. Contact Us About Privacy

If you have a question, concern, or request relating to your personal information:

PENZO GROUP LIMITED — KiwiFix
Privacy Contact: privacy@kiwifix.nz
General Support: support@kiwifix.nz
Website: www.kiwifix.nz

If you're not satisfied with our response, you can also contact the New Zealand Office of the Privacy Commissioner at www.privacy.org.nz.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of KiwiFix after an update means you accept the updated Policy. Material changes will be highlighted where reasonably practicable.