Last updated2026-10-16
1. Who we are
This site is operated by Think and Form Limited, a New Zealand company based in Auckland (NZBN 9429053691248). In this notice, "we", "us", and "our" refer to Think and Form Limited.
We are responsible for personal information collected through thinkandform.co.nz in the manner described below.
2. What we collect
We have deliberately built this site to collect as little personal information as possible.
2.1 Information you give us directly
If you use the contact form on the contact page or the construction workflow session page, we receive your name, your email address, the topic you choose, and your message. The form sends these to our inbox as an email. The site does not keep a separate copy of them in a database.
If you email us directly using one of the "mailto" links, we receive whatever you put in that email, usually your name, email address, and the content of your message.
2.2 Information we collect automatically
- Page views and navigation via Vercel Analytics. This is anonymous and does not set cookies on your device. It records things like which page was visited, the approximate region, the referring site, and the device type.
- Performance metrics via Vercel Speed Insights. This records anonymous Core Web Vitals (load times, responsiveness, layout stability) so we can monitor site performance.
- Server logs. Like any website, our hosting provider keeps short-lived logs of requests (IP address, user agent, timestamp) for security and operational reasons.
2.3 What we do not do
- We do not run advertising or marketing cookies.
- We do not sell or rent personal information.
- We do not profile visitors or build advertising audiences from this site.
3. Why we collect it
- To reply to your message, whether it is about one of our products, a pilot, or a project you want built.
- To understand which pages are useful and improve them.
- To monitor and protect the site against abuse or technical failure.
4. Who else sees this information
We use a small set of trusted service providers:
- Vercel Inc. — hosting, Analytics, and Speed Insights. Vercel processes data on our behalf and operates globally. See Vercel's privacy policy.
- Resend, Inc. — delivers contact form messages to our inbox as email. Resend is based in the United States and processes the form contents on our behalf. See Resend's privacy policy.
- Google (Google Workspace) — hosts our mailbox. Form messages and emails you send us are stored there. Google processes this data on our behalf and operates globally. See the Google Cloud Privacy Notice.
- Your own email provider — if you email us directly, your message also passes through whichever provider you use.
We do not share personal information with anyone else unless we are required to by New Zealand law, or unless you have given us clear permission to do so.
5. Where it is stored
Personal information may be stored or processed outside New Zealand by the providers listed above. Where this happens, we rely on providers that have comparable data-protection practices and contractual safeguards.
6. How long we keep it
- Email correspondence and form messages — kept for up to 24 months from your last contact, unless we are working together on something that requires us to keep it longer.
- Resend delivery records — retained by Resend according to its published retention settings.
- Analytics data — retained by Vercel according to their published retention windows.
- Server logs — short-lived, typically a few days to a few weeks.
7. Your rights under the Privacy Act 2020
You have the right to:
- Ask whether we hold any personal information about you.
- Ask for a copy of that information, and to ask us to correct it if it is wrong.
- Ask us to stop using or to delete information we hold about you, where the Privacy Act allows.
We will respond to reasonable requests within the timeframes set out in the Privacy Act. If you are not happy with our response, you can complain to the Office of the Privacy Commissioner.
8. Children
This site is not directed at children. We do not knowingly collect personal information from anyone under 13.
9. Changes to this notice
We may update this notice from time to time. The "Last updated" date at the top of this page shows when it was last changed. For material changes, we will make the update prominent on the site.