Privacy Policy
ConnectedKiwi Ltd ("we", "us") rents Starlink Mini satellite internet kits in New Zealand via connectedkiwi.com. This policy explains what personal information we collect, why, who we share it with, and your rights. We handle personal information in accordance with the Privacy Act 2020.
1. What we collect
- Booking details: your name, email address, phone number, delivery address, and rental dates — collected when you book.
- Payment information: handled entirely by our payment processor, Stripe. We never see or store your card number. Stripe securely stores your card on file so that the security bond, damage charges, or late-return fees can be charged if they apply under the Rental Agreement.
- Unfinished bookings: if you enter your email address in the booking form, we save it with your name, chosen dates and site language (not your phone number or address), even if you don't finish booking.
- Correspondence: emails you send us and our replies.
- Website usage: pages visited, clicks, approximate location (city level), device/browser type, and session activity — see "Analytics and cookies" below.
2. Why we collect it
- To process bookings and payments, deliver and recover the rental equipment, and send booking confirmations and cancellation notices;
- To enforce the Rental Agreement (for example charging the bond or late-return fees to the card on file);
- To respond to enquiries and provide support;
- To understand how the website is used so we can improve it, and to measure advertising effectiveness;
- To meet legal obligations (for example tax record-keeping).
We send emails about your booking. If you enter your email address in the booking form and don't finish, we may send you one reminder email about that booking, which you can unsubscribe from. Apart from that, we do not send marketing emails, and we never sell your personal information.
3. Who we share it with
| Recipient | What & why |
|---|---|
| Courier companies | Name, delivery address, and phone number — to deliver and collect the equipment. |
| Stripe (payments) | Name, email, and payment details — to process payments and store the card on file. See Stripe's privacy policy. |
| Vercel (hosting) | Our website and booking database run on Vercel and Neon, with data stored on servers that may be located overseas (including the United States). |
| Resend (email) | Name and email address — to deliver booking confirmation and cancellation emails. |
| PostHog (analytics) | Website usage data — see below. |
| Google (advertising) | Ad-click and conversion signals, including the booking value and reference and a hashed (scrambled) copy of your email address — see below. |
Where information is stored or processed outside New Zealand, we use reputable providers whose safeguards we consider comparable to those of the Privacy Act 2020. We may also disclose information where required by law.
4. Analytics and cookies
- PostHog measures how the site is used — pages viewed, clicks, and interaction patterns (including heatmaps and, where enabled, session replays with keystrokes in form fields masked). It uses cookies/local storage to recognise return visits.
- Vercel Web Analytics and Speed Insights collect aggregate, cookie-free traffic and performance measurements.
- Google tag records when a visit or booking resulted from one of our Google ads, using cookies. When you complete a booking it tells Google the booking value and reference, and — using Google's "enhanced conversions" — a hashed copy of the email address on the confirmation page. Hashing turns your email into a one-way code before it leaves your browser; Google's terms for enhanced conversions limit its use to matching the booking to an ad click and measuring our advertising, and we don't share it with anyone else.
- You can limit this tracking with your browser's cookie settings, private browsing, or a content blocker — the website and booking flow work fine either way.
5. How long we keep it
Booking and payment records are kept for up to 7 years to meet New Zealand tax and accounting requirements, then deleted. Details from an unfinished booking are deleted after about four months. If we send you a reminder, we keep your email address with its unsubscribe link for two years so the link keeps working, and if you unsubscribe we keep your email address so we don't remind you again. Analytics data is retained according to the provider's standard schedule. Correspondence is kept as long as it is useful for supporting you.
6. Security
The website is served over HTTPS; the booking database and admin tools are access-controlled; card details never touch our systems. No internet service is perfectly secure, but we take reasonable steps to protect your information from loss, misuse, and unauthorised access.
7. Your rights
Under the Privacy Act 2020 you may ask us for a copy of the personal information we hold about you, and ask us to correct it. Email bookings@connectedkiwi.com and we'll respond within 20 working days. If you're unhappy with how we've handled your information, you can complain to the Office of the Privacy Commissioner (privacy.org.nz).
8. Deleting your data
To have your data deleted, email hello@connectedkiwi.com and request deletion.
9. Changes to this policy
We may update this policy from time to time; the current version always lives at this page with its effective date above. Material changes will be flagged on the homepage.
10. Contact
ConnectedKiwi Ltd · bookings@connectedkiwi.com · New Zealand