Privacy Policy

1. Who this policy applies to

This policy explains how ShedSpecs Limited collects, uses and shares personal information through shedspecs.co.nz and enquiries made through this website. It applies to website visitors, people who contact us and people whose information is included in an enquiry.

ShedSpecs Limited, based in Masterton, Wairarapa, New Zealand, is responsible for the personal information described here. You can contact our Privacy Officer through the enquiry form on this website or, if you use a ShedSpecs portal, through the ShedSpecs Support portal.

The retail and commercial portals have their own privacy notices and service agreements. Please read the notices provided in the portal you use. Infinity Consulting Engineers Limited is a separate company and is responsible for information it holds for its own professional services and records.

Send an enquiry · Open the ShedSpecs Support portal

2. Information we collect

We collect information reasonably needed to respond to enquiries, operate the website and protect it from misuse.

• Details you provide, including your name, email address, optional phone number and company, project type, project details and correspondence.
• Information about other people that you include in an enquiry, such as a project owner or contact.
• Technical and security information, such as IP addresses, browser or device information, request times, security-check results and website error records.

3. Where information comes from

We usually collect information directly from you when you submit the contact form or correspond with us. Technical information may be collected automatically when you visit the website or complete the contact-form security check.

We may receive information from an authorised builder, project owner or other person contacting us about a project. If you provide someone else's personal information, make sure you have authority to do so and that they know why it is being provided. Where New Zealand law requires notification of indirect collection, we will take reasonable steps to notify the person unless an exception applies.

4. Why we use information

We use information for the purpose it was collected, a directly related purpose, a purpose you authorise or another purpose permitted by law.

• Respond to your enquiry, discuss your project and coordinate services you request.
• Maintain correspondence and follow up on your request.
• Protect the contact form and website from spam, fraud and other misuse, investigate errors and maintain reliability.
• Handle privacy requests, complaints and legal or business obligations.

5. What you need to provide

Providing personal information is voluntary. The contact form requires your name, email address and project details so we can respond; other contact fields are optional. If you do not provide required information or complete the security check, we may be unable to accept or respond to your enquiry.

Please provide accurate, relevant information. Avoid including passwords, financial details or sensitive personal information that is unnecessary for your enquiry.

6. Who may receive information

We do not sell personal information. If you accept analytics and marketing cookies, Google and Meta receive information about your visit as described in section 8; we never send them your name, email address, phone number or enquiry details. Otherwise, access is limited to people and organisations that need it for an authorised purpose.

• ShedSpecs staff and authorised people who handle enquiries and requested services.
• Infinity Consulting Engineers Limited where needed to coordinate engineering services you request.
• Service providers supporting website operation, communications, security and customer support.
• Google (Google Analytics) and Meta (Meta Pixel), only if you accept analytics and marketing cookies.
• Professional advisers, regulators or other parties where disclosure is required or permitted by law, or needed to deal with a complaint, claim or security incident.

7. Service providers and overseas processing

Some service providers may process or store website and enquiry information outside New Zealand. Where overseas-disclosure rules apply, we take reasonable steps to ensure comparable privacy safeguards, appropriate contractual protections or another lawful basis for disclosure.

Providers processing information only on our instructions are expected to protect it and use it for the services they supply to us.

8. Cookies, analytics and contact-form security

Essential cookies and security technologies are used to protect the website and contact form and to remember your cookie choice.

With your consent, we use Google Analytics and the Meta Pixel. They help us understand how people find and use this website, which pages and links are used, whether our advertising (including Facebook and Instagram ads) leads to visits, enquiries or portal sign-ups, and to measure that advertising. These tools set cookies and may receive your IP address, browser and device information, pages visited, the website or ad that referred you, and actions such as clicking a portal link or sending an enquiry (without the details you enter). Google and Meta may process this information outside New Zealand and use it under their own privacy policies, including, for Meta, to measure and improve ads.

These analytics and marketing tools are not loaded unless you choose Accept analytics. If you choose Essential only, or later change your choice through Cookie settings in the website footer, they are not used and we remove their cookies where we can.

Links from this website to the ShedSpecs Pole Portal include campaign information, such as the page you came from and any advertising campaign that brought you here, so the portal can tell how builders find it. This information is not linked to your name unless you later create a portal account.

The contact form uses Cloudflare Turnstile to distinguish genuine enquiries from automated abuse. When the security check is enabled, Cloudflare may receive technical information, including your IP address, browser or device information and security-check interactions. Our form verification also supplies your IP address to the security-check provider. Cloudflare's own privacy policy describes its handling of that information.

We use short-lived, hashed network identifiers to limit repeated form submissions. Website and security providers may also process technical request records. If we change how we use non-essential tracking, we will update this policy and provide any notice or choice required.

Read Cloudflare’s privacy policy · Google’s privacy policy · Meta’s privacy policy

9. Security and retention

We use reasonable technical and organisational safeguards to protect personal information from loss, misuse and unauthorised access or disclosure. No online service can guarantee absolute security.

We keep enquiry and correspondence records only for as long as reasonably needed to respond, provide requested services and meet legal, security or dispute-related obligations. Short-lived abuse-prevention records are set to expire automatically. Records and backups are deleted or de-identified when no longer reasonably required.

If a privacy breach causes or is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and affected people as required by the Privacy Act 2020.

10. Your privacy rights and complaints

You may ask to access personal information we hold about you or request correction of inaccurate or incomplete information. You may also request deletion; we will consider your request, although some records may need to be retained for a lawful purpose.

Send your request to the Privacy Officer through the enquiry form on this website or, if you use a ShedSpecs portal, through the ShedSpecs Support portal, and start your message with 'Privacy request' or 'Privacy complaint'. We may need to verify your identity or authority and will respond within the time required by New Zealand law. Do not send passwords or unnecessary sensitive information.

If you are not satisfied with our response, you can complain to the New Zealand Office of the Privacy Commissioner at privacy.org.nz.

Office of the Privacy Commissioner

Send an enquiry · Open the ShedSpecs Support portal

11. Changes to this policy

We may update this policy as our website or legal obligations change. The current policy and its updated date will be published here. We will provide reasonable notice of material changes affecting how we handle existing personal information.