Privacy Policy | What the Heck

This privacy policy applies to www.whattheheck.co.nz. It is about information collected through this website and our website contact form. If you become a client, separate project terms or service agreements may also apply.

Who we are

What the Heck is a web design, branding, Shopify, SEO, email marketing, and photography business based in Papamoa, Tauranga, and working with businesses across New Zealand.

If you have any privacy questions, please contact Andrew Nalder at andrew@whattheheck.co.nz or +64 21 808 000.

What information we collect

Depending on how you use the site, we may collect:

your name, email address, phone number, business, website, service interest, and message when you submit the contact form
information you choose to send us directly by email or phone
technical information needed to operate and secure the site, such as IP address, browser, device, and server request data

Why we collect it

We collect personal information to:

respond to enquiries and communicate with you
understand what service you are interested in
run, secure, and improve the website
keep normal business records relating to enquiries and client work
prepare an internal summary, public-business research, and a draft response for Andrew to review

Whether you have to provide it

Providing personal information through the contact form is voluntary. However, if you do not provide the required fields, we may not be able to respond to your enquiry properly.

How we use and share it

We use the information you send us to reply to you and, where relevant, to discuss or provide our services. We do not sell your personal information.

We may share information with trusted service providers that help us run the website and communications, including:

Cloudflare, which helps host, deliver, and secure the website
Resend, which delivers contact-form emails to us and sends our acknowledgement email to you
OpenAI, which assists us with internal enquiry summaries, relevant public-business research, and response drafts that Andrew reviews before sending
Google Analytics, which helps us understand how people use the website

Information sent outside New Zealand

Some of our website and email service providers may process information outside New Zealand. Where that happens, we expect them to handle the information using appropriate safeguards for their services.

Cookies and analytics

This site uses Google Analytics to help us understand website traffic and page usage. Google Analytics may use cookies or similar technologies to collect information such as pages visited, device and browser details, approximate location, and referring websites. Our hosting and security providers may also use essential technical logging or similar technologies needed to deliver and protect the site.

Storage and retention

We take reasonable steps to protect personal information from loss, misuse, and unauthorised access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Contact form submissions are sent to us by email and stored in our private CRM so we can manage the enquiry, our response, and any resulting client work. We keep personal information only for as long as we reasonably need it for the purpose it was collected, for legitimate business record-keeping, or to meet legal obligations.

Your rights

Under the New Zealand Privacy Act 2020, you can ask to access personal information we hold about you and ask for corrections if you think it is wrong, incomplete, or misleading.

To make a privacy request, email andrew@whattheheck.co.nz. We may need to verify your identity before we action the request.

External links

This site may link to other websites or social platforms. Their privacy practices are governed by their own policies, not this one.

Changes to this policy

We may update this policy from time to time to reflect changes to the website, our services, or legal requirements. The latest version will always be published on this page.