Plain-language privacy information for What the Heck
This page explains what personal information we collect through this website, why we collect it, and what your options are. Last updated: 25 May 2026.
This privacy policy applies to www.whattheheck.co.nz. It is about information collected through this website and our website contact form. If you become a client, separate project terms or service agreements may also apply.
Who we are
What the Heck is a web design, branding, Shopify, SEO, email marketing, and photography business based in Tauranga and Te Puke, New Zealand.
If you have any privacy questions, please contact Andrew Nalder at andrew@whattheheck.co.nz or +64 21 808 000.
What information we collect
Depending on how you use the site, we may collect:
- your name, email address, phone number, service interest, and message when you submit the contact form
- information you choose to send us directly by email or phone
- technical information needed to operate and secure the site, such as IP address, browser, device, and server request data
Why we collect it
We collect personal information to:
- respond to enquiries and communicate with you
- understand what service you are interested in
- run, secure, and improve the website
- keep normal business records relating to enquiries and client work
Whether you have to provide it
Providing personal information through the contact form is voluntary. However, if you do not provide the required fields, we may not be able to respond to your enquiry properly.
How we use and share it
We use the information you send us to reply to you and, where relevant, to discuss or provide our services. We do not sell your personal information.
We may share information with trusted service providers that help us run the website and communications, including:
- Cloudflare, which helps host, deliver, and secure the website
- Resend, which delivers contact-form emails to us and sends our acknowledgement email to you
- Google Analytics, which helps us understand how people use the website
Information sent outside New Zealand
Some of our website and email service providers may process information outside New Zealand. Where that happens, we expect them to handle the information using appropriate safeguards for their services.
Cookies and analytics
This site uses Google Analytics to help us understand website traffic and page usage. Google Analytics may use cookies or similar technologies to collect information such as pages visited, device and browser details, approximate location, and referring websites. Our hosting and security providers may also use essential technical logging or similar technologies needed to deliver and protect the site.
Storage and retention
We take reasonable steps to protect personal information from loss, misuse, and unauthorised access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Contact form submissions are currently sent to us by email rather than stored in a separate website database. We keep personal information only for as long as we reasonably need it for the purpose it was collected, for legitimate business record-keeping, or to meet legal obligations.
Your rights
Under the New Zealand Privacy Act 2020, you can ask to access personal information we hold about you and ask for corrections if you think it is wrong, incomplete, or misleading.
To make a privacy request, email andrew@whattheheck.co.nz. We may need to verify your identity before we action the request.
External links
This site may link to other websites or social platforms. Their privacy practices are governed by their own policies, not this one.
Changes to this policy
We may update this policy from time to time to reflect changes to the website, our services, or legal requirements. The latest version will always be published on this page.