Privacy notice

Template — must be reviewed by a qualified privacy lawyer before launch. Last drafted 2026-06-21.

This notice explains how this service collects, uses, and protects your personal information. It is written to align with the New Zealand Privacy Act 2020 and the India Digital Personal Data Protection Act 2023 (DPDP), because our users are primarily in India and the service relates to New Zealand.

Who we are

This service is operated by Bobby Blackstone ("we", "us"). We are an information and self-assessment service. We are not Licensed Immigration Advisers and are not affiliated with Immigration New Zealand. Contact: [contact email to be added].

What we collect, and why

• Your email address — to sign you in (passwordless) and contact you about the service.
• Optional country — to tailor general information.
• Your self-assessment answers and progress — to show you your own saved results.
• Billing status — if you subscribe (payment is processed by Stripe; we do not store card details).
• Security/audit logs — to protect the service (we hash identifiers such as IP addresses).

We practise data minimisation: we collect the least information needed, and we avoid collecting sensitive immigration documents unless you choose to upload them.

Consent

We collect and process your information with your consent, captured and dated when you sign in. You may withdraw consent at any time by deleting your account.

Where your data is stored

Data is stored using Cloudflare infrastructure with the storage primary located in the Oceania region. Email is sent via Amazon Web Services (SES) in the Sydney region. Note that content delivery operates from a global edge network; a strict data-residency guarantee is a documented item under review.

Your rights

You can request access to, correction of, or erasure of your data. Use the buttons on your account page, or contact us. When you delete your account we remove your data; our payment processor (Stripe) retains billing records as required by its own legal obligations.

Retention

We keep your data while your account is active and delete it on request, subject to any legal-retention obligations.

Breach notification

If a notifiable privacy breach occurs, we will notify the New Zealand Privacy Commissioner and affected individuals as required by the Privacy Act 2020, and meet applicable DPDP obligations.