Privacy Policy

1. About this policy

Harbourline Construction Ltd ("Harbourline", "we", "us") is committed to protecting your privacy. This policy explains how we collect, use, disclose, and safeguard your personal information in accordance with the New Zealand Privacy Act 2020.

By using our website and services, you consent to the practices described in this policy.

2. What we collect

We may collect the following types of personal information:

• Identity information: your name, email address, and phone number when you book a consultation, request an estimate, or create a client portal account.
• Property information: the address and details of your project site, including photographs taken during site inspections and construction progress.
• Project data: documents, messages, variation requests, and other information you upload or generate through the client portal.
• Payment information: processed through Stripe. We do not store your full credit card details.
• Usage data: IP address, browser type, and pages visited, collected through standard web server logs.

3. How we use your information

We use your personal information to:

• Provide and manage our construction services
• Communicate with you about your project, estimates, and consultations
• Generate estimates, reports, and documentation related to your project
• Process payments for services you book
• Improve our website and client portal experience
• Comply with legal obligations under NZ law

4. Who we share it with

We only share your information where necessary to deliver our services:

• Contractors and suppliers: subcontractors working on your project may access relevant project documents and specifications.
• Service providers: third-party platforms we use to operate our business (Stripe for payments, Resend for email, Supabase for data storage). Each provider has its own privacy and security commitments.
• Legal requirements: we may disclose information if required by law, court order, or to protect our legal rights.

We never sell your personal information to third parties.

5. Data storage and security

Your data is stored on Supabase servers and is encrypted in transit and at rest. We use industry-standard security measures, including HTTPS, CSRF protection, and row-level security on our database, to protect your information.

Your client portal account is protected by a password you choose. Keep this password secure and do not share it. We will never ask you for your password by email or phone.

6. Data retention

We retain your project data for the duration of your project and for a reasonable period afterwards as required for warranty obligations, legal compliance, and business records. You may request deletion of your personal data at any time by contacting us (see section 8).

7. Your rights

Under the NZ Privacy Act 2020, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your data (subject to legal obligations)
• Withdraw consent where processing is based on consent
• Make a complaint to the Privacy Commissioner

8. Contact us

For privacy inquiries, data access requests, or complaints:

9. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via our website. Continued use of our services after changes constitutes acceptance.