Privacy Policy

Last updated: 28 September 2026

1. About This Policy

This policy explains how Made 4 Tradies ("we", "us", "our") collects, holds, uses and discloses personal information, and how you can access it, correct it or complain. It follows the Privacy Act 2020 and its Information Privacy Principles (IPPs). Made 4 Tradies is the trading name of R J Kelsey (ABN 33 189 153 652), a sole trader business based in Australia. We carry on business in New Zealand, so the Privacy Act 2020 applies to the personal information we collect here. This policy covers visitors to this website, people who contact us or use our services, and trade businesses we contact about our services.

2. Information We Collect

The personal information we collect depends on how you deal with us. Information you give us: • Your name, email address and phone number • Details of your business, such as its name, trade, service area, website and Google Business Profile • What you tell us in enquiries, audit requests, bookings, briefs and other messages, and any files you send us • Details of other people you give us, for example when you refer someone to us • Testimonials and reviews you give us • Your marketing preferences • Payment details. Payments are processed by Stripe, and we never see or store your full card number. Information we collect automatically when you use our website, such as your IP address, details of your browser and device, the pages you visit, and how you arrived, including advertising and campaign identifiers. Section 6 explains the tools that collect it. Information from other sources: • Publicly available business information, such as Google Business Profiles, business websites, online reviews and business directories. This can include a business owner's name and the business's contact details. We use it to find trade businesses that may benefit from our services and to contact them about those services. • People who refer you to us. • Our advertising and analytics providers, which report to us on how our ads and website perform. If we collect your details from someone other than you, such as a person who referred you, we will let you know when we first contact you. You can always ask us where we got your details. Giving us personal information is voluntary, and you can browse our website without telling us who you are. If you do not give us your contact details, we may not be able to respond to your enquiry or provide our services. We do not ask for sensitive information, such as information about your health, racial or ethnic origin, religious or political beliefs, or criminal record. Please do not include it in messages to us. Our services are for businesses and are not intended for children. We do not knowingly collect personal information from anyone under 18.

3. How We Use Your Information

We collect, hold and use personal information to: • Respond to your enquiries, prepare quotes and audits, and book calls • Provide, manage and bill for the services you buy from us • Send you service messages, such as booking confirmations, receipts and updates about your project • Send you marketing about our services, as described below • Find trade businesses that may benefit from our services, using publicly available business information, and contact them about those services • Run our referral program • Publish testimonials and reviews you give us, with your name, business name and location (you can ask us to remove one at any time) • Measure and improve our website and our advertising, including showing our ads to people who have visited our website (see section 6) • Keep our website and systems secure, and prevent spam and fraud • Meet our legal obligations and resolve disputes Marketing: we send marketing emails and messages only where the law allows, for example when you have asked for them, when we already have a business relationship with you, or when a business has published its contact details and our message relates to that business. Every marketing email includes an unsubscribe link, and you can also ask us to stop at any time using the details in section 12. We will act on your request promptly. We do not sell or rent your personal information.

4. Who We Share It With

We share personal information with service providers that help us run our business. They handle it on our behalf, for the purposes in this policy: • HubSpot, our customer records and email marketing system • Resend, which delivers our emails • Stripe, which processes payments • Google, for business email, documents, calendar bookings and video calls • Vercel, which hosts this website, and Upstash, which stores some of its data • Cloudflare, which checks that some of our forms are not being filled in by bots • PostHog, for website analytics (see section 6) • Telegram, which we use to alert our team to new enquiries • AI service providers (see below) • People who work with us to deliver our services We use AI service providers (companies that supply AI tools such as chat assistants and writing tools) to help us run our business, for example to draft replies to enquiries, summarise emails and plan our marketing. When we use these tools, the information needed for that task may be sent to the provider, which processes it on our behalf. Some of these providers are based overseas, including in the United States, so your information may be processed outside New Zealand. We also share information with advertising platforms: Meta and Google. Section 6 explains what each one receives. They use it for their own purposes as well as ours, under their own privacy policies. We may also disclose personal information to our professional advisers, such as accountants and lawyers, to anyone we are required or authorised by law to disclose it to, and to a buyer of our business if we sell it. Otherwise, we disclose personal information only with your consent or where the law requires or permits it.

5. Information Sent Overseas

We manage personal information from Australia, where our business is based. Our service providers in section 4 hold or process personal information on our behalf, some of them outside New Zealand and Australia, mainly in the United States. Under section 11 of the Privacy Act 2020, information a provider holds only on our behalf is treated as held by us, so we remain responsible for it. Meta and Google use the information they receive for their own purposes, under their own privacy policies, and may store it outside New Zealand. When we disclose personal information to an organisation outside New Zealand that will use it for its own purposes, we do so only where Information Privacy Principle 12 (disclosure outside New Zealand) allows, for example where the organisation carries on business in New Zealand and is subject to the Privacy Act 2020, or is subject to privacy laws that, overall, provide comparable safeguards.

6. Analytics, Cookies and Advertising

We use the following analytics and advertising services on this website. Google Analytics 4 (GA4) measures how visitors find and use our website. It sets first-party cookies on this domain (_ga, and a cookie whose name starts with _ga_) that hold a random identifier, so it can recognise repeat visits. They last up to 2 years. Google receives information about your visit, such as the pages you view, how you arrived, your approximate location, and your browser and device. We keep GA4 data for 14 months. We use Google Analytics Advertising Features: Remarketing with Google Analytics, and Demographics and Interests reporting. This means we and Google use first-party cookies (such as the Google Analytics cookies) and third-party cookies (such as Google advertising cookies) together to show our ads to people who have visited our website when they later use other websites and apps, to measure how those ads perform, and to report on visitors' age range, gender and interests. Those reports are aggregated and do not identify you to us. If you are signed in to a Google account and have allowed ads personalisation, Google may link this information to your account. You can turn off personalised Google ads in My Ad Center at myadcenter.google.com, and opt out of Google Analytics entirely with the Google Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout. Vercel Analytics and Speed Insights measure page views and how quickly our pages load. They do not use cookies or persistent identifiers. You can read more at vercel.com/legal/privacy-policy. PostHog, a product analytics service, helps us understand how visitors use this website. It records the pages you view and when you leave them, the links and buttons you click (including the text on them), when you submit a form (but not what you typed into it), how you found our site, and errors that occur on the page. It also makes session recordings, which replay how you scrolled, moved and clicked on a page, and heatmaps that show where visitors click and scroll. Session recordings capture what is shown on the page, but what you type into form fields (such as your name, email address or phone number) is masked (hidden) in your browser before the recording is sent. Recordings also include technical messages the website writes in your browser (such as error messages) and a list of the files and requests each page loads, with their addresses and timings but not their contents. Session recordings are kept for 30 days. PostHog stores random identifiers in a first-party cookie (its name starts with ph_ and ends with _posthog) and in your browser's local storage so it can recognise repeat visits. The cookie expires after one year. PostHog also receives your IP address and details of your browser and device, and may use your IP address to estimate your approximate location. This data is sent through our own domain, but PostHog processes and stores it on servers in the United States, so it is processed outside New Zealand. You can delete the cookie and clear local storage in your browser settings at any time. HubSpot's tracking code sets first-party cookies on this domain (such as hubspotutk and __hstc) and records the pages you visit. If you then fill in one of our forms, HubSpot links those visits to your record in our customer system, so we can see which pages you viewed. HubSpot's tracking code can also load the advertising tags of ad accounts we connect to HubSpot. HubSpot may store this data outside New Zealand. We use Meta (Facebook and Instagram) advertising tools, including the Meta Conversions API. Our website sets two Meta advertising cookies: _fbp, a random identifier for your browser, and _fbc, which records your click if you arrived from a Meta ad. Both last up to 90 days. When you submit a form, book a call, sign up or make a payment, our server sends Meta details of that action through the Conversions API. Where we have them, your first name, last name, email address, phone number, city and country are hashed before they are sent. Hashing turns each one into a code that Meta cannot read but can match against details it already holds, such as those in a Facebook or Instagram account, so hashed details can still identify you to Meta. Your IP address, details of your browser and device, the identifiers in the _fbp and _fbc cookies, and the address of the page you were on are sent without hashing. This lets Meta attribute conversions to our ads, measure their performance, show our ads to people who have visited our website (remarketing), and find people similar to our customers. Meta Platforms processes this data and may store it outside New Zealand. You can control or limit this through your Facebook and Instagram ad preferences and through your browser or device settings. Our website also records how you reached it, so we can see which ads and campaigns bring us enquiries. If you arrive by clicking an ad, the ad platform adds a click identifier to the link, and our website stores it in a first-party cookie: gclid for Google ads (kept for 90 days), and rdt_cid for Reddit ads and ttclid for TikTok ads (each kept for 30 days). We do not currently read the gclid, rdt_cid or ttclid cookies or send them to anyone. If the link you followed carried campaign tags (such as utm_source or utm_campaign), our website stores those tags, the page you landed on and the time you arrived in a first-party cookie called m4t_attribution, kept for 90 days. Our website also keeps a similar note in your browser's local storage: the campaign tags, whether you arrived from a Google or Meta ad, and the website that referred you. When you send us an enquiry through a form or book a call, we may add where you came from, such as the ad platform and campaign name, to your record in our customer database (HubSpot) and to our internal notification of your enquiry. We also add it to the analytics described above (Google Analytics 4 and PostHog). You can delete these cookies and clear local storage in your browser settings at any time. Your choices: you can block or delete cookies and clear local storage in your browser settings, although some parts of our website may not work as well without them. You can limit personalised advertising through My Ad Center (myadcenter.google.com), your Facebook and Instagram ad preferences, and your device's advertising settings.

7. Security and Retention

We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, change or disclosure. Our website uses encrypted connections (HTTPS), we use established service providers with their own security controls, and we limit access to the people who need it. We keep personal information only for as long as we need it for the purposes in this policy, or for as long as the law requires, for example for tax and accounting records. When we no longer need it, we delete it or remove the details that identify you. Google Analytics data is kept for 14 months. If a data breach is likely to cause you serious harm, we will tell you and the Office of the Privacy Commissioner, as the law requires.

8. Access and Correction

You can ask for access to the personal information we hold about you, and ask us to correct it (Information Privacy Principles 6 and 7). Contact our Privacy Officer using the details in section 12. We may need to confirm your identity first. We will respond within 20 working days of receiving your request, as the Privacy Act 2020 requires, and will tell you if we need more time. We do not charge for making a request. If we refuse a request, we will tell you why and that you can complain to the Privacy Commissioner. If we do not agree to correct your information, you can ask us to attach a statement of the correction you asked for, and we will take reasonable steps to do so.

9. Complaints

If you think we have breached the Privacy Act 2020 or mishandled your personal information, please contact our Privacy Officer using the details in section 12 and tell us what happened. We will acknowledge your complaint, look into it, and aim to respond in writing within 20 working days. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner at www.privacy.org.nz.

10. Links to Other Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any external sites you visit.

11. Changes to This Policy

We may update this policy from time to time, for example when we change the tools we use or when the law changes. The date at the top of this page shows when it was last updated. If we make a significant change, we will post the updated policy on this page.

12. Contact Us

For questions about this policy, to ask for access to or correction of your information, or to make a complaint, contact our Privacy Officer: Privacy Officer Made 4 Tradies (R J Kelsey) ABN 33 189 153 652 Business address: 11 Gardenia Ave, Lane Cove West NSW 2066, Australia New Zealand contact address: Hastings, Hawke's Bay 4172 Email: hello@made4tradies.co.nz