Last updated2026-05-18
1. Who we are
This site is operated by Think and Form Limited, a New Zealand company based in Auckland (NZBN [NZBN PLACEHOLDER]). In this notice, "we", "us", and "our" refer to Think and Form Limited.
We are responsible for personal information collected through thinkandform.co.nz in the manner described below.
2. What we collect
We have deliberately built this site to collect as little personal information as possible.
2.1 Information you give us directly
The site does not have a contact form. If you choose to email us using one of the "mailto" links, we receive whatever you put in that email — usually your name, email address, and the content of your message.
2.2 Information we collect automatically
- Page views and navigation via Vercel Analytics. This is anonymous and does not set cookies on your device. It records things like which page was visited, the approximate region, the referring site, and the device type.
- Performance metrics via Vercel Speed Insights. This records anonymous Core Web Vitals (load times, responsiveness, layout stability) so we can monitor site performance.
- Server logs. Like any website, our hosting provider keeps short-lived logs of requests (IP address, user agent, timestamp) for security and operational reasons.
2.3 What we do not do
- We do not run advertising or marketing cookies.
- We do not sell or rent personal information.
- We do not profile visitors or build advertising audiences from this site.
3. Why we collect it
- To respond to enquiries and arrange consulting work.
- To understand which pages are useful and improve them.
- To monitor and protect the site against abuse or technical failure.
4. Who else sees this information
We use a small set of trusted service providers:
- Vercel Inc. — hosting, Analytics, and Speed Insights. Vercel processes data on our behalf and operates globally. See Vercel's privacy policy.
- Your email provider and ours— when you email us using a "mailto" link, your email is handled by whatever providers sit between us (for example, Google Workspace, Microsoft, or your own mail server).
We do not share personal information with anyone else unless we are required to by New Zealand law, or unless you have given us clear permission to do so.
5. Where it is stored
Personal information may be stored or processed outside New Zealand by the providers listed above. Where this happens, we rely on providers that have comparable data-protection practices and contractual safeguards.
6. How long we keep it
- Email correspondence — kept for up to 24 months from your last contact, unless we are working together on something that requires us to keep it longer.
- Analytics data — retained by Vercel according to their published retention windows.
- Server logs — short-lived, typically a few days to a few weeks.
7. Your rights under the Privacy Act 2020
You have the right to:
- Ask whether we hold any personal information about you.
- Ask for a copy of that information, and to ask us to correct it if it is wrong.
- Ask us to stop using or to delete information we hold about you, where the Privacy Act allows.
We will respond to reasonable requests within the timeframes set out in the Privacy Act. If you are not happy with our response, you can complain to the Office of the Privacy Commissioner.
8. Children
This site is not directed at children. We do not knowingly collect personal information from anyone under 13.
9. Changes to this notice
We may update this notice from time to time. The "Last updated" date at the top of this page shows when it was last changed. For material changes, we will make the update prominent on the site.