Privacy Policy

Robb & Taylor Contracting Ltd is responsible for personal information collected through https://www.robbtaylor.co.nz, our enquiry process and our project administration. We operate in Wellington, Kāpiti and the Lower North Island, New Zealand. Direct privacy enquiries to our privacy contact at rene@robbtaylor.co.nz or 021 0274 2447; ask us for a postal address if you prefer to write.

This policy covers website visitors, people requesting work and their representatives. It describes our own information handling; an external website has its own policy. Sending an enquiry does not give permission for unrelated uses of your information.

We collect information you provide through forms, calls, emails and project discussions. Required fields are identified on the form. Providing information is voluntary, but without contact details and enough project information we may be unable to respond, assess risk or prepare a quote.

• Contact and enquiry details: name, email address, phone number, company if supplied, service required, project location and the information you put in your message.
• Project material: scope, site information, budget or timing if supplied, and plans or photographs you send to our team separately. The current website enquiry forms do not take payment card details.
• Administration records: correspondence, quote and job references, enquiry status, staff notes, project and financial records where relevant, and notification or delivery records.
• Technical information: requested pages, time, browser and device details, network information such as IP address in hosting/security logs, and error records. Optional measurement also uses cookie identifiers, referral/campaign information and interaction events as explained in our Cookie Policy.

Please supply only information relevant to the project and that you are entitled to share. Avoid identity documents, passwords, payment card details, unrelated health information and identifiable people in photographs. Tell your representative or other affected people when you give us their information.

We may receive project information from an owner, main contractor, authorised representative or adviser. Where we collect personal information indirectly, we take reasonable steps to notify the person of the collection, purposes, recipients and access/correction rights as soon as reasonably practicable, unless an exception under the Privacy Act applies.

• Assess and answer enquiries, arrange site visits, estimate scope, provide quotes and communicate about the work you request.
• Manage accepted projects, coordination, site safety, variations, accounts, complaints and legal or recordkeeping obligations.
• Maintain our internal enquiry dashboard and notify authorised staff or administrators that an enquiry needs attention. Notification emails may include your contact and project details and a reference or admin link.
• Send operational enquiry and project messages. Automated messages do not mean a quote has been accepted or work has been booked.
• Protect the website and records, investigate misuse and diagnose faults; measure website and campaign performance only under the optional settings described in our Cookie Policy.

Access is for people who need the information to carry out these purposes. This can include authorised directors, estimating/project staff and the website administrator or developer acting for us. Internal alert recipients may use business-managed or authorised individual email accounts.

We may disclose relevant information to contractors, specialist advisers, insurers, professional advisers, regulators or emergency services where needed for your project, a lawful purpose or a legal requirement. We do not sell or rent enquiry lists or routinely pass them to unrelated businesses for their own marketing.

The website is hosted on Vercel. Enquiry data and associated functions use the existing Bolt-managed database platform through Supabase-compatible services. Email delivery is handled by the website’s configured notification service and the recipients’ email providers. Google provides optional analytics and, where described in our Cookie Policy, advertising measurement. Google Fonts also receives network requests when fonts are fetched.

Our providers and their subprocessors may process information outside New Zealand. We remain responsible for information handled by a provider solely as our agent. Where a transfer is a disclosure to an overseas recipient in its own right, we must have an applicable lawful basis and the safeguards required by information privacy principle 12. Website use alone is not blanket permission to waive those safeguards. Contact us for information about the providers relevant to your enquiry.

We use your details to respond to the request you make and for relevant service communications. A request for a quote or acceptance of cookies is not an automatic subscription to unrelated promotional campaigns.

Any commercial electronic marketing must have a lawful consent basis, identify the sender and provide a working unsubscribe method. You can ask us to stop optional follow-ups by contacting us. We may still send essential project, account, safety or legal messages.

We retain personal information only for as long as it is required for the purpose it was collected for or another lawful purpose. Relevant factors include whether an enquiry is active, an ongoing project or dispute, financial recordkeeping, safety records and legal obligations. We do not promise that every record is automatically erased after a fixed number of years.

You can ask us to delete or de-identify information that is no longer needed. We assess the request against retention duties and legitimate outstanding purposes. Backup copies and delivery-provider records can remain until their normal replacement or retention cycle; they should not be used for a new, unrelated purpose.

We use HTTPS for the website and restrict administration to authorised access. Protecting information also requires appropriate account access, safe handling of exports, email inboxes and uploaded material. No website, email or storage system can be guaranteed completely secure; please contact us promptly if information appears exposed or a message seems suspicious.

If a privacy breach causes, or is likely to cause, serious harm, we must notify the Office of the Privacy Commissioner and affected people as soon as practicable, subject to the Act’s exceptions. We will assess and respond to a reported incident rather than ask you to treat it as a routine website enquiry.

Email rene@robbtaylor.co.nz with “Privacy request” in the subject, or phone 021 0274 2447. You may ask whether we hold your information, request access and seek correction. We may need proportionate identity checks or authority to act for someone else; do not send identity documents unless we explain what is required.

We decide access and correction requests as soon as reasonably practicable and within 20 working days unless a lawful extension applies. If we refuse access or correction, we explain the applicable reason and complaint rights. You can ask for a statement of correction to be attached. The Privacy Act does not give an unconditional right to immediate erasure of all records.

Please raise concerns with us first so we can investigate. You may also complain to the Office of the Privacy Commissioner at privacy.org.nz. Other legal rights apply where the relevant law applies; visiting from overseas does not by itself establish that every overseas privacy regime applies to this service.

This version takes effect on 22 October 2026. We update the date when the policy changes materially. A revised notice does not retrospectively authorise a new use of previously collected information. See our Cookie Policy for device storage and optional measurement choices.