Legal
Privacy Policy
Welcome to KeystoneWebSystems.co.nz ("we", "us", "our"). We are committed to protecting your privacy and being transparent about how we collect, use, and share information. This Privacy Policy explains how information is collected and used when you visit our website.
By using KeystoneWebSystems.co.nz, you agree to the collection and use of information in accordance with this policy.
1. Who we are
Keystone Web Systems is a New Zealand-based web design and hosting studio. This policy covers keystonewebsystems.co.nz, including the website concepts we host on it for prospective clients.
2. Information we collect
Information you provide
We may collect personal information that you voluntarily provide to us, including:
- Contact information — if you contact us via email, the contact form or the project brief: your name, email address and, if you give it, phone number
- Enquiry content — the project you're enquiring about, the message you send, and the answers in any project brief you submit
Information automatically collected
When you visit our website, we automatically collect certain information about your device and how you interact with our site:
- Log data — IP address, browser type, browser version, pages visited, time and date of visit, time spent on pages
- Cookies and tracking technologies — we use cookies and similar tracking technologies to track activity and store certain information (see the Cookies section below)
- Usage data — information about how you use our website, including pages viewed and navigation patterns
3. How we use your information
We use the collected information to:
- Provide and maintain our service — ensure our website and forms function properly
- Improve our website — understand how visitors use our site to make improvements
- Communicate with you — respond to your enquiries, comments, or support requests
- Analyse usage — understand visitor behaviour to improve our content
- Comply with legal obligations — meet legal and regulatory requirements
4. Cookies and tracking technologies
Cookies are small text files stored on your device when you visit a website. We keep our use of them deliberately small, and nothing that is optional runs before you have agreed to it.
We do not serve advertising and we set no advertising cookies. We do not sell or share your personal information, and we do not use cookies to build a profile of you across other websites.
Cookies we set
p101_consent(essential, ~6 months) — remembers the choice you made in the cookie banner. Without it we would have to ask on every page.- Cloudflare Turnstile (essential, session) — the anti-spam check on our contact forms may store a short-lived token to confirm you are not a bot. It is used only for that.
_gaand_ga_Z6EXNHY0QC(analytics, up to 2 years) — set by Google Analytics to count visits and see which pages are useful. These are only set if you accept analytics.
Local storage we use
These are not cookies and are never sent to us or anyone else — they stay in your browser so the site remembers what you were doing:
- Theme preference — remembers light or dark mode if you change it
- Saved progress — our project brief questionnaire keeps your answers so you do not lose them on refresh. You can clear this with the reset control on those pages.
Your choice, and changing it
When you first visit, a banner asks whether you will allow analytics. Analytics stays switched off until you accept — closing or ignoring the banner is not treated as agreement, and refusing is exactly as easy as accepting.
You can change your mind at any time. If you reject analytics after previously accepting, we also delete the Google Analytics cookies already on your device.
Managing cookies in your browser
You can also control cookies through your browser settings — block them all, accept only certain types, or delete them after browsing. Note that blocking essential cookies may affect the contact form and saved progress in the project brief.
- Chrome: Settings → Privacy and Security → Cookies
- Firefox: Options → Privacy & Security → Cookies
- Safari: Preferences → Privacy → Cookies
- Edge: Settings → Privacy, search, and services → Cookies
5. Third-party services
Google Analytics
We use Google Analytics to understand how visitors use our site — how often people visit, which pages they view, and where they arrived from. This is used to improve our website and content. It collects the IP address assigned to you on the day you visit, not your name or other identifying information.
Google Analytics does not run until you accept it. We use Google Consent Mode v2, which means analytics storage, advertising storage, ad personalisation and ad user data are all set to "denied" before Google's script loads. Accepting the banner switches analytics storage on; nothing switches on advertising.
Cloudflare
Our site is hosted on Cloudflare Workers. Cloudflare may collect technical data about your visit (IP address, request data) as part of providing hosting, CDN, and security services. We also use Cloudflare Turnstile on our contact forms to block automated spam — it checks the request, not the person, and needs no consent because the forms would not work safely without it. See Cloudflare's Privacy Policy.
Contact form handling
The enquiry form and the project brief are handled by our own Cloudflare Worker, which emails your details to us through Resend, our email delivery provider. See Resend's Privacy Policy.
External links
Our website contains links to external sites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any external websites you visit.
6. Data retention
We retain your information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.
- Analytics data — retained according to Google Analytics settings (typically 26 months)
- Contact enquiries — deleted after resolving your enquiry unless you consent to longer retention
7. Sharing your information
We do not sell or share your personal information. We may disclose it to trusted service providers who help us run the website — for example, Cloudflare (hosting and spam protection), Google (analytics, only if you have accepted it), and Resend (delivering form submissions to our inbox). These providers are only permitted to use your information to perform the services we have asked them to perform.
We may also disclose information where required by law.
8. Storage and security
We take reasonable measures to protect your information from unauthorised access, alteration, disclosure, or destruction. Security measures we implement include HTTPS encryption, secure hosting infrastructure, regular security updates, and limited access to personal information.
No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. Some of our service providers may process data outside New Zealand; where they do, we expect them to apply a comparable standard of protection.
9. Children's privacy
Our website is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will delete it.
10. Your rights
Depending on your location, you may have certain rights regarding your personal information:
- Access — request a copy of the information we hold about you
- Correction — request correction of inaccurate or incomplete information
- Deletion — request deletion of your personal information
- Objection — object to our processing of your information
- Restriction — request restriction of processing
To exercise these rights, contact us at info@keystonewebsystems.co.nz. We aim to respond to all requests within 7 business days.
For New Zealand users
We comply with the New Zealand Privacy Act 2020. You have the right to access and correct your personal information. If you're not satisfied with how we've handled your information, you can contact the Office of the Privacy Commissioner.
For EU users (GDPR)
Under GDPR, our lawful bases for processing your information include your consent, our legitimate interests in operating the site, and compliance with legal obligations. You have the right to lodge a complaint with your local data protection authority.
For California users (CCPA)
California residents have the right to know what personal information is collected, know if it is sold or disclosed, opt out of the sale of personal information, access their personal information, and request its deletion. We do not sell your personal information.
11. International data transfers
Your information may be transferred to and processed in countries other than New Zealand. These countries may have different data protection laws. When we transfer your information internationally, we take steps to ensure appropriate safeguards are in place.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of changes by posting the updated policy on this page and updating the "Last updated" date at the top. We encourage you to review this policy periodically. Changes are effective when posted.
13. Contact
If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:
- Email: info@keystonewebsystems.co.nz
- Website: https://keystonewebsystems.co.nz
Definitions
- Personal information — information that identifies, relates to, or could reasonably be linked to you
- Cookies — small text files placed on your device to store information
- Processing — any operation performed on personal information, including collection, storage, use, or deletion
- Third party — an entity other than you or us
By using KeystoneWebSystems.co.nz, you acknowledge that you have read and understood this Privacy Policy.