Privacy Policy

VOIDFORGE LIMITED — PRIVACY POLICY

Voidforge Limited ("Voidforge", "we", "us") is a New Zealand–based engineering and prototyping studio. We take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect personal information in accordance with the New Zealand Privacy Act 2020, the GDPR, and other applicable privacy laws.

Last updated: 25 November 2025

If you have any questions, you can contact us anytime at: privacy@voidforge.nz

1. The Information We Collect

We collect the following types of personal information:

1.1 Information you provide to us

  • Your name and contact details
  • Email addresses (e.g., through contact forms)
  • Company / organisation information
  • Project details if you engage us for work
  • Any materials you voluntarily provide (documents, files, prototypes, designs)

1.2 Information we automatically collect

When you visit our website, we may collect:

  • IP address (anonymised where possible)
  • Browser type, device type, operating system
  • Pages viewed, time on site, and referring URLs
  • Basic analytics data (we use privacy-respecting analytics)

1.3 Information from clients or partners

During projects, we may also process:

  • User research or feedback you provide
  • Technical logs or usage information related to systems we maintain
  • Any personal information included in assets you supply

We will never intentionally collect sensitive information unless required for a specific project and explicitly agreed in writing.

2. How We Use Your Information

We use your information to:

  • Provide and improve our services
  • Communicate with you about enquiries, projects, and support
  • Prepare proposals, quotes, prototypes, and engineering outputs
  • Maintain security and integrity of our systems
  • Comply with legal obligations (e.g., tax, record-keeping)
  • Analyse traffic and performance of our website

We do not sell or trade your personal information.

3. Legal Bases for Processing (GDPR)

If you are in the EU/EEA or UK, we process your information under the following legal bases:

  • Contract – to provide services you engage us for
  • Consent – for optional analytics or tracking (where applicable)
  • Legitimate Interests – improving our services and understanding site usage
  • Legal Obligation – compliance with NZ law (tax, accounting, etc.)

4. How We Store and Protect Your Information

We store data using reputable, secure third-party providers, including:

  • Vercel – website hosting
  • Cloudflare – CDN and security
  • Google Workspace – email, documents, and collaboration
  • Other tools as required for specific projects

Your data may be stored in New Zealand, the United States, the EU, or other countries where our service providers operate. These providers comply with GDPR-grade data protection and hold appropriate security certifications.

We take reasonable steps to protect your information from loss, unauthorised access, misuse, or disclosure.

5. Disclosure to Third Parties

We may share personal information with:

  • Trusted subcontractors or collaborators helping deliver a project
  • Service providers (hosting, email, analytics, payment platforms, etc.)
  • Legal, accounting, or regulatory bodies if required by law

We ensure third parties only access the minimum information necessary and handle it securely.

We do not sell personal information.

6. Cookies & Analytics

We use lightweight, privacy-respecting analytics tools (e.g., Vercel Analytics, Cloudflare Web Analytics). These tools may collect:

  • Device and browser information
  • Session and page activity
  • Aggregated traffic statistics

We do not use invasive tracking or behavioural advertising cookies.

If you are in a region where consent is required, a cookie banner will be shown.

7. Your Rights

7.1 If you are in New Zealand (Privacy Act 2020):

You have the right to:

  • Access your personal information
  • Request correction of information
  • Know how and why your data is being used
  • Complain to the Office of the Privacy Commissioner

To request access or correction, email privacy@voidforge.nz.

7.2 If you are in the EU/EEA or UK (GDPR):

You have the right to:

  • Access your personal data
  • Request correction
  • Request deletion ("right to be forgotten")
  • Object to processing
  • Restrict processing
  • Data portability
  • Withdraw consent at any time
  • Lodge a complaint with your local Data Protection Authority

We will respond to all valid requests within 30 days.

8. International Transfers

Because our infrastructure and tools are global, your personal information may be processed outside your home country. Where required, we use:

  • Standard Contractual Clauses (GDPR)
  • Privacy-compliant service providers
  • Contractual commitments ensuring adequate protection

9. Retention of Information

We keep personal information only for as long as necessary to:

  • Deliver services
  • Maintain records (required under NZ tax law for 7 years)
  • Comply with legal obligations
  • Resolve disputes

After that, information is securely deleted or anonymised.

10. Children's Privacy

Our website and services are not intended for children, and we do not knowingly collect personal information from anyone under 16.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date will reflect the most recent version. If changes are significant, we will notify you by email or on this page.

12. Contact Us

If you have questions, concerns, or want to exercise your rights, please contact:

Voidforge Limited

Email: privacy@voidforge.nz

Location: Dunedin, New Zealand