Privacy policy
What we collect, why we collect it, and what we do with it. In plain English.
We are a small team and we treat your information the way we would want ours treated: collect only what we need, keep it only as long as it is useful, and never sell it.
Questions? Email info@bluefusion.co.nz.
Last updated 1 November 2026
Who we are
BlueFusion is the trading name of BlueFusion Digital Limited, a New Zealand company at 61 Jacksons Road, Lyttelton, Christchurch 8082. We build and look after websites, run Google Ads, and operate BlueFusion Voice, an AI phone answering service.
This policy covers bluefusion.co.nz and the work we do for clients. It is written to meet the Privacy Act 2020 and its information privacy principles. Where we build or host a website for a client, that client's own privacy policy covers their visitors, not this one.
What we collect, and why
When you contact us
The contact forms on this site ask for your name, email address, phone number and message. Submissions are handled by Netlify, our hosting provider, and emailed to us. We use them to reply to you, scope and quote your project, and keep a record of what we discussed. If you would rather not give us a phone number, email us instead and we will work with what you send.
If you book a meeting through one of our Koalendar links, Koalendar collects your name, email address and the time you chose under its own privacy policy, and passes them to our calendar. Calls, WhatsApp messages and emails work the same way as any other business: we keep the thread so we can pick up where we left off.
When you become a client
To do the work we hold your business contact details, project briefs, content and images you give us, and the logins we need for your website, domain, hosting and advertising accounts. Invoicing runs through Xero, so your billing name, address and payment history sit there too. We keep financial records for the seven years the Inland Revenue Department requires.
When you visit the site
The site is static: there is no account system and no database of visitors behind it. Netlify keeps standard server logs, which include your IP address and the pages requested, for a short period for security and troubleshooting. The search page sends what you type to Algolia, which returns the results; your search terms are processed by Algolia under its privacy policy and are not tied to your name.
Cookies and analytics
We use Google Tag Manager to load Google Analytics 4 and Google Ads conversion tracking. These set cookies and record which pages you visit, roughly where you are, what device and browser you use, and whether you got in touch after clicking one of our ads. We use this to see which pages are working and whether our advertising pays for itself. Google processes this data in the United States; IP addresses are not stored by Google Analytics 4 and the reports we see are aggregated. Analytics data is kept for no more than 14 months.
You can block or clear cookies in your browser settings, install Google's Analytics opt-out add-on, or manage personalised advertising at Google's My Ad Center. The site works the same either way.
Our fonts are served from our own domain, so visiting the site does not call Google Fonts. The search page loads its scripts from the jsDelivr content delivery network.
BlueFusion Voice callers
If you rang a business and an AI assistant answered, that business uses BlueFusion Voice. Every call opens by saying it is an AI assistant and that the call is recorded. The agent takes your name, phone number and the reason for your call, and sends them with a transcript and recording to the business you rang. Nothing else is done with them: recordings are not sold, not used for advertising and not used to train general purpose AI models.
The business you called decides what is collected and is responsible for it under the Privacy Act. We hold the recordings and transcripts as their agent, on their instructions, and only to run and improve their agent. Where a business has asked us to review calls for quality, we listen to a sample of recent calls to fix how the agent handles them. Transcripts and recordings are stored on US-hosted platforms for 90 days and then deleted.
To see or correct what was recorded about you, contact the business you rang. If you would rather come to us, email info@bluefusion.co.nz and we will work with them to sort it out.
Client data we hold on your behalf
When you give us your customers' information, such as a mailing list to migrate, orders in a Shopify store or enquiries sitting in your site's database, you remain the agency responsible for it. We act on your instructions, use it only for the work you have asked us to do, keep it secure, and return or delete it when the engagement ends or when you ask. Under the information privacy principles, that information stays yours, not ours.
Who we share it with
We do not sell personal information and we do not give it to anyone for their own marketing. We share it only with the service providers that run our business, and only as much as each one needs:
- Netlify, which hosts this site and receives form submissions (United States).
- Google, for Analytics, Ads, Tag Manager, and the calendars we book meetings into (United States).
- Algolia, for site search (United States).
- Koalendar, for meeting bookings (European Union).
- Xero, for invoicing and accounts (New Zealand company, data hosted in the United States).
- The telephony, speech and AI platforms behind BlueFusion Voice (United States).
- Our email, calendar and file storage providers.
We will also disclose information where the law requires it, for example to a court or a regulator, or where it is needed to prevent a serious threat to someone's health or safety.
Information sent overseas
Several of the providers above store data outside New Zealand, mostly in the United States. The Privacy Act lets us do that where the provider is holding the information as our agent and is bound to protect it, or where it is protected by comparable safeguards. Each provider listed is contractually bound to handle the data only on our instructions and under its own published privacy and security commitments. We remain responsible for it under New Zealand law wherever it is stored.
How we keep it safe
The site is served over HTTPS and has no customer database to breach. Access to our email, Netlify, Google, Xero and client systems is limited to the two directors. We are a two-person company, so there is no long chain of people with access to your information.
If we ever have a privacy breach that is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and the people affected as soon as practicable, as the Privacy Act requires.
How long we keep it
- Enquiries that do not become projects: until they are no longer useful, usually within two years.
- Client records, project files and correspondence: for the life of the engagement and seven years after, to meet tax record-keeping requirements and to support the sites we built.
- Google Analytics data: no more than 14 months.
- BlueFusion Voice transcripts and recordings: 90 days.
- Netlify server logs: a short rolling period set by Netlify.
Your rights
You can ask us what personal information we hold about you, ask for a copy, and ask us to correct it. There is no charge. Email info@bluefusion.co.nz and we will respond within 20 working days, usually much sooner. If we decide not to correct something, you can ask us to attach a note saying you requested the correction, and we will.
We do not send newsletters or marketing emails. If that changes, we will only email people who have agreed to it, every message will have a working unsubscribe link, and we will honour it, as the Unsolicited Electronic Messages Act 2007 requires.
If you are unhappy with how we have handled your information, tell us first and we will try to put it right. You can also complain to the Office of the Privacy Commissioner at privacy.org.nz, by phone on 0800 803 909, or by post to PO Box 10094, Wellington 6143.
Changes to this policy
When we change the tools we use or the way we work, we will update this page and the date at the top. The current version is always the one published here.
Contact us
Our privacy officer can be reached at info@bluefusion.co.nz, on 021 027 05450, or at BlueFusion Digital Limited, 61 Jacksons Road, Lyttelton, Christchurch 8082, New Zealand.