Privacy Policy

1. Introduction

BlueTika Limited ("we", "our", "us") operates bluetika.co.nz (the "Platform"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our services.

We are committed to protecting your privacy and complying with the New Zealand Privacy Act 2020.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, phone number, password
• Profile Information: Business name, bio, location, profile photo
• Verification Documents: ID, licenses, certifications, proof of address
• Project Information: Project descriptions, budgets, locations, photos
• Payment Information: Stripe processes payment details (we do not store card numbers)
• Contract Messaging: Real-time chat messages between clients and providers for each contract
• Communications: Reviews, dispute information

2.2 Information We Collect Automatically

• Usage Data: Pages visited, actions taken, time spent on platform
• Device Information: IP address, browser type, operating system
• Location Data: Approximate location based on IP address (with consent)
• Messaging Metadata: Timestamps, read receipts, participant information for contract chat

3. How We Use Your Information

We use your information to:

• Provide and improve our marketplace services
• Process transactions and hold funds securely
• Verify service provider credentials and build trust
• Facilitate communication between clients and providers
• Send transactional emails (project updates, payment confirmations)
• Prevent fraud and ensure platform safety
• Comply with legal obligations
• Analyze usage to improve user experience

4. Information Sharing

We share your information only in these circumstances:

• With Other Users: Providers see client project details; clients see provider profiles and bids
• Service Providers: Stripe (payments), Amazon SES (emails), Supabase (database hosting)
• Legal Compliance: When required by New Zealand law or court order
• Business Transfers: In case of merger, acquisition, or asset sale

We never sell your personal information to third parties.

5. Data Security

We implement industry-standard security measures to protect your information:

• HTTPS encryption for all data transmission
• Secure httpOnly cookies for authentication
• Regular security audits and updates
• Restricted access to personal data (authorized personnel only)
• Stripe PCI-DSS compliance for payment processing

While we take reasonable precautions, no method of transmission over the internet is 100% secure. You are responsible for maintaining the confidentiality of your account password.

6. Your Rights

Under the New Zealand Privacy Act 2020, you have the right to:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your account and data (subject to legal retention requirements)
• Object: Object to certain types of processing
• Portability: Request your data in a portable format

To exercise these rights, contact us at privacy@bluetika.co.nz

7. Data Retention

We retain your information for as long as necessary to:

• Provide our services to you
• Comply with legal and tax obligations (minimum 7 years for financial records)
• Resolve disputes and enforce agreements

Deleted account data is anonymized or permanently removed within 30 days, except where legal retention is required.

7.1 Project and Contract Data

• Draft Projects: Retained indefinitely until published or manually deleted by you
• Active Projects: Visible in the public feed until deadline + 7 days, then automatically expired (data retained in your account)
• Archived Contracts: Completed and cancelled contracts are moved to your archive and retained for 7 years for legal/tax compliance
• Cancellation Requests: Stored with contract records for dispute resolution purposes

While expired and cancelled contracts are removed from public view, they remain accessible in your account dashboard for record-keeping and tax purposes.

7.2 Messaging Data

• Contract Chat: Real-time messages between clients and providers are retained with the contract record
• Retention Period: Messaging data is retained for 7 years alongside contract records
• Purpose: Used for dispute resolution and legal compliance

8. Cookies

We use essential cookies to maintain your login session (httpOnly, secure). We do not use advertising or tracking cookies.

9. Third-Party Links

Our Platform may contain links to third-party websites (e.g., Stripe). We are not responsible for the privacy practices of external sites. Please review their privacy policies.

10. Children's Privacy

BlueTika is not intended for users under 18. We do not knowingly collect information from children. If we discover a child's account, we will delete it immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with the "Last updated" date revised. Continued use after changes constitutes acceptance.

12. Contact Us

For privacy-related questions or concerns, contact us:

• Email: privacy@bluetika.co.nz
• Company: BlueTika Limited
• Location: Auckland, New Zealand