Privacy policy

Last updated: 20 October 2026

1. Who we are

This website is operated by Rubber Duck Studio, based in Christchurch, New Zealand (“we”, “us”, “our”). We are responsible for the personal information described in this policy and handle it in line with the Privacy Act 2020.

Our Privacy Officer can be contacted at [email protected].

2. What we collect

• What you send us. When you use our contact or waitlist form: your name, email address, business name, your message and what you’re interested in. If you email or call us, the content of that conversation.
• Technical information. When you visit the site, our hosting and security provider automatically processes information such as your IP address, browser type and the pages requested, to deliver the site and protect it from abuse.
• Spam protection. Our form uses Cloudflare Turnstile, which checks whether a visitor is a person. It may process technical signals from your browser for that purpose only.

We don’t use advertising or tracking cookies, and we don’t build profiles of visitors. Please don’t send us sensitive information (for example health or financial details) through the form.

3. Why we use it

• To reply to your enquiry and, if you ask, to prepare a proposal or quote.
• To add you to a product waitlist you choose, and tell you about that product.
• To provide services if you become a client, and to manage that relationship.
• To run, secure and improve the website and prevent spam or misuse.
• To meet our legal, tax and record-keeping obligations, and to establish or defend legal claims.

We only use your information for these purposes, or for a directly related purpose, unless you agree otherwise or the law allows it.

4. Emails from us

We’ll only send you product news if you joined a waitlist or otherwise agreed to hear from us. Every such email identifies us and includes a way to unsubscribe, as required by the Unsolicited Electronic Messages Act 2007. Replies to your own enquiry are not marketing.

5. Who we share it with

We don’t sell or rent your personal information. We share it only with:

• Service providers that help us run the business, such as website hosting and security (Cloudflare), email delivery and our email and file storage providers. They act on our behalf and may only use your information to provide their service to us.
• Professional advisers such as our accountant or lawyer, where needed.
• Authorities where the law requires it, or where it’s necessary to prevent a serious threat to someone’s life, health or safety.
• A buyer or successor of our business, if the business or its assets are sold or restructured, on the condition that they keep protecting it under this policy.

6. Storage outside New Zealand

Some of our service providers store or process information outside New Zealand (for example in Australia, the United States or the European Union). Where that happens, we take reasonable steps to make sure the information is protected in a way that, overall, is comparable to the Privacy Act 2020.

7. How we protect it

We use reasonable security safeguards, including encrypted connections (HTTPS), access limited to people who need it, and reputable providers. No system is completely secure, but if a privacy breach happens that is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and the people affected as the Privacy Act requires.

8. How long we keep it

• Enquiries that don’t lead to work: up to 24 months after our last contact.
• Waitlists: until the product launches and for up to 12 months after, or until you unsubscribe.
• Clients: for as long as we work together and afterwards as long as the law requires (business and tax records are generally kept for 7 years).

After that we delete or anonymise it.

9. Your rights

You can ask to see the personal information we hold about you and ask us to correct it. Email [email protected]. We’ll respond within the time the Privacy Act 2020 requires (generally 20 working days). We may need to confirm your identity first. If we decline a correction, you can ask us to attach a statement of the correction you wanted.

You can unsubscribe from waitlist emails at any time.

10. Complaints

If you have a concern about how we’ve handled your information, please contact us first so we can try to fix it. If you’re not satisfied, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

11. Children

This website and our services are aimed at businesses. We don’t knowingly collect information from people under 16.

12. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.