Free tools · Building and launching
A privacy policy for a New Zealand website
Most privacy policy generators produce American text about laws that do not apply here. This one is written around the New Zealand Privacy Act 2020 and the information a normal small business website actually collects. It is a starting template, not legal advice, and the output says so.
Where privacy requests go.
This is a template, not advice
It is built around the Privacy Act 2020 and the common case of a small New Zealand business website. If you handle health information, children's data or payments you store yourself, pay a lawyer. The gap between that fee and getting it wrong is not close.
Your privacy policy
PRIVACY POLICY
[Your business name]
Last updated: 6 October 2026
This policy explains how [Your business name] collects, uses and protects personal
information through [yoursite.co.nz]. We handle personal information in accordance
with the Privacy Act 2020 and the information privacy principles it sets out.
WHAT WE COLLECT
1. Information you give us directly through our contact form, which may include your name, email address, phone number and anything you choose to write in your message.
2. Technical information collected automatically when you visit, including your IP address, browser type, the pages you view and how long you spend on them. We use this to understand how the site is used, not to identify you personally.
3. Small files called cookies, stored by your browser, which keep the site working correctly and remember your preferences. You can block or delete cookies in your browser settings, though parts of the site may stop working if you do.
WHY WE COLLECT IT
We collect this information to respond to your enquiries, to provide the
services you have asked for, and to improve how this website works. We do not
collect personal information we do not need, and we do not use it for anything
you would not reasonably expect.
WHO WE SHARE IT WITH
We do not sell your personal information. We share it only with the service
providers who help us run this website and our business, such as our hosting
provider and email provider, and only to the extent they need it to do that
work. Some of these providers may store information outside New Zealand, in
which case we take reasonable steps to ensure comparable protection.
We may also disclose information where we are required to by law.
HOW LONG WE KEEP IT
We keep personal information only as long as we need it for the purpose it was
collected, or as long as the law requires. After that we delete it or render it
anonymous.
HOW WE PROTECT IT
We take reasonable steps to protect personal information against loss,
unauthorised access and misuse. No website can promise perfect security, and we
will not claim otherwise.
YOUR RIGHTS
Under the Privacy Act 2020 you have the right to ask what personal information
we hold about you, to ask for a copy of it, and to ask us to correct anything
that is wrong. There is no charge for this and we will respond within 20
working days.
To make a request, email [your@email.co.nz].
If you are not satisfied with how we have handled your information or your
request, you can complain to the Office of the Privacy Commissioner at
privacy.org.nz.
CHANGES TO THIS POLICY
If we change this policy we will update the date at the top. Material changes
will be notified on this page.
CONTACT
[Your business name]
[your@email.co.nz]
[yoursite.co.nz]
---
NOTE: This document was produced from a general template and is not legal
advice. It covers the common case of a small New Zealand business website. If
you handle health information, information about children, payment details you
store yourself, or anything else sensitive, have a lawyer review it before you
publish.Privacy policy generator · FAQ
Common questions about privacy policy generators
Does my New Zealand website need a privacy policy?
If you collect any personal information, which includes a contact form, an email signup or analytics, then the Privacy Act 2020 requires you to tell people what you collect and why. A privacy policy is the normal way to do that, and for most small sites it is the only practical way.
Is this legal advice?
No. It is a template built from the common case, and it is published free precisely because it is not advice. If you handle health information, children's data, payments you store yourself, or anything sensitive, pay a lawyer. The cost of getting those wrong is not comparable to the fee.
Does the GDPR apply to a New Zealand business?
It can, if you offer goods or services to people in the EU or monitor their behaviour. A café in Hamilton does not need to worry. An online shop that ships to Europe does, and that is a conversation worth having with a lawyer rather than a generator.
Where should the privacy policy link go?
In your footer, on every page, and beside any form that collects details. Burying it is both bad practice and self-defeating, since the point is to have told people before they hand anything over.
Rather have someone do it for you?
We build websites for New Zealand businesses at a fixed price from $2,500, live in four weeks.
Get a fixed-price quote