Privacy Policy

FernByte Limited, trading as FernByte, provides IT support, web design, hosting, email, apps and related digital services. We handle personal information under the Privacy Act 2020 and its Information Privacy Principles, including IPP 3A for indirect collection from 1 May 2026.

FernByte's Privacy Officer can be contacted at info@fernbyte.co.nz.

info@fernbyte.co.nz

Depending on how you deal with FernByte, we may collect:

• Names, business names, roles, email addresses, phone numbers and service addresses.
• Enquiries, quotes, project briefs, support requests, device details, approvals and service history.
• Invoice, payment-reference and transaction information. Payment providers process card details; FernByte does not store full payment-card numbers.
• IP address, browser and device information, referral source, pages viewed and analytics or cookie identifiers.
• Technical information visible during an authorised repair or support session, but only to the extent reasonably required for the work.

Please do not send passwords, full card details or highly sensitive information through our public forms or live chat.

We usually collect information directly from you through forms, live chat, email, phone, invoices, service bookings and support sessions. Website enquiry and quote forms are processed through Formspree so the details can be delivered to FernByte.

We may also receive information from an authorised employee or representative, a referrer, payment provider, hosting or email provider, analytics provider or another service partner. Where IPP 3A applies to indirect collection, we will take reasonable steps to notify the affected person unless a lawful exception applies or they have already been appropriately informed.

When you open live chat, our self-hosted Chatwoot service connects you with FernByte. We store your messages, any contact details you provide and conversation information so we can respond and continue your enquiry. Chat first loads when you choose to open it. Browser storage helps reconnect an existing chat session when you return or move between pages.

During a chat session, technicians can see your most recently reported FernByte page, whether the page is active or idle, and your last activity time. We use page addresses without query strings or fragments. These indicators help us support you and may be delayed if your device loses its connection. We do not collect unsent message text, keystrokes or other form contents. A timestamped browser record coordinates activity across your open FernByte tabs; stale entries are ignored and removed on the next update. Only the latest reported activity is saved with your chat contact.

Your browser may briefly highlight the chat button after time spent browsing or scrolling. This uses local timing and scrolling cues, does not read form contents, and does not send these cues to FernByte. A session flag prevents repeated prompts.

Live chat connects you with the FernByte team. Please provide your name and email so we can follow up; a phone number is optional. If we’re unavailable, you can leave a message and we’ll respond using the contact details you shared.

Cloudflare provides secure delivery of the chat service. Mobile notifications for FernByte staff use Chatwoot’s notification relay and Google’s push services; notification information may be processed outside New Zealand. Live chat is optional, and you can use our contact form, email or phone instead.

Chat enquiries follow the retention and deletion rules below. Please only include information needed for your enquiry.

• Respond to enquiries and prepare quotes.
• Schedule, deliver, secure and support IT, website, hosting, email, software and related services.
• Process payments, provide invoices and receipts, and maintain accounting records.
• Operate, measure, troubleshoot and improve our website and services.
• Prevent abuse, protect systems and enforce lawful agreements.
• Meet tax, accounting, insurance, privacy and other legal obligations.

FernByte sends promotional email or text messages only where it has express, inferred or deemed consent permitted by New Zealand law. Marketing messages identify FernByte and include a free, functional way to unsubscribe. We action unsubscribe requests within five working days. Service messages, quotes, invoices, security notices and transaction confirmations may still be sent where needed for the customer relationship.

We do not sell personal information. We may share it only as reasonably required:

• With Formspree for website-form delivery and Google for basic website analytics and advertising-conversion measurement.
• With payment, accounting, hosting, email, software, security, backup or monitoring providers used to supply the requested service.
• With professional advisers, collection providers or authorities where lawful and necessary.
• At your direction or with your consent.

Some service providers process information outside New Zealand. Before making a disclosure covered by IPP 12, FernByte takes reasonable steps to use a provider with comparable safeguards, relies on another lawful basis, or obtains express authorisation after explaining that comparable New Zealand protections may not apply. We disclose provider categories publicly without publishing security-sensitive infrastructure details.

• We access devices, accounts or dashboards only with permission and only as reasonably needed for the approved work.
• FernByte does not record remote-support sessions, calls or customer screens.
• FernByte does not retain customer passwords. Customers should provide temporary or delegated access and revoke it after the work.

We use reasonable technical and organisational safeguards, including access controls, least-privilege access, secure providers and encryption where appropriate. No system can be guaranteed completely secure.

If a privacy breach has caused or is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and affected individuals as soon as practicable, as required by the Privacy Act.

• Unsuccessful enquiry information is normally deleted after 12 months.
• Customer and service records are retained only while reasonably needed for service, support, warranty, security or dispute purposes.
• Financial and tax records are generally retained for at least seven years where required.
• Website files, databases and hosted mailboxes may be retained for up to 90 days after hosting cancellation and are then permanently deleted.
• Marketing-list information is retained until consent is withdrawn or it is no longer needed.

This website uses basic Google Analytics and advertising-conversion measurement to understand visits and whether enquiries are completed. FernByte disables remarketing and advertising-personalisation signals. You can disable analytics at any time on our Cookie Policy page or through your browser settings. See our Cookie Policy for the current details.

Cookie Policy

You may ask FernByte to confirm whether we hold your personal information and request access or correction. You may also request deletion, although we may retain information where a lawful purpose or legal requirement applies. We may verify your identity before acting on a request. Contact the Privacy Officer at info@fernbyte.co.nz.

info@fernbyte.co.nz

FernByte's services are directed to businesses and adult customers. We do not knowingly collect personal information from children through the public website.

Please contact our Privacy Officer first so we can investigate. If you remain dissatisfied, you may use the complaint process at privacy.org.nz or call the Office of the Privacy Commissioner on 0800 803 909.

privacy.org.nz

FernByte Limited, trading as FernByte

Company number: 9383476

NZBN: 9429053238078

Privacy Officer: info@fernbyte.co.nz

info@fernbyte.co.nz

Phone: +64 20 400 20178

+64 20 400 20178

Service area: Palmerston North and Manawatū, New Zealand

We may update this policy when our practices or legal obligations change. The current version and effective date will remain published here.