Privacy Policy
Last updated: 19 July 2026
Who we are
FernByte Limited, trading as FernByte, provides IT support, web design, hosting, email, apps and related digital services. We handle personal information under the Privacy Act 2020 and its Information Privacy Principles, including IPP 3A for indirect collection from 1 May 2026.
FernByte's Privacy Officer can be contacted at info@fernbyte.co.nz.
Information we collect
Depending on how you deal with FernByte, we may collect:
- Names, business names, roles, email addresses, phone numbers and service addresses.
- Enquiries, quotes, project briefs, support requests, device details, approvals and service history.
- Invoice, payment-reference and transaction information. Payment providers process card details; FernByte does not store full payment-card numbers.
- IP address, browser and device information, referral source, pages viewed and analytics or cookie identifiers.
- Technical information visible during an authorised repair or support session, but only to the extent reasonably required for the work.
Please do not send passwords, full card details or highly sensitive information through our public forms.
How we collect information
We usually collect information directly from you through forms, email, phone, invoices, service bookings and support sessions. Website enquiry and quote forms are processed through Formspree so the details can be delivered to FernByte.
We may also receive information from an authorised employee or representative, a referrer, payment provider, hosting or email provider, analytics provider or another service partner. Where IPP 3A applies to indirect collection, we will take reasonable steps to notify the affected person unless a lawful exception applies or they have already been appropriately informed.
Why we use information
- Respond to enquiries and prepare quotes.
- Schedule, deliver, secure and support IT, website, hosting, email, software and related services.
- Process payments, provide invoices and receipts, and maintain accounting records.
- Operate, measure, troubleshoot and improve our website and services.
- Prevent abuse, protect systems and enforce lawful agreements.
- Meet tax, accounting, insurance, privacy and other legal obligations.
Marketing messages
FernByte sends promotional email or text messages only where it has express, inferred or deemed consent permitted by New Zealand law. Marketing messages identify FernByte and include a free, functional way to unsubscribe. We action unsubscribe requests within five working days. Service messages, quotes, invoices, security notices and transaction confirmations may still be sent where needed for the customer relationship.
Who we share information with
We do not sell personal information. We may share it only as reasonably required:
- With Formspree for website-form delivery and Google for basic website analytics and advertising-conversion measurement.
- With payment, accounting, hosting, email, software, security, backup or monitoring providers used to supply the requested service.
- With professional advisers, collection providers or authorities where lawful and necessary.
- At your direction or with your consent.
Overseas providers
Some service providers process information outside New Zealand. Before making a disclosure covered by IPP 12, FernByte takes reasonable steps to use a provider with comparable safeguards, relies on another lawful basis, or obtains express authorisation after explaining that comparable New Zealand protections may not apply. We disclose provider categories publicly without publishing security-sensitive infrastructure details.
Remote support and passwords
- We access devices, accounts or dashboards only with permission and only as reasonably needed for the approved work.
- FernByte does not record remote-support sessions, calls or customer screens.
- FernByte does not retain customer passwords. Customers should provide temporary or delegated access and revoke it after the work.
Security and privacy breaches
We use reasonable technical and organisational safeguards, including access controls, least-privilege access, secure providers and encryption where appropriate. No system can be guaranteed completely secure.
If a privacy breach has caused or is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and affected individuals as soon as practicable, as required by the Privacy Act.
Retention and deletion
- Unsuccessful enquiry information is normally deleted after 12 months.
- Customer and service records are retained only while reasonably needed for service, support, warranty, security or dispute purposes.
- Financial and tax records are generally retained for at least seven years where required.
- Website files, databases and hosted mailboxes may be retained for up to 90 days after hosting cancellation and are then permanently deleted.
- Marketing-list information is retained until consent is withdrawn or it is no longer needed.
Cookies and analytics
This website uses basic Google Analytics and advertising-conversion measurement to understand visits and whether enquiries are completed. FernByte disables remarketing and advertising-personalisation signals. You can disable analytics at any time using the footer control or your browser settings. See our Cookie Policy for the current details.
Your privacy rights
You may ask FernByte to confirm whether we hold your personal information and request access or correction. You may also request deletion, although we may retain information where a lawful purpose or legal requirement applies. We may verify your identity before acting on a request. Contact the Privacy Officer at info@fernbyte.co.nz.
Children
FernByte's services are directed to businesses and adult customers. We do not knowingly collect personal information from children through the public website.
Complaints
Please contact our Privacy Officer first so we can investigate. If you remain dissatisfied, you may use the complaint process at privacy.org.nz or call the Office of the Privacy Commissioner on 0800 803 909.
Contact and company information
FernByte Limited, trading as FernByte
Company number: 9383476
NZBN: 9429053238078
Privacy Officer: info@fernbyte.co.nz
Phone: +64 20 400 20178
Address: Tremaine Avenue, Roslyn, Palmerston North 4414, New Zealand
Policy changes
We may update this policy when our practices or legal obligations change. The current version and effective date will remain published here.