Legal
Privacy policy
How we handle your information under the New Zealand Privacy Act 2020.
Last updated: 17 May 2026.
What we collect
When you submit the quote form, viability quiz, or contact form we collect: your name, email, phone (optional), company, project description, sector, location, stage and budget bands you select. We also log a hashed IP address (one-way SHA-256) and your user-agent string for abuse prevention.
Why we collect it
To respond to your enquiry, prepare a quote, and run our engagement if you become a client. We do not sell or share your information with third parties for marketing.
Third parties we use
- Resend — to send email replies and reports. Your email + name pass to Resend.
- Cal.com — if you book a call. Cal.com receives the booking details directly.
- PostHog — anonymous web analytics. No PII transmitted.
- Railway — our hosting provider. Database storage.
- Cloudflare — DNS and (optionally) document storage.
- Slack — internal lead notifications. Your name + sector + budget band transmitted.
Your rights
Under the New Zealand Privacy Act 2020 you can:
- Ask us what we hold about you
- Receive a copy of your data in a portable format (JSON)
- Request correction or deletion
- Complain to the Office of the Privacy Commissioner if dissatisfied
To exercise any of these rights, email hello@fasttrackpartners.co.nz. We respond within 20 working days as required by the Act.
Retention
We retain enquiry data for up to 24 months from last contact, after which it is automatically archived. Engagement-related records (contracts, consents, statutory submissions) are retained for seven years as required by professional-services standards.
Security
Data is encrypted in transit (HTTPS/TLS 1.2+) and at rest. Admin access is restricted by password and audit-logged. We do not store passwords in plain text. IP addresses are hashed before storage.
Children
Our services are not directed to anyone under 16. We do not knowingly collect information from minors.
Changes
If we materially change this policy, we will note the new date above and (where relevant) email anyone with an active engagement.