Privacy Policy
What happens to information you share here
When you explore Toodeloo Business, make contact or leave enabled visitor feedback, some information is needed to deliver those features. This page describes the main uses and the choices available to you. The website operator can be reached through Contact Us for a privacy enquiry or request.
Messages and public contributions
An enquiry form collects the details displayed on it, which may include your name, email address, phone number and message. Required information is marked. Publication messages are private to authorised managers. A business enquiry may be reviewed before being forwarded to the business, or sent directly where the form explains that arrangement. The recipient business is responsible for its subsequent handling.
A visitor review is different from an enquiry. If accepted for publication, its displayed name or anonymous label, comment, rating and date can be visible to others. Do not place private documents or another person's unnecessary details in a public contribution. Choosing an anonymous label changes what visitors see; it does not prevent the recording of security information.
Operational information
The service can record IP addresses, browser and request details, timestamps and reactions to support security, moderation, fault finding and engagement measurement. Information is used for the stated feature, related administration and lawful obligations, rather than an unrestricted purpose simply because it has been collected.
Protection and control of your details
People with authorised responsibilities may access private information when needed to administer the website or deal with a request. Technical suppliers, such as hosting and communication providers, may process information on the operator's behalf. Disclosure may also occur where lawfully required or justified, including responding to serious misuse, but it must have a proper basis.
Storage is purposeful, not indefinite
Records are kept for as long as their purpose, legitimate operational needs and applicable law require. Information no longer needed should be deleted or de-identified, recognising that backups and security logs may be retained on different cycles. Reasonable security measures are used, although no online system can promise complete protection from every risk.
Where a provider or recipient is overseas, relevant New Zealand privacy requirements and safeguards must be considered before information is disclosed. Suitable contractual or legal protection, or another permitted basis, may be necessary. Using the website does not give blanket permission to transfer personal information for unrelated purposes.
Your browser and outside websites
Cookies or similar storage may support essential functions and remembered preferences. Measurement depends on the tools enabled here. You can manage storage through your browser, with possible effects on some features. A link or embedded service can take you into another operator's environment, where separate privacy terms apply.
Ask to see or correct information
Send an access, correction or privacy concern through Contact Us. Explain what information you mean and your connection to it. The operator may verify identity and will respond within the requirements of applicable law, including lawful limits on disclosure and correction-statement rights. You can raise unresolved concerns with the New Zealand Privacy Commissioner or other competent authority.
Please limit what you send to what the enquiry needs. Where information is collected indirectly, required notifications must be considered. Privacy incidents will be assessed for any legal notification duties. This notice may evolve with the service, but a wording change does not authorise a new use without an appropriate basis.