Mangawhai Directory

Privacy Policy

Last updated: 3 May 2026.

Mangawhai Directory (“we”, “us”, “our”) operates mangawhaidirectory.co.nz. This policy explains what personal information we collect when you use the site, why, and the rights you have under the Privacy Act 2020.

We comply with the 13 Information Privacy Principles (IPPs). If something here is unclear, contact us — details at the bottom of the page.

Who we are

Mangawhai Directory is a small, locally-operated business directory based in Mangawhai, Northland, New Zealand. The site lists local businesses for community discovery; we do not run user accounts, forums, or behavioural advertising.

What we collect, and why

When you browse

Like most websites, our hosting and content delivery network record standard server logs — IP address, user agent, page requested, timestamp — for security, debugging and abuse-prevention purposes. These logs are retained for a short period (typically 30 days) and are not used to build a profile of you.

Website analytics (Google Analytics 4)

We use Google Analytics 4 (GA4) to understand which pages and categories are useful, how people navigate the site, and where to improve.

  • GA4 sets cookies (named _ga, _ga_*) that record an anonymous client identifier and aggregate browsing events.
  • GA4 does not store individual IP addresses. IPs are used only transiently for coarse-grained geolocation (e.g. region of New Zealand) and discarded.
  • GA4 data is processed by Google LLC (United States) on Google’s global infrastructure — see Overseas storage and processing below.
  • We have set the GA4 user-data retention period to its minimum (2 months).

You can opt out of Google Analytics on every site you visit by installing the Google Analytics Opt-out Browser Add-on. You can also disable cookies in your browser settings — analytics cookies do not affect site function.

Display advertising on this site

Some pages carry paid display advertisements. We sell ad slots directly; we do not use behavioural ad networks, retargeting, or third-party ad pixels. Each ad is a static image hosted on our own infrastructure with a click-through link. Clicking an ad takes you to that advertiser’s website, where their privacy policy applies (not ours).

If we ever change this — for example, by introducing a third-party ad server — we will update this policy first.

When you contact us

If you use the contact page to email us, we’ll receive whatever you put in the message — typically your name, email address, and the body of your enquiry. We use that information only to respond to you, then keep the email in our records for up to 12 months for follow-up purposes before deleting it.

When a business is listed

Most listings on the directory are curated from publicly available sources (business websites, NZBN, public social profiles). The personal information that appears (e.g. owner name, business email, phone) was published by the business itself in a public context. If you are named on a listing and would like it changed or removed, contact us — see Your rights.

Cookies and similar technologies

The site uses two categories of cookies:

  • Strictly necessary — none. The directory is a static site that does not require cookies to function.
  • Analytics — set by Google Analytics 4 (_ga, _ga_*).

We do not use advertising or tracking cookies beyond GA4. Most browsers let you block, delete or restrict cookies; doing so will not affect your ability to use the directory.

How we share your information

We share information only with:

  • Google LLC — as our analytics provider (data processor). Google’s privacy policy and data-handling for GA4 apply.
  • Our hosting and email providers — to operate the site and respond to your enquiries. They process information on our behalf, under contractual confidentiality obligations.

We do not sell, trade, or rent personal information to third parties for marketing purposes. We do not pass enquiry messages on to listed businesses unless you ask us to.

Overseas storage and processing

Some of the providers above (notably Google) store and process information on servers outside New Zealand, including in the United States and other countries. By using this site, you understand and agree that your information may be transferred to and processed in those jurisdictions, where privacy protections may differ from those in New Zealand. We rely on the contractual safeguards that those providers have in place (Google’s standard data processing terms; equivalent measures with our other suppliers) to protect that information consistent with Information Privacy Principle 12.

How long we keep information

  • Server logs: approximately 30 days.
  • Google Analytics 4 user data: 2 months (Google’s minimum retention).
  • Contact-form messages: up to 12 months from the date of receipt, then deleted.
  • Listing data: for as long as the listing remains active. On request, we’ll remove a listing within a reasonable time.

How we keep information secure

We take reasonable steps to protect personal information against loss, unauthorised access, modification, disclosure or other misuse, in line with IPP 5. The site is served over HTTPS; access to administrative tools is restricted; supplier contracts include security obligations.

In the event of a serious privacy breach (a “notifiable breach” under Part 6 of the Privacy Act 2020), we will notify the Office of the Privacy Commissioner and any affected individuals as soon as practicable.

Your rights

Under the Privacy Act 2020 you have the right to:

  • Access the personal information we hold about you (IPP 6).
  • Correct information you believe is inaccurate or incomplete (IPP 7).
  • Request deletion of information we hold about you. We’ll do that unless we’re legally required to retain it.

To exercise any of these rights, email us at the contact details below. We’ll respond within 20 working days, as required by the Act. We may ask for proof of identity before releasing or changing personal information.

Children

This site is intended for a general adult audience (business listings). We do not knowingly collect personal information from children under 16. If you believe a child has supplied personal information through our contact form, please contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. Material changes will be flagged at the top of the page; the “Last updated” date above always reflects the current version.

Contact us — and complaints

For any privacy question, access request, correction request, or complaint, contact us first:

If you’re not satisfied with our response, you can complain to the Office of the Privacy Commissioner — the independent regulator under the Privacy Act 2020: