What we collect, and what we don’t.

The fonts are served from this domain rather than Google, so a page load makes no request to any advertising or social network.

We use Google Analytics to see which pages get read, how people find them and how long they stay. It sets first-party cookies to tell a returning visitor from a new one, and sends Google your approximate location, device and browser, and the pages you view. We don’t send it your name, email or anything you type into the form, and we don’t use it for advertising. Google’s explanation covers how they use it, and their opt-out add-on stops it entirely.

The contact page also loads reCAPTCHA, which sets a cookie of its own to tell a person from a bot.

Our host keeps standard server logs, which include IP addresses, for a short period for security and diagnostics. We don’t use them to identify or track anyone.

If you fill in the form on the contact page, we receive your name, company, email address, phone number if you give one, your current website, and your answers about the business, budget, timeline, sign-off and what’s prompting the project.

We use it for one thing: replying to your enquiry and, if it goes further, preparing a proposal. We don’t sell it, we don’t share it with anyone outside the studio, and we won’t add you to a mailing list.

The form is delivered by three services, which process the submission in transit and don’t use it for their own purposes:

• Cloudflare

  Receives the submission and passes it on. Nothing is stored.

• Google reCAPTCHA Enterprise

  Checks the submission is a person rather than a bot. It sets a cookie on the contact page and reports to Google how the page was used, which is what produces the score we act on. Google’s privacy policy covers what they do with it.

• Mailgun

  Sends it to us as an email. Mailgun retains delivery logs for a short period under their own policy.

After that it sits in our email, and in our proposal records if the enquiry becomes a project. We keep enquiries that don’t go anywhere for two years, then delete them.

Email info@refineddigital.nz and we’ll tell you what we hold and delete it on request. No forms, no process. If you’re in the UK or the EU, this is your right of access and erasure under the UK GDPR and GDPR; in New Zealand it’s principles 6 and 7 of the Privacy Act 2020.

This page covers refineddigital.nz only. Sites we build and host for clients have their own privacy statements, and the client is the one who decides what those sites collect.

If this changes, the date below changes with it. There’s no version history worth keeping for a page this short.