Privacy Policy.

Summary

The interactive Map collects no personal information about you. The site as a whole uses Google Analytics for anonymised usage stats, Formspree to process the contact form, and Vercel + Cloudflare for hosting and tile delivery (which retain standard server logs). We do not sell, rent, or share your personal information for marketing purposes. You have rights under the NZ Privacy Act 2020 — see section 5.

1. What we collect

Map and website usage (Google Analytics)

When you visit floodmap.nz or use the interactive Map, we collect anonymised usage data through Google Analytics 4 (measurement ID: G-79LS13YYF5), including:

• Pages visited and time spent on each
• Browser type, device type, screen size and operating system
• Approximate geographic location (country/region level only — IP addresses are anonymised before storage by Google)
• How you arrived at the site (referrer URL, campaign source)
• Aggregate usage of map features (zoom level, layer toggles, address searches at a counted level — not the addresses themselves)

This data is collected in aggregated, anonymised form. We do not collect your name, email address or any personally identifiable information through the Map.

Address search

When you search an address on the Map, the search query is sent to OpenStreetMap's Nominatim service for geocoding. The address text is processed by Nominatim under their privacy policy. SAE Ltd does not retain the address you searched.

Tile and content delivery (Cloudflare, Vercel)

Map tile data is served from Cloudflare R2; the website itself is served from Vercel. Both providers may record standard server access logs (including IP addresses, request timestamps, user-agent strings and file paths) for security monitoring, abuse prevention and service operation. SAE Ltd does not independently store or process these logs beyond what the providers retain by default.

Contact and enquiry information

If you submit the contact form on floodmap.nz, the form is processed by Formspree and the submission is forwarded to us by email. The information you provide (name, email, phone, company, enquiry text) is collected to respond to your enquiry. This information is stored in Formspree's submission archive and in our email system. It is not shared with any other third party except where strictly necessary to provide a service you have asked for, or where required by law.

2. How we use your information

• To operate, maintain and improve the Site and Map
• To understand how users find and use the Map (so we can prioritise data updates and feature work)
• To respond to enquiries and provide engineering services where requested
• To investigate and prevent abuse, scraping, or breach of these Terms
• To comply with legal obligations

We do not sell, rent, or share your personal information with third parties for marketing purposes. We do not build user profiles for advertising.

3. Third-party services

The Site relies on the following third-party services. Each has its own privacy policy governing how they handle your data.

You can opt out of Google Analytics tracking using the Google Analytics opt-out browser add-on or by enabling "Do Not Track" / equivalent privacy settings in your browser.

4. Cookies and local storage

The Map uses browser local storage (not cookies) to remember that you have accepted the disclaimer. This stores a single flag (such as "accepted") and contains no personal data. It persists in your browser until you clear browser storage. Material changes to the disclaimer reset this flag so you re-acknowledge.

Google Analytics uses cookies to attribute repeat visits and aggregate usage. You can control cookies through your browser settings, or use the opt-out add-on linked above.

The Site does not use third-party advertising cookies, retargeting pixels, or social media tracking pixels.

5. Your rights (Privacy Act 2020)

Under the New Zealand Privacy Act 2020, you have the right to:

• Access personal information we hold about you
• Correct inaccurate personal information
• Request deletion of personal information where we have no lawful basis to retain it
• Withdraw consent for analytics or other processing where applicable
• Make a complaint to the Office of the Privacy Commissioner — see privacy.org.nz

To exercise these rights, contact us at info@subeng.nz. We will respond within 20 working days.

6. Data retention

• Contact enquiries: retained for seven years to comply with professional obligations and tax requirements.
• Google Analytics: retained per Google's standard retention period (up to 14 months for user-level data).
• Hosting / CDN access logs: we do not independently retain these beyond what Vercel and Cloudflare retain by default (typically days to weeks).
• Disclaimer-acceptance flag: stored in your browser only, never transmitted to us; cleared whenever you clear browser data.

7. Security

We use industry-standard practices to protect personal information from loss, misuse and unauthorised access. The Site is served over HTTPS (TLS) and our hosting providers maintain SOC 2 / ISO 27001 controls. No internet-connected service is perfectly secure; if we become aware of a breach affecting your personal information, we will notify you and the Office of the Privacy Commissioner where required by the Privacy Act 2020.

8. Overseas transfer

Several of the third-party services listed above (Google, Formspree, Vercel, Cloudflare) process data outside New Zealand, including in the United States and other jurisdictions. Where personal information is transferred overseas, we rely on the contractual privacy commitments of those providers, who hold themselves to standards comparable to or stronger than the NZ Privacy Act. By using the Site you consent to this overseas processing.

9. Children

The Site is not directed at children under 13 and we do not knowingly collect personal information from children. If you believe a child has submitted personal information, please contact us so we can remove it.

10. Changes to this policy

We may update this policy. The current version is always available at https://floodmap.nz/privacy. Material changes will be indicated by updating the version date at the top. Continued use of the Site after changes constitutes acceptance.

11. Contact

For privacy questions, access requests, correction requests or complaints:

SAE Ltd — Privacy Officer
76 Latham Street, Marewa, Napier 4110, New Zealand
Email: info@subeng.nz
Phone: 027 604 4015

If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner — privacy.org.nz.