AccreditDesk

Privacy Act 2020

Privacy statement

Last updated 17 October 2026. This statement covers this website, the waitlist, the survey and founding-member pre-orders. Before launch we’ll publish a separate statement for the AccreditDesk product, and you’ll see it before you upload any worker records.

Who we are

AccreditDesk is a trading name of Billy Hancock, Hamilton, New Zealand. We collect and hold the information described here. Contact us at [email protected].

What we collect, and why

When you join the waitlist

Your work email address, business name, number of AEWV workers, and (if you choose) your accreditation expiry month. We also record that you ticked the consent box, the version of its wording, and when you sent the form. We use this to send the renewal reminders and launch news you asked for, and to understand demand for AccreditDesk, for example how many signups come from businesses of each size. Giving us this information is voluntary, but without an email address we can’t send you anything.

When you answer the survey

Your answers. If you joined the waitlist in the same browser tab, the answers are linked to your signup with a one-way code made from your email address, not the address itself. We use the answers to decide what to build first and how to price it.

When you pre-order

Payments are handled by Stripe on Stripe’s own checkout page. Stripe collects your payment details; we never see your full card number. We receive your name, email address, the business name you enter, and confirmation of the payment, so we can provide the service at launch, contact you about setting up your records, and process refunds.

When you use the website

  • Usage events. When you first arrive, click one of the main buttons, or use a free tool, we record the event name, the page, any campaign tags in the link you followed (the utm_ parameters), the referring website (its address without any query string), and a random ID that lasts only as long as your browser tab. The ID and the campaign tags are kept in your browser’s session storage, not in a cookie, and are cleared when you close the tab. We use this to see which pages, emails and ads lead to signups.
  • Free tools. Dates you type into the free tools are worked out in your browser and are not sent to us. If you click “Email me these reminders”, your expiry month is copied into the waitlist form in your browser, and is only sent if you then join the waitlist.
  • Spam protection. To limit repeated submissions, our server stores a scrambled (hashed) version of your IP address with a 10-minute expiry, and deletes expired entries each time the site receives a form or event. Our host, Cloudflare, also processes your IP address to deliver the site and protect it from attacks.

Analytics and advertising

  • Cloudflare Web Analytics counts page views and page speed. Cloudflare says its Web Analytics “does not use any client-side state, such as cookies or localStorage, to collect usage metrics.”
  • Google Ads. If we run Google Ads, we load Google’s tag to measure whether an ad click leads to a waitlist signup or a click through to checkout. Google may set cookies to do this. If your browser sends a Global Privacy Control signal, we tell Google’s tag not to use advertising cookies or personalisation (Google’s “consent mode”, set to denied). See Google’s privacy policy.

We don’t sell your information, and we don’t give it to anyone else for their marketing.

Who holds or receives it

  • Cloudflare hosts this website and stores the waitlist, survey and event records for us. Cloudflare may store them outside New Zealand.
  • Stripe processes pre-order payments and refunds.
  • Google provides our email (Google Workspace), and Google Ads measurement if we switch it on.
  • Any email-sending service we use to send reminders and launch news.

We may also disclose information if the law requires it.

If we emailed you first

If we contacted you before you signed up, we found your business in publicly available information, such as lists of accredited employers released by MBIE under the Official Information Act, and your work email address on your business’s website. We use them only to contact you about AccreditDesk. Reply “unsubscribe”, or use the link in our email, and we won’t contact you again. You have the same rights to see and correct this information as everyone else.

How long we keep it

  • Waitlist and survey information: until you ask us to delete it. If we decide not to go ahead with AccreditDesk, we’ll delete it.
  • Usage events: up to 24 months.
  • Payment records: for as long as tax and accounting law requires.

Your rights

  • See and correct your information. You can ask us whether we hold information about you, ask to see it, and ask us to correct it (information privacy principles 6 and 7). Email [email protected]. We’ll respond as soon as we reasonably can, and within 20 working days (Privacy Act 2020, sections 44 and 63).
  • Delete it. Email us and we’ll delete your waitlist and survey information.
  • Stop emails. Use the unsubscribe link in any email, or email us. Under the Unsolicited Electronic Messages Act 2007, an unsubscribe takes effect within 5 working days at the latest; we aim to act on it the same day.
  • Complain. If you’re unhappy with how we’ve handled your information, please tell us first. You can also complain to the Office of the Privacy Commissioner.

Changes

If what we collect or how we use it changes, we’ll update this statement and the date at the top.