What we collect, and what we don’t.

The fonts are served from this domain rather than Google, so a page load makes no request to any advertising or social network. No cookies are set anywhere on this site except the contact page, where reCAPTCHA sets one of its own to tell a person from a bot. That page is the only one that talks to Google at all.

We use Cloudflare Web Analytics to see which pages get read and how quickly they load. It measures the page rather than the person: no cookies, no device fingerprint, no identifier that persists between visits, and nothing that can be traced back to you. That is also why there is no cookie banner on this site. There is nothing to ask you to consent to.

Our host keeps standard server logs, which include IP addresses, for a short period for security and diagnostics. We don’t use them to identify or track anyone.

If you fill in the form on the contact page, we receive your name, company, email address, phone number if you give one, your current website, and your answers about the business, budget, timeline, sign-off and what’s prompting the project.

We use it for one thing: replying to your enquiry and, if it goes further, preparing a proposal. We don’t sell it, we don’t share it with anyone outside the studio, and we won’t add you to a mailing list.

The form is delivered by three services, which process the submission in transit and don’t use it for their own purposes:

• Cloudflare

  Receives the submission and passes it on. Nothing is stored.

• Google reCAPTCHA Enterprise

  Checks the submission is a person rather than a bot. It sets a cookie on the contact page and reports to Google how the page was used, which is what produces the score we act on. Google’s privacy policy covers what they do with it.

• Mailgun

  Sends it to us as an email. Mailgun retains delivery logs for a short period under their own policy.

After that it sits in our email, and in our proposal records if the enquiry becomes a project. We keep enquiries that don’t go anywhere for two years, then delete them.

Email info@refineddigital.co.nz and we’ll tell you what we hold and delete it on request. No forms, no process. If you’re in the UK or the EU, this is your right of access and erasure under the UK GDPR and GDPR; in New Zealand it’s principles 6 and 7 of the Privacy Act 2020.

This page covers refineddigital.co.nz only. Sites we build and host for clients have their own privacy statements, and the client is the one who decides what those sites collect.

If this changes, the date below changes with it. There’s no version history worth keeping for a page this short.