Privacy policy

The short version

This website is a brochure. You read it, and if you want to talk to us you email or call us. That is the whole thing.

• There is no form on this site. There is nothing to fill in, nothing to submit and no account to create.
• Nothing measures you until you say yes. If you decline the cookie banner, no analytics loads at all and the site behaves exactly the same way. You lose nothing.
• We run no advertising, no remarketing, no retargeting and no social pixels. Not one tracking beacon beyond the analytics you opt into.
• If you email or call us, we keep what you send us for as long as we need it to help you, and then we delete it.

The rest of this page is the detail. It is long because it is specific, not because there is a lot going on.

Who we are

This site is owned and operated by Amity Innovation Limited, a New Zealand company trading as Chur.

For this website we are the agency responsible for the information collected here, and we are answerable for it. Our privacy officer can be reached at kiaora@chur.co.nz.

This policy covers this website only. If you become a customer, the handling of your business's own data and your own website's visitor data is governed by the agreement we sign with you, under which we act on your instructions.

The law we work to

We comply with the New Zealand Privacy Act 2020 and its information privacy principles. Our customers are in New Zealand and this site is built for a New Zealand audience.

We have gone further than the Act requires in the places where it costs us nothing to do so, and we would rather describe those plainly than claim a standard. Specifically: nothing at all is loaded or stored before you have made a consent decision; all three of Google's advertising signals stay switched off permanently; we run no third-party trackers of any kind; and we serve our own fonts so that loading a page does not tell anybody else you were here.

Nothing in this policy limits any right you have under the Privacy Act or any other law.

What this website collects

Through your browser: almost nothing.

There is no form on this site. No contact form, no newsletter signup, no booking, no live chat, no payments, no login, no comments. You cannot submit anything to us through this website, so we cannot collect anything that way.

Three things do happen, and here they all are.

1. Your consent decision. When you first arrive we ask whether you will accept analytics cookies. Whatever you answer, we store that answer on your own device so we do not have to ask again on every page. This is the only thing stored before you have made a choice, and it is stored because you made a choice. It records the decision and nothing else. It contains no identifier for you.

2. Analytics, but only if you accept. Covered in its own section below.

3. Technical data needed to deliver the page. Like every website, ours cannot send you a page without knowing where to send it. Our hosting and security provider, Cloudflare, receives your IP address, the address of the page you asked for, your browser type and similar network information, purely in order to serve the site and to block attacks on it. This is unavoidable for any website that exists, we do not use it to build any picture of you, and we do not receive it as a report or a log we read. We mention it because a privacy policy that says "we collect nothing" while a server quietly logs your IP address is not being straight with you.

If you contact us.

If you email us or call us, we get whatever you choose to tell us. Typically that is your name, your email address or phone number, your business, and whatever your enquiry is about.

We use it to reply to you, to work out whether we can help, and to keep a record of what was discussed. That is all. We do not add you to a mailing list, because we do not have one. We do not sell, rent or share your details with anybody for their own purposes, ever.

What we never collect.

We do not collect payment details, identity documents, health information, or anything about your race, politics, religion, union membership, sexuality or biometrics. We do not run credit checks. We do not buy data about you from anyone. We do not attempt to identify you across other websites, and we could not if we wanted to.

Cookies and analytics

If you decline.

Nothing loads. No analytics script is downloaded, no request goes to Google, nothing is recorded about your visit. The site looks identical, works identically and is exactly as fast. There is no degraded version, no nagging, and no feature held back behind consent. Declining costs you nothing at all. It costs us the ability to count you.

Refusing is exactly as easy as accepting: same prominence, same number of clicks, no pre-ticked boxes and no dark patterns.

If you accept.

We load Google Analytics 4, property G-FLMT2QP0GD, directly. We do not use a tag manager.

It records which pages you looked at, how you arrived, roughly where in the world you are, and what browser and device you used. It also records when someone clicks our email address, our phone number or a call to action, so we can tell how many people got in touch. Google works out your approximate location from your IP address and does not store that address in the reports we see.

All four of Consent Mode v2's signals start denied, including all three advertising signals, and those three stay denied permanently. We do not run Google Ads, we have no remarketing or retargeting audiences, we do not build advertising profiles and there is no advertising anywhere on this site. Accepting analytics here does not feed any advertising system.

You can change your mind at any time from the Cookies control in the footer of every page. Withdrawing is as easy as giving consent was, and it takes effect immediately.

Everything this site stores on your device

That is the complete list. There is nothing else.

You can block or delete cookies and clear site storage in your browser settings. If you do, this site keeps working normally and we will ask about analytics again on your next visit.

What we deliberately do not run.

• No Cloudflare Web Analytics. It sets no cookies and would arguably be lawful without consent, and we turned it off anyway, because a rule that says "nothing reports on you until you say yes" stops meaning anything the moment it needs a footnote.
• No font CDN. Our two typefaces are served from this domain, so loading a page does not tell Google or Adobe that you were here.
• No social pixels, no advertising tags, no session recording, no heatmaps, no chat widgets, no embedded video or maps. Embedded third parties set cookies the instant a page loads, before anyone has been asked anything, so we do not use them.

Who else can see any of this

Three organisations, and no others.

Each acts on our instructions. None of them is permitted to use your information for their own purposes.

We may also disclose information where the law requires it, for example a court order or a lawful request from a regulator, and if our business were ever sold or restructured. If we are ever compelled to hand something over, we will tell you unless we are legally prohibited from doing so.

Beyond that we do not disclose your personal information to anyone. We have never sold personal information and we will not.

Where your information goes

New Zealand, the United States and elsewhere. Cloudflare and Google both operate global networks, so some information is processed offshore.

The Privacy Act allows this where the receiving party is required to protect the information to a comparable standard. Both providers are contractually bound to protect it and to act only on our instructions.

How long we keep things

If you ask us to delete your enquiry sooner, we will, unless we are legally required to keep it.

Your rights

We give everybody the full set of rights, wherever you live. We do not check whether you are entitled to them.

• See it. Ask for a copy of the personal information we hold about you.
• Correct it. If it is wrong, tell us and we will fix it. If we disagree, we will attach a note recording that you asked.
• Delete it. Ask us to erase it. We will, unless the law requires us to keep it, and we will tell you if that is the case.
• Withdraw consent. Change your analytics choice from the footer of any page, at any time.
• Object, or ask us to restrict what we do with it.
• Take it with you. Ask for it in a portable format.
• Complain. To us first if you are willing, and to the Privacy Commissioner whenever you like.

We will never charge you for any of this, even though the Privacy Act would let us charge our reasonable costs.

We will answer your request within 20 working days, which is the maximum the Privacy Act allows. If a request is genuinely complicated and needs longer, we will tell you why before the deadline rather than after it.

To exercise any of these rights, email kiaora@chur.co.nz. Tell us what you want. We will ask you for enough information to be confident you are who you say you are, and no more than that.

There is no automated decision-making on this site. Nothing here profiles you, scores you or decides anything about you.

Complaints

Tell us first if you are comfortable doing that, at kiaora@chur.co.nz. We would rather fix it than have it escalated, and we will take it seriously.

You do not have to come to us first. You can complain directly to the Office of the Privacy Commissioner at privacy.org.nz or on 0800 803 909. If you are outside New Zealand, you can also complain to the data protection authority for your own country.

Keeping it safe

This site is served only over HTTPS, with HTTP Strict Transport Security set for a year and covering subdomains, a hash-based content security policy and a full set of security headers. There is no database, no login and no user data stored on the site, because there is nothing to store. Email we receive is held in Google Workspace with two-factor authentication on the account.

Nobody can promise perfect security and we will not pretend otherwise. If a breach ever occurs that could cause you serious harm, we will notify you and the Office of the Privacy Commissioner as soon as practicable, as the Privacy Act requires.

Children

This site is aimed at businesses and is not directed at children. We do not knowingly collect information about anyone under 16. If you believe we have, email kiaora@chur.co.nz and we will delete it.

Links to other sites

Where we link out, that site has its own privacy policy and we have no control over it. A link is not an endorsement of how they handle your data.

Changes to this policy

We may update this policy. When we do, we change the date at the bottom and the new version applies from the day we publish it. If we ever change it in a way that materially affects you, we will say what changed rather than quietly swapping the file.

Contact us

Amity Innovation Limited, trading as Chur

Email: kiaora@chur.co.nz

Phone: 09 480 2720

Our terms of use cover the rules for using this website.