Last updated: 16 April 2026
Bay Web Co (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and disclose personal information when you visit baywebco.nz, engage us for services, or otherwise interact with us. We handle personal information in accordance with the New Zealand Privacy Act 2020.
Who we are
Bay Web Co is a web design and SEO agency based in Mount Maunganui, New Zealand.
- Address: 40a Waitui Grove, Mount Maunganui 3116, New Zealand
- Phone: 021 193 7251
- Email: info@baywebco.nz
- Website: https://baywebco.nz
What information we collect
We collect personal information that you voluntarily provide to us, including but not limited to:
- Your name
- Business name
- Email address
- Phone number
- Postal or physical address
- Payment information (processed by Stripe â we do not store full card numbers)
- Website content, branding assets, copy, and images you supply for projects
- Login credentials and API keys you share with us for work on your systems
- Correspondence you send to us (email, form submissions, messages)
We also automatically collect certain information when you visit our website, including:
- IP address
- Browser type and version
- Operating system
- Pages visited, time spent, referring URLs
- Cookies and similar tracking technologies (see Cookies section)
How we use your information
We use your personal information to:
- Respond to enquiries and quote requests
- Provide the services you have engaged us for (web design, SEO, hosting, care plans, Google Ads management, or other)
- Bill you for our services and process payments
- Communicate with you about your project, account, or hosting plan
- Send service notices (e.g. hosting renewal, planned maintenance)
- Improve our website and services
- Comply with our legal obligations
We do not use your personal information for any purpose that you would not reasonably expect, and we do not sell your personal information to third parties.
Who we share your information with
We may share your personal information with trusted third parties who help us deliver our services, including:
- Stripe â payment processing
- Our hosting providers â web and email hosting infrastructure
- Google â analytics, Search Console, Business Profile, and advertising platforms when engaged for Google Ads management
- Email service providers â transactional and marketing email delivery
- Our professional advisors â accountants, lawyers, insurers, where legally necessary
We require these parties to protect your personal information consistent with this policy and applicable law. We do not share your information outside these purposes without your consent, unless required by law.
Some of our service providers (including Stripe and Google) are based overseas. When your personal information is transferred to or accessed from outside New Zealand, we take reasonable steps to ensure it is protected in a manner consistent with the NZ Privacy Act 2020.
Credentials, passwords, and client access
In the course of providing services, you may share credentials with us (WordPress admin, hosting cPanel, Google accounts, domain registrar, social media, etc.).
- We store credentials in an encrypted password manager accessible only to authorised Bay Web Co staff.
- We do not share your credentials with any third party without your consent.
- We recommend you create a dedicated user account for us where possible (e.g. a WordPress Administrator account we can delete when work is complete) rather than sharing your own login.
- When a project ends, you can ask us in writing to delete stored credentials; we will confirm deletion within 7 business days.
- If we detect a potential security incident involving your credentials, we will notify you without undue delay.
Cookies and tracking
Our website uses cookies and similar tracking technologies for:
- Essential site functionality
- Analytics (Google Analytics, if enabled) to understand how visitors use the site
- Marketing and remarketing pixels where enabled (e.g. Google Ads, Meta)
You can disable cookies in your browser settings. Doing so may affect how some parts of the site function.
How long we keep your information
We retain personal information only for as long as necessary to provide our services, meet our legal and contractual obligations, and resolve disputes. Typical retention periods:
- Active client records: for the duration of our engagement
- Billing and tax records: 7 years (as required by the NZ Inland Revenue)
- Project files and correspondence: 3 years after the end of the engagement, unless you ask us to delete sooner
- Website analytics: 14 months
- Marketing contacts: until you unsubscribe
After these periods, we either delete the information or de-identify it so it can no longer be linked to you.
Your rights under the Privacy Act 2020
You have the right to:
- Ask what personal information we hold about you and request a copy
- Ask us to correct information that is wrong or out of date
- Ask us to delete your personal information, subject to any legal retention we must comply with
- Withdraw your consent for marketing communications at any time
- Complain to the Office of the Privacy Commissioner if you believe we have breached the Privacy Act 2020 (privacy.org.nz)
To exercise any of these rights, email us at info@baywebco.nz. We will respond within 20 working days.
Data security
We take reasonable steps to protect your personal information from unauthorised access, use, modification, disclosure, or loss. This includes SSL/TLS encryption on our website, encrypted credential storage, access controls, and regular software updates on systems we manage.
No method of transmission over the internet is 100% secure. We cannot guarantee absolute security but we commit to notifying affected individuals and the Privacy Commissioner of any serious notifiable breach as required by the Privacy Act 2020.
Children’s privacy
Our services are intended for businesses and adults. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.
Third-party links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. Please review their privacy policies before providing any personal information.
Changes to this policy
We may update this Privacy Policy from time to time. Significant changes will be communicated on this page with a new “Last updated” date. For existing clients, we will email you about material changes that affect how we handle your personal information.
Contact us
For any questions, requests, or concerns about this Privacy Policy or our handling of your personal information:
Bay Web Co
40a Waitui Grove, Mount Maunganui 3116
Email: info@baywebco.nz
Phone: 021 193 7251