Privacy & your request

Updated 23 September 2026. Auckland Renovation Services is operated by SWEET PETALS LIMITED, NZBN 9429041473481. Privacy enquiries: aucklandrenovationservice@gmail.com.

What we collect

Your name, email, optional phone, suburb, job description, project scope, access arrangements, additional jobs, optional project photos, estimate details, preferred inspection date and language. Please do not include identity documents, payment details or unnecessary information about other people.

Why we collect it

To assess your renovation or repair request, contact you, prepare a quote and arrange a visit. Sending a request does not confirm an appointment or commit you to paying. We do not add you to a marketing list.

Storage and access

Requests are stored in the business’s self-hosted database on its Vultr server. Authorised business staff can access them. Photos are resized and re-encoded to remove image metadata, stored privately with the enquiry, and cannot be viewed without administrator authentication. They are not used as public project examples without separate permission. If business notifications are configured, the request is sent to the selected notification provider. Website hosting and notification providers may process data outside New Zealand.

Retention and your choices

Our scheduled cleanup removes estimate records after 30 days and enquiries not linked to an active project record, including their photos, after 12 months. Copies in backups are kept for up to another 30 days. Project records, quote versions, customer acceptance, invoices and payment records are retained in this system for business and tax record-keeping. Tax records are retained for at least seven years and are not removed by the enquiry cleanup. For access or correction requests, email aucklandrenovationservice@gmail.com. You may ask the business to access or correct your information. Customer language preferences are stored in the browser. Administrators also receive an HttpOnly session cookie that expires after eight hours. Private document links let the recipient view a quote or invoice; keep these links confidential. No advertising trackers are installed.

Security

Access to the enquiry list requires an administrative credential. Abuse controls use a hashed network identifier for a short period. Do not submit sensitive information through the project description.