Privacy

How your information is handled

Draft for pre-launch review. The legal entity and verified privacy contact must be inserted before collection is activated.

Information collected

Enquiries may include your name, email, phone, property and room details, access notes, requested timing, furniture selections and correspondence. Booking records include availability decisions, reservation identifiers and delivery receipts.

Why it is used

The information is used to prepare and administer staging quotes, check staff and stock availability, communicate about the request, create an agreed Calendar booking and maintain operational and security records.

Google Calendar

If Calendar booking is enabled, the service reads free/busy availability from calendars selected by the business and creates or removes events required to manage staging appointments. It does not use Calendar data for advertising or sell it. Customer email is added only to the confirmed event invitation.

Storage, access and disclosure

Application records are stored in the configured Firebase project and are accessed through authenticated server services. Direct client access to Firestore and Storage is denied. Service providers may process limited data to host the application, deliver email and operate Calendar booking.

Retention and deletion

Unsuccessful enquiry contact data is scheduled for deletion after 90 days unless it is needed for an active engagement, a legal obligation or a documented dispute. Holds expire automatically. Confirmed booking and transaction records follow the business’s approved accounting and operational retention schedule. People may request access, correction or deletion through the verified privacy contact once published.

Security

Administrative access uses verified, revocation-checked session cookies and server-side authorisation. Sensitive mutations require same-origin and anti-forgery checks. Provider credentials are held as runtime secrets and are not exposed to browsers.

International processing and changes

Some providers may process data outside New Zealand under their service terms. Material changes to these practices will be reflected on this page before they take effect.