Privacy policy
Last updated: 11 August 2026
Rolleston.co.nz is a community website for Rolleston, Canterbury. This policy explains what personal information we collect, why, where it goes, and the rights you have under the New Zealand Privacy Act 2020. The short version: we collect the minimum needed to run a community noticeboard, events calendar, directory and weekly email — we never sell your information, and you can ask us to show, correct or delete what we hold about you at any time via the contact form.
What we collect, and why
- Event and notice submissions — the details you post plus an optional name and contact email. The email is used only for moderation and follow-up; it is never published.
- Weekly email subscription— your email address, used only to send the weekly what’s-on digest. Every email has a one-click unsubscribe.
- Accounts — your name, email and a password (stored only as a one-way cryptographic hash — we cannot read it). Used to sign you in and, for business owners, to manage a claimed directory listing.
- Contact form messages — what you send, used only to handle your message.
- Directory listings — business contact details (address, phone, website, hours). These are business, not private, details, sourced from public records (e.g. OpenStreetMap), from the business itself, or from a claimed-listing owner.
- Usage analytics— we use a privacy-focused analytics tool to understand aggregate site usage (pages viewed, visit counts). We don’t use it to build profiles of individual visitors, and we don’t run advertising trackers.
- Technical logs — like nearly every website, our hosting provider records standard request logs (IP address, browser type) for security and reliability. We also rate-limit submissions to prevent spam.
If you’re signed in, we use a session cookie to keep you signed in. We don’t use advertising cookies.
Who sees it
We don’t sell or rent personal information, ever. It is only disclosed to the reputable service providers that run the site on our behalf — hosting, database, email delivery, spam protection and analytics. Some of these providers store data outside New Zealand; we choose providers whose security practices and safeguards are comparable to the Privacy Act’s protections. If paid listings are enabled, payments are handled by a dedicated payment processor — card details never touch our servers. We may also disclose information where the law requires it.
How long we keep it
- Notices expire and disappear from the public site after about 30 days. Expired and removed items may be retained internally for moderation records.
- Subscriptions— if you unsubscribe we keep a record of that (so we don’t email you again); ask us via the contact formand we’ll delete the address entirely.
- Accounts are kept until you ask us to delete yours.
- Moderation and audit records are kept while they are needed to run the site safely.
Your rights — access, correction, removal
Under the Privacy Act 2020 you can ask us what personal information we hold about you, ask us to correct it, and ask us to remove it. Use the contact form(pick “Privacy request”) — we’ll respond promptly, and within 20 working days at most. The same form is the fastest way to ask for any published content about you to be taken down.
If you’re not happy with how we handle a privacy concern, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.
Children
The site is for general community use and we don’t knowingly collect personal information from children. Event listings about schools carry event facts only — we don’t publish information about individual students, and school-related submissions should come from the school or organiser.
Changes to this policy
If this policy changes materially we’ll update this page and the date at the top. Questions? Use the contact form.