← Back to home

Privacy Policy

Last updated: 12 September 2026

Round2It Ltd (Round2It, we, us) operates a New Zealand home-services marketplace. This policy explains how we collect, use, store and share personal information under the Privacy Act 2020 (NZ). It should be read with our Terms and Conditions.

If you do not agree with this policy, please do not create an account or submit a job, quote or booking.

1. Who we are

1.1 Round2It Ltd is the agency that collects your personal information for the Platform (website, dashboards, booking widgets and related services).

1.2 Privacy questions: Contact us. You can also complain to the Office of the Privacy Commissioner (privacy.org.nz) if you are not satisfied with how we handle a request.

2. What personal information we collect

2.1 Clients (homeowners and other customers) may provide:

  • name, email, phone, password;
  • address (street, suburb, town/city, postcode, region) and property details used in job or quote forms (for example property type, size, storeys, special features, photos);
  • job posts, quote requests, bookings, messages and reviews;
  • optional mailing-list consent;
  • payment records for work invoiced through the Platform (if used).

2.2 Businesses may provide:

  • account holder name, email, phone, password and role (owner, admin, staff);
  • legal and trading name, address, phone, email, website, logo, GST number, NZBN, bank account details for invoices, and subscription/plan information;
  • categories, regions, towns, suburbs and zones they service; service names, prices, durations and “price by quote” flags;
  • bookings, quotes, invoices, token purchases, customer records they create, and mini-site / widget content (photos, reviews, Google Place ID).

2.3 Technical information we may collect automatically: IP address, browser type, device, pages viewed, approximate location from IP, cookies or similar, and server logs needed to run and secure the Platform.

2.4 We do not require sensitive information (health, biometrics, etc.). Please do not put that in job notes unless it is necessary for the work and you are happy for a relevant Business to see it after you authorise contact.

3. How we collect it

3.1 Directly from you when you register, post a job, request a quote, book, claim a listing, pay an invoice, email us, or use a widget embedded on a Business website.

3.2 From Businesses when they add a customer or booking that includes your details (for example a manual booking). We then use those details to run the booking and, if you choose, to invite you to a Client account.

3.3 From service providers that process data for us (hosting, email, maps, payments) as described in clause 6.

3.4 Public sources only where we have a lawful purpose (for example directory listings you asked us to seed, or a Google Place ID you connected). Claimed listings are verified with you before control is handed over.

4. Why we use personal information

We use personal information to:

  • create and secure accounts (including password reset);
  • operate search, listings, jobs, quotes, bookings, invoices, tokens and subscriptions;
  • match Clients with Businesses in relevant categories and areas, including Round2It Direct sourcing;
  • send service messages (quotes, booking changes, invoices, reminders);
  • send marketing only where you have opted in, or where the law allows, and always with an unsubscribe for marketing;
  • prevent fraud, abuse and fee circumvention;
  • improve the Platform and produce aggregated, non-identifying stats;
  • meet tax, accounting and other legal duties;
  • handle complaints and disputes.

We rely on one or more of: your consent; that the information is necessary to perform a contract with you; that collection is necessary for a lawful purpose connected with our functions (Privacy Act IPP 1); or another exception in the Privacy Act.

5. Sharing — we do not sell your details

5.1 We do not sell personal information. We do not share a Client’s full name, phone, email or street address with Businesses until the Client has:

  • accepted a quote; or
  • confirmed a booking; or
  • otherwise clearly authorised that Business to be contacted.

Until then, a Job or quote request is shown in a limited form (for example first name and suburb) so Businesses can decide whether to quote.

5.2 After authorisation, we share what is reasonably needed to do the work (name, contact details, address, job notes, photos).

5.3 Round2It Direct. If you use Direct, we may share job details with potential suppliers in that area (including free listings) so they can quote. Full Client contact details follow the same rule as 5.1 unless you ask us to introduce you.

5.4 Businesses see Client records they create or that are linked to their organisation after a booking or accepted quote. They must only use that information to deliver the service and must not on-sell it.

5.5 We may disclose information:

  • to processors listed in clause 6, under contract;
  • if required by law, court order, or to protect rights and safety;
  • to a professional adviser (lawyer, accountant) under confidentiality;
  • if we sell or restructure the business, on the basis the recipient protects the information consistently with this policy.

5.6 Public listings. Paid Business profiles may show name, logo, description, services, area and contact details the Business chooses to publish. Free listings show limited public information (typically name and phone). Do not put private Client data in a public profile field.

6. Processors and overseas storage

We use trusted providers to host and run the Platform. They may store or access data outside New Zealand. We take reasonable steps so they handle it in a way comparable to the Privacy Act, including:

  • Supabase — database, authentication and file storage;
  • Netlify (or a successor host) — website hosting;
  • Resend (or similar) — transactional email;
  • Google Maps / Places — maps, geocoding and optional Google reviews;
  • a card processor (for example Stripe) when online payments go live;
  • an email marketing tool (for example Brevo) if you join a mailing list.

Photos you upload (quote photos, logos, site images) are stored in our storage buckets and may be visible to the relevant Business or on a public mini-site if you or the Business publish them.

7. Cookies and analytics

We use essential cookies to keep you logged in and to make forms work. We may use basic analytics (page views, device type) to improve the site. You can block cookies in your browser; some features may then not work.

8. Security

We use industry-standard measures (HTTPS, access controls, hashed passwords via our auth provider, role-based access). No method is 100% secure. Please choose a strong password and keep it private. Tell us promptly if you think an account is compromised.

9. Retention

We keep personal information as long as needed for the purposes above, and then as required for tax, dispute or legal records (invoices and GST records are typically kept at least 7 years). We may keep limited records after an account is closed (for example to show a booking existed). Aggregated data with identifiers removed may be kept longer.

10. Your rights

Under the Privacy Act 2020 you may request to:

  • access personal information we hold about you;
  • correct it if it is wrong;
  • ask us to delete or anonymise it where we no longer need it and the law allows;
  • withdraw marketing consent;
  • complain to us and, if unresolved, to the Privacy Commissioner.

Use Contact or your dashboard settings where available. We may need to verify it is you. We will respond within a reasonable time (and within Privacy Act timeframes).

Some information cannot be deleted while we still need it (for example an unpaid invoice, or a job another party still relies on).

11. Children

The Platform is for people 18 and over. We do not knowingly collect information from children. If you believe we have, contact us and we will delete it.

12. Third-party sites

Links (including Google Maps or a Business’s own website) have their own privacy practices. This policy applies only to Round2It.

13. Changes

We may update this policy. The “Last updated” date will change. Continued use after an update means you accept the revised policy. Material changes may also be notified by email or a notice on the site.

14. Contact

Privacy requests: Contact form.

Related: Terms and Conditions.

This policy is a working draft for the Round2It platform. It is not legal advice. Have a New Zealand lawyer review it before you rely on it with live customers.