Privacy Policy

Last updated: March 2026

BondReclaim ("we", "us", "our") is committed to protecting your privacy in accordance with the New Zealand Privacy Act 2020 and the Information Privacy Principles (IPPs). This Privacy Policy explains how we collect, use, store, and disclose your personal information when you use our website and services.

1. Information We Collect

1.1 Information You Provide

When you use BondReclaim to generate a demand letter, we collect the information you enter in the intake form, including:

  • Your full name, email address, and phone number
  • Your landlord or property manager's name and contact details
  • Property address and tenancy dates
  • Bond amount and details of the dispute
  • Any additional comments or context you provide

1.2 Payment Information

Payment is processed by Stripe. We do not collect, store, or have access to your credit or debit card numbers. Stripe may share limited transaction data with us (e.g. payment status, last four digits, and transaction ID) to confirm your purchase.

1.3 Technical & Analytics Data

We automatically collect certain technical information when you visit our website, including:

  • IP address
  • Browser type and version
  • Operating system
  • Pages visited and time spent on each page
  • Referring website or search terms
  • Device type (desktop, mobile, tablet)

This data is collected via Google Analytics through Google Tag Manager. For more detail on the cookies and tracking technologies we use, see our Cookies Policy.

2. How We Use Your Information

We use the information we collect to:

  • Generate your personalised demand letter
  • Process your payment via Stripe
  • Send the demand letter to your landlord (only if you opt for the email delivery add-on)
  • Send you a copy of your generated letter by email
  • Contact you regarding your order if necessary
  • Improve our service through anonymised, aggregated analytics
  • Comply with legal obligations, prevent fraud, and protect our rights

3. Legal Basis for Processing

Under the New Zealand Privacy Act 2020 (Information Privacy Principles), we process your personal information on the following bases:

  • IPP 1 — Purpose of collection: We collect personal information only for a lawful purpose connected to our service and only where necessary for that purpose.
  • IPP 3 — Collection from subject: We collect information directly from you (except landlord contact details, which you provide on their behalf).
  • IPP 10 — Limits on use: We use your information only for the purpose it was collected, unless you consent to another use.

4. Who We Share Your Information With

We do not sell, rent, or trade your personal information. We share data only with the following parties, and only to the extent necessary to provide our service:

  • Stripe — for secure payment processing, subject to Stripe's Privacy Policy.
  • Amazon Web Services (AWS) — for secure data storage and processing. All data is hosted in the ap-southeast-2 (Sydney) region.
  • OpenAI — to generate the demand letter using AI. We send only the intake information necessary for letter generation. OpenAI does not use API data for training purposes (see OpenAI's data usage policy).
  • Google Analytics — for anonymous website usage analytics.
  • Your landlord or property manager — only if you opt for the email delivery add-on. In that case, we send the demand letter on your behalf; we do not share any other personal data with them.

5. International Data Transfers

Your personal information may be transferred to and processed in countries outside New Zealand, including:

  • Australia (AWS ap-southeast-2 / Sydney) — primary data storage
  • United States — Stripe (payment processing), OpenAI (letter generation), Google (analytics)

Where personal information is transferred overseas, we take reasonable steps (including contractual obligations) to ensure that the receiving party protects it in a manner consistent with the New Zealand Privacy Act 2020 (IPP 12).

6. Data Retention

We retain your intake data and generated demand letters for up to 12 months from the date of purchase. After this period, all personal data is permanently deleted from our systems.

Anonymised, aggregated analytics data (which cannot be used to identify you) may be retained indefinitely for service improvement purposes.

You may request early deletion of your personal data at any time by emailing privacy@bondreclaim.co.nz.

7. Your Rights Under the Privacy Act 2020

You have the right to:

  • Access the personal information we hold about you (IPP 6).
  • Request correction of any inaccurate or misleading personal information (IPP 7).
  • Request deletion of your personal information, subject to any legal obligations we may have to retain certain data.
  • Complain to the Office of the Privacy Commissioner if you believe we have breached your privacy rights.

To exercise any of these rights, contact us at privacy@bondreclaim.co.nz. We will respond within 20 working days, as required by the Privacy Act 2020.

8. Cookies & Tracking Technologies

We use cookies and similar technologies to operate our website and understand how visitors interact with it. For full details on the cookies we use and how to manage them, please see our Cookies Policy.

9. Data Security

We take reasonable steps to protect your personal information from unauthorised access, loss, misuse, and alteration, including:

  • Encryption of data in transit (TLS/SSL) and at rest (AES-256)
  • Access controls limiting who can access personal data within our systems
  • Secure infrastructure hosted on AWS with industry-standard security practices
  • Regular review of our security practices and procedures

While we strive to protect your information, no method of internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security.

10. Children's Privacy

BondReclaim is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at privacy@bondreclaim.co.nz and we will delete it promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically.

12. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our privacy practices, please contact us:

If you are unsatisfied with our response, you may lodge a complaint with the Office of the Privacy Commissioner.