Privacy

What I keep

When you send the form, I keep what you type: your name, your email or Instagram handle, your idea, the film you picked and its price, plus the date, which link brought you here and the kind of browser you used (so I can fix anything that goes wrong).

If we make a film together, I also keep our messages, the photos and clips you send me, the drafts and the finished film, and a record of what you have paid.

To stop the form being flooded, the internet address a message comes from is counted for one hour, then forgotten. It is never stored with your message.

Why

Only to reply to you, make your film and keep a record of the booking. I never sell your details or use them for anything else.

Where it is stored

Your messages, files and film are kept with Supabase (a database and file service, in Sydney) and Upstash (a database service). Emails go through Resend and Google Workspace. Payments are made by card through Stripe: I never see or keep your card number. Some of these services may store data outside New Zealand. I use them because they protect data to a standard comparable to the Privacy Act 2020.

Your draft link

Your film comes with its own private link, where you watch the drafts, send your notes and pay. It is not listed anywhere, search engines never see it, and I can switch it off whenever you ask.

How long

I keep your details, files and film until you ask me to delete them. Email sione@sionetuigamala.com and they are removed, except payment records, which the law requires me to keep for 7 years. A message my spam filter catches is kept for 30 days (so a real one caught by mistake can still be found), then deleted.

Delete your data

Email sione@sionetuigamala.com or message @sionetuigamala on Instagram, and I'll delete your details, our messages and your files within 30 days. Only the payment records the law requires me to keep stay.

Cookies and tracking

No tracking cookies, so there is no cookie banner. Visits are counted with Vercel Web Analytics, which does not use cookies or follow you across sites. One small cookie remembers your currency, only if you change it.

I also keep my own anonymous first-party visit counts: no cookies, no personal details, nothing sold, just a random number your browser keeps, the pages seen and the nearest city, kept for 13 months and never counted if your browser asks not to be tracked.

Your rights

Under the Privacy Act 2020 you can ask to see or correct what I hold about you, or ask me to delete it. Email sione@sionetuigamala.com and I'll sort it within 20 working days. If you are not happy with my answer, you can complain to the Office of the Privacy Commissioner (privacy.org.nz).