Tea Break Studio is a sole trader business operated by Nick in East Auckland. This policy explains what I collect, why I collect it, and what you can ask me to do about it.
Who is responsible
I am. Tea Break Studio has no employees or separate data team.
Nick, Tea Break Studio
nick@teabreakstudio.com
East Auckland, New Zealand
What I collect, and why
When you use the enquiry form
I collect the name, email address, business name, website address, likely service and problem description you choose to provide. I use that information to understand the enquiry and reply with a recommendation, price or next written question.
When you email me
I receive your email address and anything you include in the message.
When you become a client
I also hold the business details needed to do the work and invoice you, the access you grant to your accounts, and the files you send me.
No tracking: this site does not use analytics, advertising cookies, tracking pixels, heatmaps or session recording. It does not set its own cookies. If that changes, this policy changes first.
Service providers
The enquiry form attempts delivery through Resend. Direct email is routed by Cloudflare Email Routing and delivered to a Google mailbox. Those providers process the message to deliver and store it for me.
If form delivery is unavailable, the site opens a prepared message in your own email app. Your email provider then handles that message under its own privacy terms.
I do not sell personal information, add enquirers to a mailing list, or share an enquiry unless the law requires it or you ask me to.
AI-assisted tools
I use AI-assisted tools for research, drafting, design exploration, code and testing. I do not use client material to train my own models or publish it as reusable material.
I only put client material into an external tool when its terms, settings and role are appropriate to the work. If your project has material that must stay out of external AI tools, say so at the start and I will keep it out.
How long I keep it
- Enquiries that do not become work: deleted after twelve months.
- Business and client records: kept for at least seven tax years where Inland Revenue requires it.
- Access to your accounts: removed at handover unless an active Care Plan requires access and you have agreed to it.
Your rights
Under the Privacy Act 2020, you can ask what personal information I hold about you and ask me to correct it. I will respond as soon as reasonably practical and normally within 20 working days.
You can also ask me to delete information. I will do that unless I need to keep it for a legal reason, such as tax record-keeping.
Email nick@teabreakstudio.com with what you want. You can also contact the Office of the Privacy Commissioner.
Security and changes
I use multi-factor authentication on accounts that touch client data, do not keep client passwords in plain text, and ask clients to grant access to their own accounts instead of sharing credentials.
If a privacy breach is likely to cause serious harm, I will notify the people affected and the Privacy Commissioner as the Privacy Act requires.
If this policy changes, the date at the top changes. Previous versions are available on request.