Privacy Policy

Last Updated: October 4, 2025

HeatFlow Design is committed to protecting your privacy and ensuring the security of your personal information.

1. Information We Collect

1.1 Personal Information

When you use our services, we may collect:

  • Contact Information: Name, email address, phone number, postal address
  • Project Information: Property details, project requirements, technical specifications
  • Professional Information: Company name, role, industry details (if applicable)
  • Communication Records: Messages, inquiries, and support communications

1.2 Automatically Collected Information

  • Usage Data: Pages visited, time spent, interaction patterns
  • Device Information: IP address, browser type, operating system
  • Technical Data: Log files, performance metrics, error reports

2. How We Use Your Information

2.1 Service Provision

  • Process and respond to your project inquiries and quote requests
  • Provide hydronic heating design and consultation services
  • Deliver CAD drawings, calculations, and technical documentation
  • Communicate project updates and service-related information

2.2 Business Operations

  • Maintain and improve our website and services
  • Process payments and manage billing
  • Provide customer support and technical assistance
  • Conduct quality assurance and professional development

2.3 Legal Compliance

  • Comply with New Zealand privacy laws and regulations
  • Meet professional engineering and design standards
  • Respond to legal requests and protect our rights

3. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share information in these limited circumstances:

3.1 Service Providers

  • Trusted contractors and subcontractors involved in your project
  • Technical service providers (hosting, email, payment processing)
  • Professional consultants (engineers, regulatory specialists)

3.2 Legal Requirements

  • When required by New Zealand law or regulation
  • To comply with building code and safety requirements
  • In response to valid legal requests from authorities

4. Data Security

We implement robust security measures to protect your information:

  • Encryption: All data transmission uses SSL/TLS encryption
  • Access Control: Strict employee access policies and authentication
  • Storage Security: Secure cloud storage with regular backups
  • Regular Updates: Continuous security monitoring and updates
  • Professional Standards: Compliance with engineering professional requirements

5. Your Rights and Choices

Under New Zealand's Privacy Act 2020, you have the right to:

  • Access: Request copies of your personal information
  • Correction: Request corrections to inaccurate information
  • Deletion: Request deletion of your information (subject to legal requirements)
  • Portability: Request your data in a portable format
  • Objection: Object to certain processing of your information

To Exercise Your Rights:

Contact us at privacy@heatflowdesign.com

We will respond to your request within 20 working days as required by law.

6. Cookies and Tracking

Our website uses cookies and similar technologies to:

  • Remember your preferences and settings
  • Improve website performance and user experience
  • Analyze usage patterns for service improvement
  • Provide secure authentication and session management

You can control cookies through your browser settings, though this may affect website functionality.

7. Data Retention

We retain your information for as long as necessary to:

  • Provide ongoing services and support
  • Meet legal and professional obligations
  • Resolve disputes and enforce agreements
  • Maintain engineering project records as required

Typical Retention Periods:

  • Project files and designs: 10 years (professional requirement)
  • Communication records: 7 years
  • Financial records: 7 years (tax requirement)
  • Marketing communications: Until you unsubscribe

8. International Data Transfers

While we primarily operate in New Zealand, some service providers may be located overseas. We ensure appropriate safeguards are in place for any international data transfers, including:

  • Contracts with adequate privacy protections
  • Transfers to countries with adequate privacy laws
  • Your explicit consent where required

9. Updates to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of significant changes by:

  • Posting the updated policy on our website
  • Emailing registered users about important changes
  • Providing notice during your next interaction with our services

10. Contact Information

HeatFlow Design - Privacy Officer

Privacy Commissioner (New Zealand):
If you have concerns about our privacy practices that we cannot resolve, you can contact the Privacy Commissioner at privacy.org.nz

This Privacy Policy is governed by New Zealand law and complies with the Privacy Act 2020. Last updated: October 4, 2025