Privacy Policy

SiteRelay is the agency responsible for the personal information handled through the Platform. We have a Privacy Officer who is responsible for our compliance with the Privacy Act 2020 and for handling privacy requests and complaints. You can contact our Privacy Officer at support@siterelay.co.nz.

We collect personal information that is necessary for our functions and activities as a marketplace operator, including:

Account and business information

• your name, email address, phone number, company name, role, and NZ Business Number (NZBN);
• your password (stored only as a secure cryptographic hash — we cannot see it) and email verification codes;
• billing and site-contact details you choose to provide.

Job and operational information

• jobs, quotes, materials, quantities, inclusions/exclusions, and pricing;
• pickup, destination, and site addresses (including saved sites and access notes);
• for Carriers: fleet details (vehicle registration, WoF/CoF and licence expiry, capacity) and team membership;
• load statuses, confirmed quantities, variations, and payment-status records.

Location, images and documents

• where a driver opts in, real-time location data (periodic GPS pings) used to show live tracking and estimated arrival times, only while sharing is on;
• proof-of-delivery photos, disposal/cleanfill dockets, and other load documents you upload.

Communications, reviews and support

• messages, reviews and ratings, and correspondence with us.

Technical and usage information

• device and app information, log data, and, on our website, cookies and similar technologies used to keep you signed in and to operate and improve the Platform.

We do not intentionally collect sensitive information beyond what is described here, and you should not submit information you are not authorised to share.

We collect most personal information directly from you when you sign up, post or quote a job, upload documents, use features, or contact us. We also collect some information automatically (such as device and usage data) as you use the Platform.

Sometimes we collect information about you from another person rather than from you directly (IPP 3A) — for example, when a Carrier's owner or admin adds you as a team member or driver, or when a Customer records you as a site contact for a job. Where we collect your information indirectly, we rely on the person who provided it having the authority to do so and, where required, having told you about it. If you provide us with another person's information, you must be entitled to do so and must have made them aware of this Privacy Policy.

We collect and use personal information to:

• create and manage your account and verify your identity and email;
• operate the marketplace — post and match jobs, exchange quotes, form and coordinate jobs, dispatch loads, and record proof of delivery;
• show live tracking and estimated arrival times when a driver has enabled location sharing;
• facilitate communication and the direct relationship between Customers and Carriers;
• generate invoice summaries and let parties record payment status (we do not process payments);
• provide support, maintain records, and resolve disputes;
• keep the Platform secure, prevent fraud and misuse, and enforce our Terms;
• improve and develop the Platform; and
• meet legal obligations and send you service (transactional) messages such as verification codes, job and delivery updates, and important notices.

SiteRelay is a marketplace, so some information is necessarily shared with the other party to a job:

• Before a quote is accepted, certain identifying and commercial details are masked to protect both parties — a quoting Carrier does not see the Customer's identity, exact commercial references, or site contact until it wins the job.
• After a quote is accepted, the information each party needs to complete the job (such as contact details, precise addresses, and access notes) is shared with the winning Carrier and the Customer.
• Drivers see only the loads assigned to them and the details needed to perform them; they do not see pricing.
• Reviews and ratings, and limited profile information (such as company name and completed-job count), may be visible to other Users.

We may disclose personal information to:

• service providers who help us run the Platform (for example, cloud hosting and database storage, email delivery, SMS delivery, mapping and address search), who may only use it to provide services to us;
• professional advisers, and to a purchaser or successor if we sell, restructure, or transfer our business (subject to appropriate protections);
• government agencies, regulators, courts, or others where we are required or authorised by law, or to establish, exercise, or defend legal rights, or to prevent harm or serious wrongdoing.

We do not sell your personal information, and we do not use it for third-party advertising.

Some of our service providers store or process information outside New Zealand (for example, cloud hosting, email, SMS, and mapping providers located in Australia, the United States, or other countries). Before disclosing personal information overseas we take reasonable steps, consistent with IPP 12, to ensure the information is protected by comparable safeguards — for example, by using providers subject to comparable privacy laws or bound by contractual protections. By using the Platform you acknowledge this overseas storage and processing.

We take reasonable technical and organisational steps to protect personal information against loss, misuse, and unauthorised access, use, or disclosure (IPP 5). These include encrypting data in transit, storing passwords only as secure hashes, restricting access on a need-to-know basis, and limiting what each type of User can see. No system can be guaranteed completely secure, and you also play a part by keeping your login credentials confidential.

We keep personal information only for as long as necessary for the purposes described in this policy, to run and secure the Platform, to maintain business and job records, and to meet legal, tax, and accounting obligations (IPP 9). When information is no longer needed, we take reasonable steps to delete or de-identify it. Some job and transaction records may be retained for a period after your account is closed to meet these obligations and to resolve any later disputes.

We send service (transactional) messages that are necessary to provide the Platform — such as email verification codes, job and delivery notifications, payment-status updates, and important account or legal notices. These are not marketing and are part of the service.

We will only send you marketing or promotional messages where we are permitted to under the Unsolicited Electronic Messages Act 2007. Any marketing message will identify us and include an easy way to unsubscribe, and you can opt out at any time. Opting out of marketing does not stop essential service messages.

On our website we use cookies and similar technologies to keep you signed in, remember preferences, keep the Platform secure, and understand and improve how it is used. You can control cookies through your browser settings, though some features may not work properly without them.

You have the right to ask for access to the personal information we hold about you, and to ask us to correct it if it is wrong (IPPs 6 and 7). Much of your information is available directly in the app; for anything else, contact our Privacy Officer at support@siterelay.co.nz. We will respond as soon as reasonably practicable and within the timeframes required by the Privacy Act 2020. There is generally no charge, though we may charge a reasonable amount for certain requests as permitted by law. If we cannot correct information, you may ask us to attach a statement of the correction sought.

The Platform is a business-to-business service intended for people acting in trade and is not directed at children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will take appropriate steps.

If a privacy breach occurs that we reasonably believe has caused, or is likely to cause, serious harm, we will notify the Office of the Privacy Commissioner and affected individuals as soon as practicable, as required by the Privacy Act 2020.

We may update this Privacy Policy from time to time. The "last updated" date shows the current version. If we make a material change, we will take reasonable steps to notify you. Continuing to use the Platform after a change takes effect means you accept the updated policy.

For any privacy question, access or correction request, or complaint, contact our Privacy Officer at support@siterelay.co.nz. SiteRelay is a trading name of GE Secure Limited (company number 8374399, NZBN 9429050577224), New Zealand.

We take privacy complaints seriously and will work with you to resolve them. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner (privacy.org.nz; 0800 803 909).