Legal

Privacy policy

How we handle personal information you send us through this website, under the New Zealand Privacy Act 2020.

This policy covers dynastygrazing.co.nz. It doesn’t cover anything that happens in person, over the phone, or on the Facebook, Instagram and TikTok pages we link to — those have their own privacy terms.

Who we are

Dynasty Grazing, Wellsford, Auckland. Phone 020 4181 8612. Email dynastygrazing@gmail.com.

We’re the agency responsible for personal information collected through this site. If you want to talk to someone about privacy, use the details above.

What we collect

Only what you type into our enquiry form, and only the fields we need to get back to you about an event:

• Your name
• Your phone number
• Your email address
• Your message

We ask for both a phone number and an email address because catering enquiries usually need a conversation rather than an exchange of messages, and a date is often decided on a call. Both are marked required on the form. If you’d rather not give one of them, phone or email us directly instead — the details above reach the same people.

That is the whole list. We don’t ask for anything “just in case”. There’s nothing on this site for you to sign up to and nothing to pay for, so we never collect a password or a card number from you. Our own staff sign in to a separate area, described below.

Why we collect it

To read your enquiry and reply to it. That’s the only purpose. We don’t use your details for marketing, we don’t add you to a mailing list, and we don’t sell, rent or trade personal information to anyone.

What we don’t do

This site carries no advertising tags and no tracking pixels. There’s no Google Analytics, no Meta pixel, and no third-party script of any kind. Nothing here follows you to other websites, and nothing about your visit is sent to another company.

We do count how many people read our pages. That happens entirely on our own server and is described under counting page views below.

We also deliberately don’t use reCAPTCHA or a similar captcha service, because it would send information about you to an overseas provider. Instead the form carries a hidden field that automated scripts tend to fill in and people never see — the check runs in your own browser, and nothing about it is sent anywhere.

One thing worth naming: the fonts on this site are served by Google Fonts. Loading them means your browser requests two files from Google’s servers, which — as with any file your browser fetches — makes your IP address visible to them. We send Google nothing about you, and there is no analytics or advertising attached to it. Everything else this site loads comes from our own server.

Cookies

The public pages of this site set no cookies at all. There is no cookie banner here because there is nothing to accept or refuse. Counting page views doesn’t use one either — see below.

One cookie exists on this site, named dynasty_session, and it is only ever set inside the staff-only area. It holds a random session identifier that keeps a signed-in staff member signed in. It contains no personal information, it isn’t used to track anyone, and it is deleted when the browser closes.

Counting page views

We keep a simple count of how often each page is read, so we know which parts of the site are useful and when people are looking. It runs on our own server. Nothing is sent to an analytics company, and no information about your visit leaves us.

For each page view we record the date and time, which of our pages it was, and whether the visitor was using a phone, a tablet or a computer. If you followed a link from another website we record the name of that website — for example google.com — but never the page you came from, and never anything you searched for.

We do not store your IP address, and we do not set a cookie to count you. So that we can tell one visit from ten page views, we store a short scrambled code worked out from your connection and your browser. That code is rebuilt from scratch every day, so it can’t be used to recognise you tomorrow, it can’t be used to follow you over time, and it can’t be turned back into your address. It isn’t linked to your name, your email, or anything you have ever sent us.

We also count how many of our visitors aren’t people at all — search engines and AI assistants reading the site — because we’d like to be found by both.

We count one thing you do as well as one thing you read: that an enquiry was sent successfully. That record is a date and the word “enquiry” — nothing you typed goes into it.

These counts are kept for up to 400 days, so we can compare one season with the same season a year earlier, and are then deleted automatically. Only our own management can see them, and what they see is totals — never one person’s activity, because we don’t hold it.

Our staff area

Part of this site is a password-protected area our staff sign in to. It isn’t open to the public, and nothing you send through the enquiry form appears in it — enquiries go to our mailbox, not into the website.

For each staff account we hold a name, a work email address, a role, and the time of the most recent sign-in. Passwords are never stored — only a one-way cryptographic hash, which can’t be turned back into the password. Accounts are created and removed by our management, and are deleted or disabled when someone no longer needs access.

If you’re a staff member and want to see or correct what’s held about your account, ask a manager, or use the contact details at the end of this page.

Our server logs

Our server keeps a short technical log so we can tell whether the site is working. It’s written to record what happened, not what you submitted — it deliberately contains no names, email addresses, phone numbers or message text.

Your IP address is never stored in readable form. Where we need to recognise repeated attempts from the same connection — specifically, to stop someone guessing at a staff password — we store a one-way salted hash of the address, which can’t be turned back into the original. Logs are deleted automatically after 30 days.

Who can see your enquiry

Your message is emailed to our own mailbox and read by the people here who handle enquiries. Beyond that:

• Our hosting and email providers operate the servers this website and its email run on, and can technically access what is stored there. Enquiries arrive in a Gmail mailbox, so Google is one of them.
• Our website administrator — Innovators Creative, who built this site and maintain it for us — receives a copy of enquiries. They act on our behalf and under our instructions, and see them in the course of keeping the site and its email working. Information held by an agent in this way is treated under the Privacy Act as held by us, not as having been given to someone else.

We don’t disclose your information to anyone else unless you ask us to, or the law requires it.

Where your information is stored

This website is hosted on servers provided by Hostinger, and enquiries are delivered to a Gmail mailbox. Depending on the region each is provisioned in, information you send through the site may be stored on servers outside New Zealand. Where that’s the case we rely on those providers’ contractual commitments to protect it to a standard comparable to the Privacy Act.

How long we keep it

Enquiry emails are kept only while they’re useful — long enough to deal with your enquiry and any follow-up — and are then deleted. Technical logs are deleted automatically after 30 days, and page-view counts after 400 days.

Keeping it safe

The site is served over an encrypted HTTPS connection. Our configuration and credentials sit outside the publicly reachable part of the server, and the log directory can’t be fetched over the web. Staff sign-ins are rate limited, and staff sessions expire after a period of inactivity.

No website can promise perfect security, but we don’t hold sensitive information here, and we don’t keep more of it or keep it longer than we need.

Seeing or correcting your information

Under the Privacy Act you have the right to ask us what personal information we hold about you, to get a copy of it, and to ask us to correct it if it’s wrong. Email dynastygrazing@gmail.com or phone 020 4181 8612 and we’ll sort it out. We may need to check who you are first. There’s no charge, and we’ll respond within 20 working days.

You can also ask us to delete an enquiry you’ve sent, and we will unless we need to keep it for a legal reason.

If you’re not happy

Tell us first and we’ll try to put it right. If you’re still not satisfied you can complain to the Office of the Privacy Commissioner: privacy.org.nz, or 0800 803 909.

Changes to this policy

If we change how this site handles personal information, we’ll update this page at the same time. This version was last reviewed on 17 August 2026.