Privacy Policy

Your Privacy Matters

BestAI is committed to protecting your personal information in accordance with the New Zealand Privacy Act 2020. This policy explains how we collect, use, store, and protect your data.

Last updated: 27 July 2026
Our Commitments

How We Protect Your Information

Purpose of Collection

We only collect personal information that is necessary to provide our AI deployment and consulting services. This includes your name, email address, phone number, and business details submitted through our contact form or during service engagements.

Source of Information

We collect information directly from you: through our website contact form, email correspondence, phone calls, and in-person meetings. We do not collect personal information from third parties without your knowledge.

Collection Transparency

When we collect personal information, we will tell you why we need it, how we will use it, and who we may share it with. You are never obligated to provide personal information, but some services may not be available without it.

Storage & Security

Some hosting and email service providers may process information outside New Zealand. We use TLS encryption and access controls, and take reasonable steps to use providers that protect information appropriately.

Access & Correction

You have the right to request access to your personal information and to ask for corrections. Contact us at [email protected] and we will respond within 20 working days as required by the Privacy Act 2020.

Retention & Disposal

We retain personal information only as long as necessary for the purposes it was collected. When information is no longer needed, it is securely deleted or de-identified.

Details

Full Privacy Policy

1. Who We Are

BestAI Ltd is an Auckland-based company providing AI deployment, website development, and digital services for New Zealand small businesses. Our registered address is 10/18 Karengo Street, Long Bay, Auckland. You can contact our Privacy Officer at [email protected].

2. Information We Collect

  • Contact details: name, email address, phone number, business name
  • Business information: industry, business size, service requirements
  • Technical data: page paths without query strings, browser and device type, approximate region, language, and a small set of interaction events used to understand the enquiry journey
  • Service data: configuration details, workflow information, and system logs generated during AI deployment services

3. How We Use Your Information

  • To provide, maintain, and improve our AI deployment services
  • To communicate with you about your service, including support and updates
  • To send you information about our services, only with your consent
  • To comply with legal obligations and protect our legitimate business interests

4. AI Services & Your Data

Important
  • Your business data processed through AI deployments is stored in isolated, encrypted workspaces
  • We never use your data to train AI models or share it with third-party AI providers for training purposes
  • All AI processing occurs within your dedicated environment with strict access controls
  • You retain full ownership of all data and content generated through our AI services

5. Third-Party Disclosure

We do not sell, trade, or rent your personal information. We use Cloudflare to host and protect the site and to check contact forms for automated abuse, Resend to deliver enquiries, Google Analytics for limited website measurement, and Stripe for checkout and payment processing. These providers may process information outside New Zealand. We remain responsible for how we use those services and take reasonable steps to protect the information. We may also disclose information where required by New Zealand law or to protect the rights and safety of BestAI, our clients, or the public.

6. Cookies & Analytics

We configure Google Analytics with analytics and advertising storage denied for every visitor, and BestAI does not switch that storage on. Our tag therefore does not write Google Analytics or advertising cookies. We also disable Google Signals and advertising personalisation.

Google still receives limited technical request data to provide aggregate page-use and enquiry-funnel counts, and may process it outside New Zealand. For a workflow enquiry, our custom events record only the page language, the selected workflow offer, the form version, the fact that a visitor started a workflow answer, and whether Resend accepted the enquiry. We never send names, contact details, company names, workflow answers, free text, or URL query strings with those events.

7. Your Rights Under the Privacy Act 2020

  • Access: Request a copy of the personal information we hold about you
  • Correction: Ask us to correct any inaccurate information
  • Complaint: Lodge a complaint with the Office of the Privacy Commissioner if you believe we have breached the Privacy Act

8. Privacy Breach Notification

In accordance with the Privacy Act 2020, if we become aware of a privacy breach that poses a risk of serious harm, we will notify the affected individuals and the Office of the Privacy Commissioner as soon as practicable.

9. Contact Us

If you have questions about this privacy policy or wish to exercise your rights, please contact us:

Questions About Your Privacy?

We take privacy seriously. If you have any concerns about how we handle your data, we're happy to discuss them.