Loading
Last updated 30 August 2026
This explains what we collect, why, and what you can do about it. It is written to meet the Privacy Act 2020, and written to be read.
Short version: we collect what a visit actually requires and nothing else, we store it in Australia, and you can ask for a copy or ask us to delete it at any time.
Kelburn Critter Care is a small pet-sitting business based in Kelburn, Wellington. We are the agency responsible for the personal information described here.
Privacy contact: the business owner, at kelburncrittercare@gmail.com. We reply within 20 working days, which is the statutory limit.
Card payments are handled entirely by Stripe. We never see, receive, or store your card number — we receive a confirmation that a payment succeeded, an amount, and a receipt link.
A session cookie, if you sign in. It is httpOnly, so JavaScript on the page cannot read it. There are no advertising cookies, no third-party trackers, no Google Analytics, and no Facebook pixel, which is why this site has no cookie banner.
Alarm codes, key locations, and gate codes. There is no field for them anywhere on this website. Access is arranged in person at the meet & greet.
Where a note about access genuinely has to be written down, it is encrypted with a key that is not stored in the database, only the owner and the assigned sitter can open it, every time it is opened that is recorded, and it is destroyed automatically seven days after your booking ends.
Our database and file storage are hosted by Supabase in Sydney, Australia. Our website runs on Vercel, which serves it from data centres in several countries.
This means your information is stored outside New Zealand. Australia has privacy laws comparable to ours, and we are required to tell you this rather than let you assume otherwise. Payment data is held by Stripe (United States and Ireland), and email is sent through Resend.
When you ask us to delete your account, we strip your name, phone, address, emergency contacts, vet details, care notes, and pet profiles, and delete any access notes immediately. What survives is the minimum financial record IRD requires — dates and amounts, with no identifying detail attached.
Under the Privacy Act 2020 you can:
Email kelburncrittercare@gmail.com and say what you want. You do not need to use any particular wording.
Tell us first — most things are a misunderstanding and we would rather fix it. If that does not resolve it, you can complain to the Office of the Privacy Commissioner:
Their service is free and you do not need a lawyer.
Every table in our database has row-level access rules, so one customer cannot read another's booking even if something else goes wrong. Photos live in a private store and are served through links that expire. The site is served over HTTPS only.
No system is perfect. If something does go wrong and it is likely to cause you serious harm, we will tell you and notify the Privacy Commissioner, as the Act requires.
More detail on how this is built is in our terms.
If we change this policy in a way that affects you, we will email you before it takes effect rather than quietly changing the date at the top.