Effective: 2026-10-13 · WorkshopHQ New Zealand
This Policy explains how WorkshopHQ handles information about workshop operators, authorised staff, workshop customers and website visitors, including information processed on behalf of businesses using the platform.
1. Who is responsible for information
WorkshopHQ manages account, billing and website information needed to run the platform. Workshop businesses generally determine why they collect and use their own customers' records; WorkshopHQ processes that information to provide the requested services. Customers seeking corrections to workshop records should usually contact their workshop first.
2. Information collected
We handle account names, business contact details, login and security information, support conversations, billing references, website analytics and usage logs. Workshops may upload customer contact details, vehicles and registrations, bookings, repair notes, photographs, inspection information, invoices, quotes, supplier records and communication preferences.
3. Purposes for use
We use information to authenticate accounts, provide workshop workflows, issue documents, deliver permitted reminders, manage subscriptions, prevent fraud, troubleshoot, provide support, maintain service security and comply with applicable legal duties. We do not sell personal information.
4. SMS, email and customer consent
WorkshopHQ may transmit SMS or email messages at a workshop's instruction and store delivery records, message status and responses. Workshop users must have a lawful basis for contacting recipients and should keep communication preferences up to date. Delivery can involve third-party messaging services.
5. Payments and financial information
Stripe or other authorised payment processors may handle card details and transactions. WorkshopHQ may retain limited references, payment status, card brand and last four digits, invoices and accounting records; we do not intentionally store complete card numbers.
6. Service providers and international processing
Data may be processed by selected providers for hosting, databases, authentication, payment processing, SMS, email, diagnostics and support, including providers outside New Zealand. Where overseas disclosure is involved we assess the safeguards required under New Zealand privacy law and use appropriate contractual and technical protections.
7. Cookies and analytics
Essential cookies and similar storage help with login, access controls and security. Analytics and optional marketing technologies may be used as disclosed in the website settings or relevant notices. You can manage browser cookies; some essential functions may not work when disabled.
8. Security and access controls
We use measures designed to protect information, such as encrypted connections, access controls, tenant separation, audit logging and restricted credentials. No digital service can guarantee absolute security. Workshop administrators must manage staff permissions and account security.
9. Retention, deletion and backups
We keep information as necessary to operate services, meet accounting or other legal obligations, address disputes and secure accounts. Retention varies by record and may include limited backup retention. If you close an account, ask support about exports and available deletion options; some records must be kept by law.
10. Your privacy rights
You may request access to or correction of personal information in accordance with the New Zealand Privacy Act 2020. Contact hello@workshophq.co.nz with enough detail to identify the record. We may need to verify identity before responding. You may complain to the New Zealand Office of the Privacy Commissioner if your concern remains unresolved.
11. Updates and contact
We may update this policy and publish the revised date. For privacy concerns, requests or questions, contact hello@workshophq.co.nz or https://www.workshophq.co.nz/contact.
Questions? Email hello@workshophq.co.nz.