Privacy Policy
Last updated 2 August 2026.
Information we collect
We collect account, property, project, access, photo, campaign-attribution and delivery information needed to operate FillMatch.
Address privacy
Approved companies see a suburb and deliberately offset map position. Exact address and access information are disclosed only after the receiver accepts a request, or to authorised administrators.
Map services
The company dashboard uses Google Maps to display deliberately approximate receiving-site locations. Google Maps use is subject to the Google Maps/Google Earth Additional Terms and Google Privacy Policy.
Storage and security
Passwords are hashed. Sessions use HTTP-only cookies. Site photos and the application database are stored outside direct public access and returned only after role checks.
Use and disclosure
We use information to assess registrations, match sites and companies, coordinate and verify deliveries, send service messages, handle incidents and disputes, prevent misuse, and understand service performance. We disclose only the information reasonably needed for an accepted delivery, service providers such as map and hosting providers, or where disclosure is authorised or required by law.
Retention
Unsuccessful reset links are removed after seven days. Operational, delivery, safety, consent, audit and dispute records are retained only while reasonably needed for service, security, legal or dispute purposes, then deleted or de-identified. Site photos may be removed when an account and its open obligations are closed.
Privacy officer and requests
FillMatch's privacy officer can be contacted at info@fillmatch.co.nz. You may request access, correction or deletion where retention is not required for safety, audit, dispute or legal reasons. We may verify your identity before acting.
Privacy or security incidents
Contact the privacy officer promptly if information appears lost, accessed incorrectly or disclosed to the wrong person. FillMatch records and assesses incidents and will notify affected people and the Office of the Privacy Commissioner when required.