Privacy
LAST UPDATED · SEPTEMBER 2026
The short version
We collect what we need to run Kitset, reply to you and see which of our ads work. We don't sell your information, and we don't share it with anyone who doesn't need it to make the service work. This site uses the Meta pixel for our Facebook and Instagram ads; see below for what that means and how to opt out.
What we collect
- If you contact us - your name, email address and whatever you write in the form. We use it to reply, nothing else.
- If you create an account - your email address and a password (stored securely hashed - we never see it). Anything you put into a site you build is stored so we can host it for you.
- Visit counts - our own analytics count page views without cookies and without identifying you. Your browser also remembers how you first found us (the page you landed on and the link or ad that brought you), so that if you send us a form we know which ad or post worked. That stays in your browser unless you send a form.
- Our ads - on this site (kitsetlabs.nz) the Meta pixel tells Meta, the company behind Facebook and Instagram, which pages you visit here and what you do, such as pressing Get started. See "Advertising" below.
Where it lives
Your account, your site and messages are stored with Google Cloud in Sydney, Australia, and sign-in is handled by Google. Emails we send you go through Resend. Payments are handled by Stripe; we never see or store your full card number. Each of these providers only processes data on our behalf.
Advertising
We use the Meta pixel on kitsetlabs.nz to measure our Facebook and Instagram ads and to show them to people who have visited this site. Meta may use cookies and match your visit to your Facebook or Instagram account, and the information goes to Meta overseas, under Meta's own privacy policy. You can turn off ads based on your activity in your Facebook or Instagram ad settings, or block the pixel with your browser's tracking protection. The pixel is only on our own site. It is not on websites we host for clients unless they add it themselves.
Websites we host for clients
Sites built with Kitset belong to their owners. If you fill in a contact form on a Kitset-hosted site, your message goes to that business - their handling of it is covered by their own privacy policy (we require one for embedded booking or tracking tools).
Your rights
Under the New Zealand Privacy Act 2020 you can ask to see the information we hold about you, ask us to correct it, or ask us to delete your account and everything in it. Site owners can also export their complete site at any time - your website is yours.
How long we keep it
Contact form messages are kept while we are dealing with them and for up to two years after, so we can pick up a conversation you started. Account and site data is kept for as long as your account is open. If you close your account, your site and its content are deleted within 30 days, apart from anything we have to keep for tax records, which is seven years for invoices and payment records under New Zealand tax law.
Who is responsible
Kitset is operated by Kitset Labs Limited, a New Zealand company, NZBN 9429053918710. Under the Privacy Act 2020 that is the agency holding the information described on this page, and the one your rights above are exercised against.
Questions
Email us via the contact form - a real person replies. You can delete your own account at any time under Settings in your dashboard. If you are asking to see, correct or delete your information, say so and we will treat it as a Privacy Act request. We will reply within 20 working days, which is the time the Privacy Act allows. If you are not happy with how we handle it, you can complain to the Office of the Privacy Commissioner at privacy.org.nz, and you do not need our permission to do that.