Sudolabs

Privacy

Sudolabs (operated by [Cyris Cloete], sole trader, New Zealand) ("we", "us", "our") respects your privacy and is committed to protecting personal information in accordance with the Privacy Act 2020 (NZ).

This policy explains what personal information we collect, how we use and protect it, and your rights.

Effective date: 2026-05-01 · Website: [sudolabs.nz]

1. Who this policy covers

This policy applies to personal information we collect about:

  • people who contact us or enquire about our services;
  • our clients and their representatives; and
  • visitors to our website.

Data we host for clients. When we build or host software for a client, that client's systems may contain personal information about their customers or users. For that information the client is the agency responsible under the Privacy Act, and we act on the client's behalf (as a processor/agent) under our client contract. How that information is handled is governed by the client's own privacy policy and our agreement with them, not this policy.

2. Information we collect

  • Contact and identity information: name, email, phone, business name, and similar details you provide.
  • Project information: information you share with us to scope, deliver, or support a project.
  • Billing information: details needed to invoice and be paid (handled via our invoicing/payment providers).
  • Website information: basic technical and usage data (for example IP address, browser type, pages viewed) where our website collects it.

We collect personal information only for purposes connected with our business, and generally directly from you.

3. How we use your information

We use personal information to:

  • respond to enquiries and communicate with you;
  • provide, support, and improve our services;
  • prepare quotes, contracts, and invoices, and manage payments;
  • meet legal, tax, and regulatory obligations; and
  • maintain business records.

We do not sell personal information.

4. Disclosure and third parties

We disclose personal information only where necessary, including to trusted service providers who help us run our business. These may include:

  • Hosting and infrastructure: [DigitalOcean], [Cloudflare] (storage, CDN, security);
  • Payments: [Stripe];
  • Email and communications: [email provider];
  • Accounting/invoicing: [Hnry];
  • Code hosting and tooling: [GitHub]; and
  • professional advisors, or where required or permitted by law.

We require these providers to handle personal information consistently with this policy and the Privacy Act.

5. Overseas storage

Some of our service providers store information on servers located outside New Zealand. Where this happens, we take reasonable steps to ensure the information is protected by comparable safeguards, consistent with the Privacy Act 2020 (including Information Privacy Principle 12).

6. Storage and security

We hold personal information electronically and take reasonable technical and organisational steps to protect it against loss, misuse, and unauthorised access, including access controls, multi-factor authentication on key accounts, encrypted devices, secure (encrypted) connections, and regular backups. See our internal Data Protection Policy for detail.

7. Retention

We keep personal information only for as long as needed for the purposes above or as required by law (for example tax records). When no longer required, we securely delete or de-identify it.

8. Your rights

Under the Privacy Act 2020 you may:

  • request access to the personal information we hold about you; and
  • request correction of that information if it is wrong.

To make a request, contact us. We will respond as soon as reasonably practicable and within the timeframes required by the Act. There is generally no charge.

9. Privacy breaches

If a privacy breach occurs that is likely to cause serious harm, we will notify the affected individuals and the Office of the Privacy Commissioner as required by the Privacy Act 2020, and take steps to contain and remedy the breach.

10. Complaints

If you have a concern about how we have handled your personal information, please contact us. If you are not satisfied, you may complain to the Office of the Privacy Commissioner (www.privacy.org.nz).

11. Changes to this policy

We may update this policy from time to time. The current version, with its effective date, will be available on our website.