Privacy Policy

1. About This Privacy Policy

This Privacy Policy explains how Maraya Structures Ltd (we, us, our) collects, uses, stores and discloses personal information when you interact with our business — including when you visit our website at marayastructures.co.nz, use our client portal, request a quote, or engage us for installation and maintenance services.

We comply with the New Zealand Privacy Act 2020 (the Act) and the 13 Information Privacy Principles it sets out. This policy does not limit or exclude any of your rights under the Act.

2. The Personal Information We Collect

We may collect the following types of personal information:

• Your name, email address, phone number and physical address
• Details about your property and project requirements (for quoting purposes)
• Photos and documentation related to your installation project
• Account login details when you use our client portal
• Payment and billing information
• Information you provide when you contact us (via our website, phone or email)
• Website usage data including IP address, browser type and pages visited

3. How We Collect Personal Information

We collect personal information:

• Directly from you — when you fill in a quote form, create an account, contact us, or engage our services
• Through our website — via cookies and analytics tools that track website usage
• During project delivery — through photos, site notes, checklists and timesheets created by our team
• From our suppliers — when they refer you to us for installation services

4. How We Use Personal Information

We use your personal information to:

• Provide quotes, installation, repair and maintenance services
• Create and manage your client portal account
• Communicate with you about your project, including sending maintenance reminders
• Process payments and invoices
• Improve our website and services
• Comply with our legal obligations (including 7‑year record‑keeping requirements)
• Send you marketing communications where you have opted in (you can opt out at any time)

5. Disclosure of Personal Information

We may share your personal information with trusted third parties who help us operate our business, including:

• Cloud service providers (including Cloudflare, which hosts our website and stores project data)
• Email service providers (for sending maintenance reminders and transactional emails)
• Payment processors (when you pay invoices online)
• Professional advisers such as accountants and lawyers
• Our supplier partners when they are involved in your project delivery

We only disclose personal information where it is necessary for these purposes, or where required by law. We do not sell or rent your personal information to third parties.

6. Overseas Storage and Disclosure

Some of our service providers may store or process personal information outside New Zealand. For example, our website and data are hosted on Cloudflare's global network, which may involve servers located in the United States and other countries.

Where we disclose personal information overseas, we take reasonable steps to comply with Information Privacy Principle 12 of the Privacy Act 2020. This includes ensuring the recipient is subject to comparable privacy safeguards or using contractual protections where appropriate.

7. Protection of Personal Information

We take reasonable steps to protect personal information from loss, unauthorised access, use, modification or disclosure. These steps include:

• Encrypted connections (HTTPS) for all website traffic and API communications
• Secure authentication (JWT tokens stored in HttpOnly cookies) for our client portal
• Restricted access to customer data — only authorised staff can view your information
• Regular security reviews of our systems
• Secure payment processing through reputable third‑party providers

8. Access and Correction

You have the right to request access to the personal information we hold about you, and to request correction if you believe it is inaccurate. To make a request, please contact us using the details at the bottom of this policy. We will respond within a reasonable timeframe and may ask you to verify your identity before providing access.

9. Retention of Personal Information

We retain personal information only for as long as necessary to fulfil the purposes we collected it for, including to satisfy any legal, accounting or reporting requirements. In particular, project records and associated documentation are kept for a minimum of 7 years as required by New Zealand law. We take reasonable steps to securely delete or de‑identify personal information when it is no longer needed.

10. Cookies and Website Analytics

Our website uses cookies and similar technologies to function correctly and to understand how visitors use our site. Cookies are small data files stored on your device. You can disable cookies through your browser settings, though this may affect the functionality of our website.

We use Cloudflare's web analytics, which does not track individual users across sites and does not use cookies for tracking purposes. Any analytics data we collect is anonymous and used only to improve our website and services.

11. Privacy Complaints

If you have a complaint about how we handle your personal information, please contact us using the details below. We will investigate and respond as soon as reasonably possible.

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner (www.privacy.org.nz).

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page and take effect from the date of publication. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or wish to make a privacy request, please contact us: