Privacy Policy

Topp Shelf Building is a Kāpiti-based building company working across Horowhenua, the Kāpiti Coast, Porirua, the Hutt Valley and Wellington City. This policy covers toppshelfbuilding.nz and the information handled when you get in touch, book a callback, or send us material through it.

Questions about anything on this page go to clinton@toppshelfbuilding.nz — it reaches the team, not a mailbox nobody reads.

We collect only what you choose to give us, plus the technical minimum any website needs to run. By channel:

Enquiry form

Your name, email address and phone number, the notes you write, and the project basics you select — service, property type, location and timeframe.

Booking a call

The time you choose and the details you enter in the scheduling form — name, email address, and anything you add to the booking.

Pre-call uploads

Plans, drawings, photographs and notes you choose to send after booking, tied to your booking reference so they arrive with your call.

Experience page

Your written words about a completed project, the crew you worked with, one optional photograph, and your yes-or-no permission for those words to be published.

Email & phone

Whatever you include when you contact us directly.

Our hosting infrastructure keeps standard server logs — IP address, browser type, the pages requested and when. They exist for security and to keep the site running; we do not use them to identify or profile you.

Directly from you, when you type it or upload it. Nothing is gathered behind your back: this site runs no advertising trackers, no social-media pixels and no fingerprinting.

One small preference — your cookie choice — is kept in your browser's local storage so we do not have to keep asking. The Cookies section below covers it, and lets you change it.

Everything collected serves one of these purposes:

• Responding to your enquiry and answering your questions.
• Preparing for a call you have booked, so the conversation starts informed.
• Scoping, quoting and delivering building work you engage us for.
• Keeping honest records of jobs, conversations and commitments.
• Publishing your words about a finished project — only ever with the permission you gave on the page where you wrote them.
• Meeting legal and tax record-keeping obligations.

Information you submit is processed to provide our services — responding to you, organising project information, and running the workflows that get a job from enquiry to handover. In aggregate, it also helps us improve the site and how we present our work.

We may use trusted, access-controlled AI tools to help draft responses, summarise enquiries and organise project information. Your information is never sold, and it is never used to train public AI models.

We do not sell personal information, and we never share it for third-party marketing. Analytics, where it runs at all, is covered in its own section below.

Plans, drawings, photographs and notes you send land in private, access-controlled storage — never a public folder. They are shared with the team through time-limited links and used solely to prepare for and deliver your project.

You keep ownership of everything you send. Send only what is relevant to the work, and if you want something removed, ask — we will delete it.

Words and photographs given on the experience page are published only if you switched publishing permission on. Without it, they stay internal — a record for the crew, nothing more.

The site itself sets no advertising or cross-site cookies. The one thing it stores in your browser is your cookie preference, so the notice does not reappear once you have made a choice.

While analytics is running, Google Analytics sets its own measurement cookies on this site (named _ga and _ga_ followed by a code). They tell repeat visits apart from new ones; they do not identify you, and they are not used for advertising. Opt out below and they are deleted from this device and never set again.

The embedded booking calendar (Cal.com) sets its own functional cookies inside its booking window when you use it — they are what make the booking work, and they are governed by Cal.com's own policy, linked below.

If your browser sends a Global Privacy Control or Do Not Track signal, we treat it as an opt-out automatically — no banner interaction needed.

We use Google Analytics 4 to understand how the site is used — which pages are read, how people arrive, and which paths lead to an enquiry. It is configured to measure in aggregate: advertising and audience-targeting signals are switched off, IP addresses are anonymised, and nothing you type into a form — your name, email, phone number or project notes — is ever sent to Google. If you opt out on this page, or your browser sends a Global Privacy Control or Do Not Track signal, Google's script is never loaded at all and no analytics cookies are set.

A small number of providers run pieces of the site's plumbing. Each receives only what its job requires and handles it under its own privacy policy:

Vercel

Hosts the website and serves its pages.

Supabase

Stores enquiries and uploaded files in private, access-controlled infrastructure.

Cal.com

Runs the embedded call-booking calendar.

Resend

Delivers enquiry and booking emails to our team.

Google Analytics

Measures how the site is used, in aggregate, and only until you opt out.

Your information lives on reputable cloud infrastructure and travels encrypted in transit — the site is HTTPS everywhere. Uploaded files sit in private storage buckets that only the team can reach.

We keep enquiry and project records for as long as they are needed to respond, to deliver the work, and to meet reasonable business and legal record-keeping. When information is no longer needed, it is deleted — and you can ask us to delete yours sooner at any time.

Access to your information is limited to the people who need it to do the work. Form submissions and uploads run through locked-down server functions with scoped keys — the browser never talks to storage directly — and no card or bank details ever pass through this site.

No system is beyond fault, but if a breach ever put your information at real risk, we would tell you and the regulator promptly, as the law requires.

Under the Privacy Act 2020 (New Zealand) you are entitled to:

• Ask what personal information we hold about you.
• Receive a copy of it.
• Have it corrected if it is wrong.
• Ask for it to be deleted where we no longer need it.
• Withdraw a publishing permission you gave earlier — at any time, no reason needed.

Email clinton@toppshelfbuilding.nz and we will sort it promptly. If you believe we have not, you can complain to the Office of the Privacy Commissioner.

When our practices change, this page changes with them and the date at the top moves. A material change gets a plain note here, not a silent edit.

This policy, like the Terms & Conditions, is governed by the law of New Zealand. Topp Shelf Building — Horowhenua to Wellington City, New Zealand.

clinton@toppshelfbuilding.nz