Privacy Policy

1. Who is responsible

Three Brothers Group Limited, using the Three Brothers Group brand ("we", "us" and "our"), is responsible for this website. Our privacy contact is privacy@threebrothers.co.nz. You can also write to our Privacy Officer at 9C William Pickering Drive, Rosedale.

This policy covers 3b.co.nz and related website enquiries. A separate project agreement or collection notice may explain additional information needed for a particular transaction. A reference to the Three Brothers Group brand does not mean every project company automatically receives your information.

2. Information collected through the enquiry form

When you click “Send enquiry”, the form sends your name, email address, project selection and message to our enquiry system using Google Cloud Firestore. The record also includes the page from which you submitted it, a received timestamp and its processing status. We use this information to respond, discuss the project or proposed partnership and manage an appropriate correspondence record.

Our enquiry notification service is configured to email the message and contact details to our team through Google Workspace. Enquiry records may also hold notification status and related delivery or error information so we can manage follow-up. The website’s confirmation screen does not guarantee delivery of a notification email or that someone has read your message.

Providing information is voluntary. Your name, email address and message are needed to send an enquiry, but not to browse our projects. If you do not provide enough information, we may be unable to respond or assess the enquiry. Do not include identity documents, financial account details, passwords or confidential third-party documents.

Our website code does not save enquiry details in browser local storage. Your browser may retain form entries through its own autofill or session features. Technical information processed by hosting and maps is described below.

3. If you contact us separately

If you contact our team through an agreed email, phone or other channel, we may receive your contact details, correspondence, the property or project you are discussing, and information you choose to provide. We use what is reasonably needed to respond, discuss the proposed work or partnership, keep an appropriate record and meet legal obligations.

We will explain any additional information that is needed before collecting it. If you do not provide enough contact or project information, we may be unable to respond or assess your enquiry. An enquiry is not permission for unrelated marketing or a credit check.

Where we lawfully collect personal information about you from another person, such as your authorised representative or project adviser, we will take reasonable steps to tell you about the collection as required by information privacy principle 3A, unless an exception applies. This includes the purpose, intended recipients, who collects and holds it, any applicable statutory authority and your access and correction rights. If you provide another person’s details, only do so with proper authority and make this policy available to them; our own notification obligations still apply.

4. Hosting and technical information

This website uses Google Firebase Hosting. Delivering a page involves technical information such as an IP address, request time, requested page, browser or device information and potentially a referring page. Google processes technical information to operate and secure its service. Its Firebase privacy information describes Hosting’s use of incoming IP addresses and its retention of IP data for a few months.

The current website code does not include Google Analytics, advertising pixels, a newsletter tracker or first-party tracking cookies. We do not use an enquiry as permission for unrelated marketing or to build an advertising profile. This describes this website version; external services have their own practices.

5. Google Maps and external websites

Some project pages embed Google Maps. When an embedded map loads, your browser connects directly to Google, which may receive technical information such as your IP address, device details and referring page, and may use cookies or other identifiers under its own settings and policies. Loading a map can occur without you clicking it.

See Google’s Privacy Policy and your browser or Google account controls. You can block third-party content or cookies in your browser, although embedded maps may stop working. External links take you to independently operated websites with their own privacy practices.

6. Use, sharing and overseas processing

Our team receives enquiry information, with Google Firebase/Cloud Firestore providing website and enquiry infrastructure and Google Workspace providing the configured email notification service. Access is limited to people who need it to respond or manage the matter. Public website visitors cannot read or list enquiry records through the form. We may also share relevant information with professional advisers or the specific project participant needed to address your request, and will identify additional recipients where required. We do not sell personal information.

We may also use or disclose information where you authorise it, where the original purpose or a directly related purpose permits it, or where New Zealand law otherwise requires or permits it.

Google and other service providers may process information outside New Zealand. We do not promise that all information stays in New Zealand. Where a provider acts only as our storage or processing agent, we remain responsible for the information we hold through that agent. Where we disclose information to an overseas recipient for its own purposes, we must have a lawful basis and satisfy applicable safeguards under information privacy principle 12. Browsing this website is not blanket consent to unrestricted overseas disclosure.

7. Security, retention and incidents

We take reasonable steps to protect personal information we hold against loss, unauthorised access, use, modification or disclosure. No website or communication system can be guaranteed completely secure.

Enquiries can be held in our Firestore records and team email system. We keep information only for as long as needed to handle the enquiry, manage related correspondence and meet any relevant legal recordkeeping or dispute requirements, then delete it or make it no longer personally identifiable. Provider-held technical data is subject to the relevant provider’s arrangements.

If a privacy breach causes or is likely to cause serious harm, we will notify the Privacy Commissioner and affected people as soon as practicable, unless a lawful exception applies.

8. Access, correction and complaints

You can ask whether we hold personal information about you, request access, or ask for a correction by contacting our Privacy Officer using the details above. We may need to check your identity or authority before releasing information. We will make a decision as soon as reasonably practicable, generally within 20 working days, subject to lawful extensions or other applicable provisions.

If we decline a correction, you can ask for a statement of the correction you sought to be attached to the information. Please contact us first about a privacy concern so we can try to resolve it. You can also complain to the Office of the Privacy Commissioner.

9. Changes to this policy

We will update this policy when relevant practices change and show the effective date here. If we add analytics, marketing subscriptions or another new collection, we will provide an appropriate notice at that point. Publishing a revised policy alone does not authorise an incompatible use of information already collected.