Privacy Policy

Effective 9 May 2026

BisDak (“we”, “us”, “our”) operates bisdak.co.nz, a directory of Filipino-owned businesses in New Zealand. This policy explains what personal information we collect, why we collect it, and your rights under the Privacy Act 2020 (NZ).

1. Information We Collect

Account information: When you create an account we collect your name, email address, and a hashed password. We never store your password in plain text.

Business listings: If you submit or claim a business, we collect the business name, category, location, contact details, and description you provide. This information is published on the directory.

Reviews: When you leave a review, we collect your display name, suburb, rating, and review text.

Technical data: We automatically collect IP addresses, browser type, and pages visited for security and analytics purposes.

Cookies: See our Cookie Policy for details.

2. How We Use Your Information

  • To operate and maintain the BisDak directory
  • To verify your email address via one-time codes
  • To process business submissions, claims, and reviews
  • To send transactional emails (verification codes, claim status updates)
  • To protect against fraud and abuse
  • To comply with legal obligations

We do not sell your personal information to third parties.

3. Legal Basis

We process your personal information under the Information Privacy Principles (IPPs) of the Privacy Act 2020. We only collect information that is necessary for the purposes described above (IPP 1), directly from you where practicable (IPP 2), and with your knowledge (IPP 3).

4. Data Sharing

We may share your information with:

  • Supabase (database hosting, based in the US)
  • Vercel (website hosting, based in the US)
  • Resend (transactional email delivery)

These providers process data on our behalf and are bound by their own privacy policies. By using BisDak, you acknowledge that your data may be transferred to and stored in the United States.

5. Data Retention

We retain your account information for as long as your account is active. Business listings remain published unless you request removal. You may request deletion of your account and personal data at any time by contacting us.

6. Your Rights

Under the Privacy Act 2020, you have the right to:

  • Access your personal information (IPP 6)
  • Correct inaccurate information (IPP 7)
  • Request deletion of your personal data

To exercise these rights, email alex@aiconsult.co.nz. We will respond within 20 working days.

7. Data Breaches

If we experience a data breach that poses a risk of serious harm, we will notify the Office of the Privacy Commissioner and affected individuals as required under Part 6A of the Privacy Act 2020.

8. Children

BisDak is not intended for use by anyone under 16 years of age. We do not knowingly collect personal information from children.

9. Changes

We may update this policy from time to time. Material changes will be posted on this page with an updated effective date.

10. Contact

For privacy enquiries or complaints, contact:

BisDak
Email: alex@aiconsult.co.nz

If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner.