Privacy Policy — Homepage

Introduction

Homepage Limited (company number 9452900, NZBN 9429053898982), trading as Homepage.org.nz (we, us, our), complies with the New Zealand Privacy Act 2020 (the Act) when dealing with personal information. Personal information is information about an identifiable individual (a natural person). We are the agency responsible for the personal information described in this policy.

This policy sets out how we will collect, use, disclose and protect your personal information.

This policy does not limit or exclude any of your rights under the Act. If you wish to seek further information on the Act, see www.privacy.org.nz.

Changes to this policy

We will update this policy as the platform changes. The date below tells you when it last changed, and the change history at the end of this policy says what moved.

Small changes, such as clearer wording, a corrected link, or a change that gives you more rather than less, take effect when we publish them here.

Material changes are different. By a material change we mean collecting a new kind of personal information, using it for a new purpose, disclosing it to a new provider or in a new country, adding any analytics, advertising or tracking beyond what the cookies section describes, keeping information for longer, or a change in who owns or controls Homepage. Before a material change takes effect we will tell account holders directly, by email and on the platform, and ask you to accept the updated policy before you carry on managing your listings. If we hold your email address for a live purpose but you do not have an account, for example because you registered your interest or asked for updates about a property, we will email you too. For everyone else, this page is the notice.

If Homepage is sold, merged or reorganised, the personal information we hold may pass to the new owner. It stays subject to this policy. If the new owner intends to handle personal information differently, that is a material change and the process above applies before it does.

This policy was last updated on 4 September 2026.

Who do we collect your personal information from

We collect personal information about you from:

you, when you provide that personal information to us, including via the website and any related service, through any registration or sign-up process, when you enquire about a property or sign in at an open home, or through any other contact with us (for example an email)
third parties where you have authorised this, or where the information is publicly available. An example is where we contact a homeowner who is advertising a private sale publicly. Where we collect your information this way, our first contact with you will say who we are, where we got your details, what we intend to do with them, how we may use and disclose them, that anything further is voluntary, how to see and correct what we hold, how to opt out, and how to contact us about privacy. This policy is the long version of that message
Google or Apple, if you choose to sign in that way. You authorise it at their sign-in screen, which tells you exactly what is being shared before you agree, and you can withdraw it from their settings later

If possible, we will collect personal information from you directly.

What personal information we collect

We collect only what the feature you are using needs. In practice that is:

Registering your interest before launch: your name and email address, and optionally your phone number and property address
Seller accounts: your name, your email address, and your password, which is stored only as a salted cryptographic hash and never in a form we can read
If you sign in with Google or Apple: the permanent identifier that provider uses for you, your email address, and your name. That is all we ask them for and all they send us. We never receive your password, and we have no access to anything else in your Google or Apple account. We keep the identifier because it is what recognises you next time you sign in, and the email address alongside it so we can help you if something goes wrong with your account. If you use Apple’s “Hide My Email”, we only ever see the forwarding address Apple gives us, not your real one. You can disconnect Homepage from your Google or Apple account at any time through their settings, and you can ask us to delete the connection at our end
Seller contact details on a listing: the name, email address and phone number you want buyers to use. These are only released to a buyer if you have switched that on for the listing, and never on an expression-of-interest listing. It is off unless you turn it on. See section 13 of the Terms
Property content: the property details, photographs, videos, floor plans, documents and other material you choose to publish. Anything you publish on your property site is, by design, publicly visible
Buyer enquiries: the name, email address, optional phone number and message a buyer submits through a property site
Open home sign-ins: the name, and optional phone number and email address, a visitor gives when signing in at an open home, and whether they asked for updates about that property
Evidence you send us about a contested address, your authority to sell, or your identity: for example a rates notice or record of title, or, where we have a concern about an account, a photo of a driver licence or passport showing the name on the account. We ask for these only when there is a concern about a listing or an account, we look at the document and record the decision, and we keep the document only as long as we need it to decide, usually a matter of days
Complaints about a listing: your name, contact details and what you tell us when you use our complaints process, kept as a record of the complaint and what we did about it. We do not pass your details to the person who published the listing

We do not buy data about you, we do not use tracking for advertising, and we do not collect payment card details.

You do not have to give us any of this. But some features cannot work without it: we cannot create an account, pass an enquiry to a seller, or send you the updates you asked for without a name and an email address, and we cannot hold a web address for you without the property address. Anything marked optional is optional, and leaving it out changes nothing else.

How we use your personal information

We will use your personal information:

to create and administer your account, and to let you sign in
to provide the platform and its features to you
to pass a buyer's enquiry to the seller of the property they enquired about
to pass the seller's contact details back to that buyer, only when explicitly opted in to do so by the seller
to hold a property web address for you, and to decide a claim where two people want the same address
to contact you about the launch, about your registration or reservation, and about your account and listings
to market our services to you, including contacting you electronically, but only where you have opted in. Every marketing email identifies us as the sender and carries an unsubscribe link
to respond to communications from you, including a complaint
to improve the platform, including diagnosing faults and preventing abuse
to conduct research and statistical analysis, on an anonymised basis
to protect and enforce our legal rights and interests, including defending a claim
for any other purpose authorised by you or the Act

Disclosing your personal information

We may disclose your personal information to:

the seller of the property you enquired about or signed in to view, where you have given us your details for that purpose
any business that supports our services, including any person that hosts or maintains the underlying IT systems, sends email on our behalf, or hosts media we publish for you
other third parties, for anonymised statistical information
a person who can require us to supply your personal information, for example a regulatory authority
any other person authorised by the Act or another law, for example a law enforcement agency
any other person authorised by you

We do not sell or rent your personal information, and we do not disclose it to third parties for those parties to use for their own purposes.

A business that supports our services may be located outside New Zealand, which may mean your personal information is held or processed outside New Zealand. The providers we currently use are listed below, each linked to its own privacy policy so you can read how it handles information.

Fly.io, for application and database hosting, in the Sydney, Australia region
Cloudflare, for content delivery and website analytics, processed in the United States
Resend, for email delivery, processed in the United States
Polycam, for capture and hosting of interactive 3D tours where a seller chooses to add one, processed in the United States

Each of these providers holds or processes information on our behalf and is contractually restricted from using it for its own purposes. We take reasonable care in choosing and engaging them, and each has its own privacy and security obligations under the terms we hold them to and the laws that apply to them. Because some of them operate outside New Zealand, we take reasonable steps to make sure the information is protected to a standard comparable to the Privacy Act: we engage each on written terms, we review their published privacy commitments, and the names, email addresses, phone numbers and enquiry messages we store are encrypted before they reach our hosting or backup providers, so those providers hold ciphertext they cannot read. Our email provider necessarily sees the addresses it sends to.

We may transfer your information in the case of a sale, merger, consolidation, liquidation, reorganisation or acquisition. See “Changes to this policy” for what we will tell you if that happens.

Protecting your personal information

We will take reasonable steps to keep your personal information safe from loss, unauthorised activity, or other misuse. Those steps include encryption in transit, hashed passwords, encryption of names, email addresses, phone numbers and enquiry messages in our database and in every backup of it (so that a copy of the database on its own cannot be read), access controls that limit database access to the people who run Homepage, and backups that are never publicly readable.

If a privacy breach ever causes, or is likely to cause, serious harm, we will notify the Office of the Privacy Commissioner and the people affected, as the Act requires.

How long we keep your personal information

We keep personal information only for as long as we need it for the purposes set out above, or for as long as the law requires.

Pre-launch registrations are kept until launch, and then only for as long as needed to set founding sellers up. Unused registrations are then deleted
Reserved web addresses lapse 180 days after you register, unless we extend the reservation
Account and listing information is kept while your account is active
Buyer enquiries and open home sign-ins are deleted automatically 180 days after they are made. A seller can also delete them from their own dashboard at any time
Evidence sent to us about a contested address, authority to sell or identity is deleted once we have decided the matter; we keep a record of the decision, not the document
Backup copies of our database are kept for 30 days and then deleted automatically. The personal information inside them is encrypted. We use a backup only to recover from a failure, and if we ever restore one we re-apply any deletions made since it was taken

You can ask us to delete your personal information at any time. You can also do it yourself: your account page has a "Close your account" option that deletes your account, any property sites you own along with their photos, documents, open homes, enquiries and open-home sign-ins, any address still held in your name from a pre-launch registration, and that registration itself.

Closing your account removes all of this from the live platform immediately, and we cannot undo it. We ask our content delivery network to drop its cached copies of your photos and video at the same time, and copies in our encrypted backups age out within 30 days. Our system logs record events, not people: a failed email delivery is logged with the address masked, and nothing else in them names you. We keep nothing that identifies you after that, other than the record of any complaint or decision we are required or entitled to retain.

Accessing and correcting your personal information

Subject to certain grounds for refusal set out in the Act, you have the right to access your readily retrievable personal information that we hold and to request a correction to your personal information. Before you exercise this right, we will need evidence to confirm that you are the individual to whom the personal information relates.

In respect of a request for correction, if we think the correction is reasonable and we are reasonably able to change the personal information, we will make the correction. If we do not make the correction, we will take reasonable steps to note on the personal information that you requested the correction.

If you want to exercise either of the above rights, email us at [email protected]. Tell us what you want and help us confirm it is you. If you have an account, emailing us from the address on the account is usually enough. If you enquired about a property or signed in at an open home, tell us which property and roughly when, and we will match that against the record. If neither of those works, or the request is for something sensitive, we may ask for a photo of a driver licence or passport, which we look at, record the decision, and delete within a few days. We will respond within 20 working days.

Internet use

While we take reasonable steps to maintain secure internet connections, if you provide us with personal information over the internet, the provision of that information is at your own risk.

Property sites on Homepage are public. If you publish personal information on your property site, or in a 3D tour, you acknowledge and agree that the information you publish is publicly available. You are responsible for making sure you have the right to publish any personal information in what you upload, including information about other people, such as a name on a floor plan or document, or a person in a photograph or video. If someone believes a property site shows their information without their agreement, our complaints page is where they go.

If you follow a link on our website to another site, the owner of that site will have its own privacy policy relating to your personal information. We suggest you review that site's privacy policy before you provide personal information. This includes any 3D tour hosted by Polycam.

Cookies and analytics

We set one cookie, and only for signed-in sellers: a session cookie that keeps you signed in. It holds a random token, not your details, and is removed when you sign out. Without it, signing in does not work.

We use Cloudflare Web Analytics to understand aggregate traffic and how our pages perform, such as page views, popular pages, referring sites, broad country and device type, and page load speed. It uses no cookies, stores nothing on your device, does not track you across other websites, and does not collect or retain personal information such as your IP address. The data is aggregated and cannot be used to identify you, which is why the site does not need a cookie banner. We use it only to improve the site, never for advertising.

Privacy complaints

You can complain to us about any aspect of how we handle personal information, not only about a request for access or correction. Email [email protected] and tell us what happened. We will acknowledge your complaint within two working days, look into it, and tell you what we found and what we have done within 20 working days.

If you are not satisfied with our response, or you would rather not raise it with us first, you can complain to the Office of the Privacy Commissioner. Their service is free.

A complaint about what a property site shows, for example that it uses your photographs or shows your information, is handled through our complaints page, which explains what to send us.

Contacting us

If you have any questions about this privacy policy or our privacy practices, or if you would like to request access to, or correction of, your personal information, you can contact us at [email protected].

Change history

What has changed in this policy and when, newest first. Changes marked as material were notified to account holders and accepted before they applied.

4 September 2026: Set out how we tell you about changes, and what counts as a material change; Expanded what our first contact says when we get your details from somewhere else; Said what happens if you choose not to give us information; Added what we do to make sure overseas providers protect your information; Said how long backup copies last after you close your account, and what our logs hold; Made sellers responsible for personal information in what they upload; Gave examples of how to confirm your identity for an access request; Added a privacy complaints section
2 September 2026: Added what we collect when we ask for evidence of ownership, authority or identity, and when you make a complaint about a listing
20 August 2026: Previous version

Terms & Conditions