Information we collect
We collect the details needed to create accounts, publish provider listings, process provider subscriptions, manage enquiries, favourites and reviews, prevent abuse, and provide support. This includes names, contact details, listing content, availability, transaction references, device and security data, and account activity. Fields marked required are necessary to provide the relevant account, listing or support feature; optional fields may be left blank, although doing so can limit that feature.
How and why we use it
We use personal information to provide the marketplace, connect customers and providers, process subscriptions, authenticate accounts, communicate service messages, moderate content, prevent fraud, analyse performance, and meet legal obligations. We do not sell personal information.
Service providers and overseas processing
We use service providers including Cloudflare for hosting, storage and security checks, Stripe for subscription billing, Resend for transactional email, Google Maps for location embeds, Logo.dev for logos used on independent directory listings, and Google Ads and Meta for advertising measurement. Loading an embed, third-party image or measurement tag can disclose technical data such as an IP address, browser details, referring page and page interactions to that provider. These providers may process information outside New Zealand under their own privacy and security safeguards. We disclose only what is reasonably needed for the service.
Public information and addresses
Live provider listings, business contact details selected for display, service areas and published reviews are public. A provider’s exact street address is hidden by default and is displayed only when the provider expressly opts in. Do not add a residential address or other sensitive personal information to public listing fields, messages, or reviews.
Unclaimed business listings
Berrylist may use non-sensitive business facts from an organisation’s official public website to create a clearly labelled independent directory listing. We record the source and review date, avoid private or residential contact details, and provide a route to claim, correct or remove the listing.
Retention, security and privacy incidents
We retain information only as long as reasonably needed for the marketplace, security, disputes, accounting, or legal obligations. Access is restricted by role, sensitive actions are checked on the server, uploads are validated, activity is logged, and database recovery controls are maintained. No internet service can guarantee absolute security. Berrylist assesses suspected privacy breaches and will notify affected people and the Office of the Privacy Commissioner when required by the Privacy Act 2020.
Cookies, security checks, analytics and advertising
Berrylist uses essential cookies for secure sign-in and sessions. Cloudflare Turnstile performs an invisible anti-abuse check on protected forms; its handling of challenge data is described in the Cloudflare Turnstile Privacy Addendum. Analytics help us understand traffic, errors and aggregate interactions with provider profiles, such as profile views and contact-link clicks. Google Ads and Meta measurement tags help us understand whether an advertisement led to a visit or action on Berrylist and may use cookies or similar identifiers for campaign attribution under those providers' own privacy policies. These reports are not currently shown in provider dashboards. We do not use analytics or advertising measurement to sell personal profiles. You can restrict non-essential cookies and identifiers using your browser or device settings, although this may reduce the accuracy of campaign measurement.
External recommendations and affiliate tracking
Some optional resource links are affiliate links and are labelled where they appear. When you follow one, the external partner may use a referral identifier, cookie or similar technology under its own privacy policy to attribute a later purchase to Berrylist. Berrylist receives programme reporting such as clicks, qualifying purchases and commission amounts, but does not receive your external account password or full payment-card details. You can use Berrylist without following these links.
Your choices and rights
Providing personal information is voluntary, but Berrylist cannot create an account, publish a claimed listing, process a subscription or respond to a support request without the information marked required for that feature. Under the Privacy Act 2020, you may ask for access to or correction of your personal information. You may also request deletion where we no longer need to retain it. We may need to verify your identity before acting on a request.
Privacy Officer, requests and complaints
Berrylist has appointed a Privacy Officer to oversee Privacy Act compliance. Send access, correction, deletion or complaint requests to privacy@berrylist.nz. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner at privacy.org.nz.