DRAFT — placeholder copy, pending lawyer review.

This page is scaffolding for the pilot, written in plain English to describe what the system actually does with data. It is not legal advice and not final. A lawyer must review and rewrite it before public launch.

Privacy at UsedCarsNZ

Last updated: draft — not yet published.

What we collect

  • When you enquire on a car: your name, email, optional phone number, your message, and which listing you enquired on.
  • Email-lane leads:if a dealer forwards a buyer enquiry that originated on another marketplace (e.g. Trade Me) to their UsedCarsNZ lead address, we receive the buyer's email address and message so we can respond and pass it to the dealer.
  • Technical data: your IP address and similar request metadata, used only for rate-limiting and bot protection (Cloudflare Turnstile).

How we use it

  • To pass your enquiry to the relevant dealer.
  • To send you an instant acknowledgement that your enquiry was received. This acknowledgement is a fixed template — it is not written by an AI model.
  • To prepare a suggested reply for the dealer. A dealer always reviews and approves a reply before it is sent to you.
  • To measure response times, which we publish only in aggregate and never in a way that identifies you.

Automated assistance (AI)

Part of the reply flow uses an automated assistant to draft suggestions. It is clearly labelled as an AI assistant wherever you interact with it, and a human at the dealership approves any free-text reply before it reaches you. The assistant does not make decisions about you on its own.

How long we keep raw emails

When an enquiry arrives by forwarded email, we keep the original email for up to 30 days to diagnose delivery or parsing problems, then it is automatically deleted. The enquiry record itself (so the dealer can keep helping you) is retained separately.

Who is responsible for your information

When you enquire on a car, the dealer is the business deciding why your information is collected and what happens to it — in Privacy Act terms, the dealer is the agency that collects it. UsedCarsNZ operates the platform and handles the data on the dealer's behalf (a processor role): we run the enquiry forms, the email-lead lane, the acknowledgement, and the response tooling, but the dealer is the one helping you buy a car.

For the email-lead lanespecifically — where a dealer forwards a buyer enquiry from another marketplace to their UsedCarsNZ lead address — the dealer remains the collecting agency; UsedCarsNZ receives and processes that email only to route it and prepare the dealer's reply.

Your rights under the Privacy Act 2020

We aim to handle your personal information consistently with the New Zealand Privacy Act 2020 and its information privacy principles. That includes collecting only what we need, using it only for the reasons described here, keeping it secure, and honouring your right to access the information we hold about you and ask us to correct it. You can also raise a concern with the Office of the Privacy Commissioner.

Who we share it with

  • The dealer whose car you enquired on.
  • Service providers who help us operate: email delivery (Resend), hosting and database (Cloudflare, Supabase). They process data on our behalf.
  • We do not sell your personal information.

Your choices

You can ask us for a copy of the information we hold about you, or ask us to delete it. To do that, or to ask anything about this page, email privacy@usedcarsnz.co.nz (placeholder address — confirm before launch).

Contact

UsedCarsNZ — contact details to be confirmed before launch. This section, and this entire page, are placeholders awaiting legal review.