Summary: ReviewFlow NZ collects customer contact details on behalf of our clients (local businesses) to send Google review requests. We store only what we need, never sell your data, and comply fully with the New Zealand Privacy Act 2020.
1. Who We Are
ReviewFlow NZ is operated by BK Kshetri, a sole trader based in Hastings, Hawke's Bay, New Zealand. We provide done-for-you Google review automation services for local small businesses.
For privacy enquiries, contact us at: hbdigitalpresence@gmail.com or 027 211 5004.
2. What Information We Collect
We collect the following types of information:
- Customer contact details — names, email addresses, and phone numbers provided to us by our business clients in order to send Google review requests
- Business client information — names, business names, email addresses, phone numbers, and Google Business Profile details of businesses that use ReviewFlow NZ
- Usage data — basic analytics about how our dashboard and website are used (pages visited, button clicks)
- Communications — any messages or emails you send to us directly
3. How We Use Your Information
We use the information we collect to:
- Send automated Google review request messages (SMS or email) on behalf of local businesses after a job or service
- Generate and suggest AI-drafted replies to Google reviews on behalf of our clients
- Provide and improve the ReviewFlow NZ service
- Communicate with our business clients about their account
- Comply with legal obligations under New Zealand law
4. Legal Basis — New Zealand Privacy Act 2020
ReviewFlow NZ operates in full compliance with the New Zealand Privacy Act 2020. We collect personal information only when it is necessary for a lawful purpose connected directly to our service. We collect only what is needed, not more.
Customer contact details are collected by our business clients (the tradies and service providers) who have an existing relationship with those customers. We process this data on their behalf as a service provider.
5. Who We Share Information With
We do not sell, rent, or trade your personal information. We share data only with:
- Google — to post approved review replies to Google Business Profiles via the Google Business Profile API
- SMS providers (e.g. ClickSend) — to deliver review request messages to customers
- Supabase — our database provider, for secure data storage
- Make.com — our automation platform, used to process workflows
- Groq — our AI provider, used only to generate reply suggestions (no personal data is included in prompts)
All third-party providers are used solely to deliver the ReviewFlow NZ service and are not permitted to use your data for their own purposes.
6. How Long We Keep Your Data
We retain customer contact details for as long as a business remains a ReviewFlow NZ client, plus 30 days after account closure. Business client data is retained for the duration of the service agreement plus 12 months for billing and legal compliance purposes.
You may request deletion of your data at any time — see Section 8.
7. How We Protect Your Information
We take reasonable steps to protect your personal information from loss, unauthorised access, or disclosure. This includes:
- Encrypted data storage via Supabase
- Access restricted to authorised personnel only
- API keys and credentials stored securely and never shared publicly
- HTTPS encrypted connections on all web properties
8. Your Rights
Under the New Zealand Privacy Act 2020, you have the right to:
- Ask whether we hold personal information about you
- Request access to that information
- Request correction of any incorrect information
- Request deletion of your information (subject to legal retention requirements)
- Opt out of receiving review request messages — simply reply STOP to any SMS or email we send
To exercise any of these rights, contact us at hbdigitalpresence@gmail.com. We will respond within 20 working days as required by law.
9. Google Review Compliance
ReviewFlow NZ sends review requests in full compliance with Google's review policies. We do not:
- Offer incentives in exchange for reviews
- Send requests only to customers we believe will leave positive reviews
- Generate, post, or solicit fake reviews
- Gate reviews by screening customers before they reach Google
Every review request is sent to all customers equally, after a genuine transaction or service.
10. Cookies and Website Analytics
Our website (reviewflow.co.nz) may use basic analytics to understand how visitors use the site. We do not use advertising cookies or track individuals across other websites. No personally identifiable information is collected through our website analytics.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "last updated" date at the top of this page. Continued use of ReviewFlow NZ after any changes constitutes acceptance of the updated policy.
12. Complaints
If you believe we have breached the Privacy Act 2020 or mishandled your personal information, please contact us first at hbdigitalpresence@gmail.com so we can address your concern.
If you are not satisfied with our response, you can make a complaint to the Office of the Privacy Commissioner at privacy.org.nz or by calling 0800 803 909.
Privacy Questions?
Get in touch with BK directly — we'll respond promptly.
📍 Hastings, Hawke's Bay, New Zealand