Privacy Policy

Last updated: 14 August 2026

1.) General Information

Who is responsible
Veceto Limited, trading as VECETO, 32 Pah Street, Tauranga 3110, New Zealand. Contact: hello@veceto.com. Veceto Limited decides how and why personal information collected through this website is processed.

Which law applies
Processing is carried out under the New Zealand Privacy Act 2020. Where visitors are located in the European Economic Area, the United Kingdom or Switzerland, the General Data Protection Regulation applies in addition, and the sections on legal bases, retention and rights below reflect it.

How your data is collected
Personal data is any data that can be used to identify you personally. Some of it is collected because you provide it, for example when you subscribe to the newsletter or send an email. Other data is collected automatically by our systems when you visit the website, primarily technical data such as browser, operating system and time of access.

What your data is used for
Part of the data is collected to ensure the error-free provision of the website. Other data may be used to understand how the website is used, and this happens only where you have consented.

Data protection
Personal data is treated confidentially and in accordance with statutory data protection regulations and this policy. Please note that data transmission over the internet, for example when communicating by email, may be subject to security gaps. Complete protection from access by third parties is not possible.

SSL or TLS encryption
This site uses SSL or TLS encryption to protect the transmission of confidential content. An encrypted connection is recognisable by "https://" in the address bar and by the lock symbol in your browser.

Server log files
When you visit the website, certain data is automatically stored in server log files by the hosting provider. This may include browser type and version, operating system, referrer URL, hostname of the accessing computer, time of the server request and IP address. Data of this kind is used for technical monitoring and security, is not combined with other personal data, and is stored only for a limited period.

Cookies
Cookies are small text files stored on your device by your browser. Some are essential for the basic functionality of the website and are set automatically, since the site cannot operate without them. Other cookies, for example those used for analytics, are non-essential and are set only after you give explicit consent through the cookie banner. Consent can be withdrawn at any time. Your browser can also be configured to notify you before cookies are set, to accept them case by case, or to reject them entirely. Disabling cookies may limit parts of the website.

2.) Legal Bases

Email correspondence is processed in order to answer an enquiry and to take steps before entering into a contract, under Article 6(1)(b) GDPR.

Newsletter subscription is processed on the basis of consent, under Article 6(1)(a) GDPR, given through the confirmation email sent after sign-up.

Server log files and website security are processed on the basis of legitimate interests, under Article 6(1)(f) GDPR.

Analytics and all non-essential cookies are set on the basis of consent, under Article 6(1)(a) GDPR, and consent can be withdrawn at any time with effect for the future.

Booking data, where a booking service is used, is processed in order to perform a contract or to take steps prior to it, under Article 6(1)(b) GDPR.

3.) Retention

Enquiries and related correspondence are kept for 24 months after the matter is concluded, unless a longer statutory period applies.

Newsletter data is kept until you unsubscribe and is deleted afterwards.

Server log files are kept for a short technical period only and are not combined with other data.

Booking data is kept for as long as the booking relationship requires, and statutory retention periods remain unaffected.

4.) Your Rights

You have the right to request access to the personal information held about you, and to have it corrected.

Where the GDPR applies, you also have the right to erasure, to restriction of processing, to data portability, and to object to processing based on legitimate interests.

Consent, once given, can be withdrawn at any time with effect for the future. Lawfulness of processing carried out before withdrawal remains unaffected. An informal email is sufficient.

Requests reach us at hello@veceto.com.

Complaints can be lodged with the Office of the Privacy Commissioner in New Zealand, or with a supervisory authority in your country of residence, place of work, or place of the alleged infringement.

5.) International Transfers

Website hosting, newsletter distribution, analytics and scheduling are provided by companies based in the United States, and personal information is therefore transferred outside New Zealand and outside the European Economic Area.

Transfers are covered by the standard contractual clauses of the respective providers, and by data processing agreements entered into with each of them. Comparable safeguards are ensured with regard to overseas disclosure under the Privacy Act 2020.

6.) Newsletter

Newsletter data
To receive the newsletter, an email address is required, together with information allowing verification that you are the owner of the address provided and that you agree to receive it. Further data is not collected, or is provided voluntarily. Data of this kind is used exclusively to send the requested information and is not shared with third parties. Consent to storage of your email address and its use for the newsletter can be revoked at any time, for example through the unsubscribe link contained in every newsletter.

Mailchimp
Newsletters are sent using Mailchimp, provided by The Rocket Science Group LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA. Data entered for the purpose of subscribing is stored on Mailchimp servers in the United States. Mailchimp allows campaigns to be analysed, for example whether a message was opened and which links were clicked, and uses cookies and similar technologies for that purpose. A data processing agreement is in place with Mailchimp. Further information: https://mailchimp.com/legal/privacy/. If you do not wish your data to be analysed by Mailchimp, please unsubscribe from the newsletter.

7.) Social Media

Links to profiles on Instagram, Facebook, LinkedIn and Pinterest are placed on this website. Following such a link establishes a connection to the respective platform, and processing from that point onwards is governed by the privacy policy of the platform concerned.

Facebook
Provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, for users in the EEA, and by Meta Platforms, Inc., 1 Meta Way, Menlo Park, CA 94025, USA, elsewhere. Further information: https://www.facebook.com/privacy/policy/

Instagram
Provided by Meta, at the addresses given above. Further information: https://privacycenter.instagram.com/policy

LinkedIn
Provided by LinkedIn Corporation, 1000 W Maude Avenue, Sunnyvale, CA 94085, USA. For users in the EEA, the United Kingdom and Switzerland, the controller is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. LinkedIn is part of Microsoft Corporation. Further information: https://www.linkedin.com/legal/privacy-policy. Settings can be managed at https://www.linkedin.com/psettings/

Pinterest
Provided by Pinterest Inc., 651 Brannan Street, San Francisco, CA 94107, USA, and for users in the EEA by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland. Further information: https://policy.pinterest.com/en/privacy-policy

Threads
Threads, provided by Meta, may be used to share updates. Interaction with content there is processed by Meta under its own policy. Aggregated or anonymised insights may be received about how content is engaged with. Personal identifiers are not received unless you provide them directly through messages or comments.

8.) Analytics and Tools

Squarespace
This website is hosted by Squarespace Inc., 225 Varick Street, 12th Floor, New York, NY 10014, USA, which also provides built-in analytics. Parameters stored through log files and cookies include frequency of visits, device type, source of visit, browser, operating system, pages visited, approximate geographic location, search terms entered on the site, and IP address. Further information: https://www.squarespace.com/privacy

Google Analytics
This website uses Google Analytics, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Cookies are used to analyse how the website is used, and the information generated is usually transferred to a Google server in the United States and stored there. Analytics is loaded only after consent has been given through the cookie banner, and consent can be withdrawn at any time. Collection can additionally be prevented by installing the browser add-on available at https://tools.google.com/dlpage/gaoptout. Further information: https://policies.google.com/privacy

Google reCAPTCHA|
Where forms are protected against automated misuse, Google reCAPTCHA may be used, provided by Google at the addresses given above. reCAPTCHA analyses characteristics such as IP address, time spent on the site and mouse movements, and forwards the data collected to Google. Legitimate interest lies in protecting the website from spam and automated abuse, under Article 6(1)(f) GDPR. Further information: https://policies.google.com/privacy

SimplyBook.me
Where appointment booking is offered, SimplyBook.me is used as a third-party scheduling platform, and personal information submitted through it is collected, used and stored by that provider, potentially outside New Zealand. Further information: https://simplybook.me/en/privacy-policy

9.) Children

Services offered here are not directed at children, and personal information is not knowingly collected from anyone under 16. Anyone becoming aware that such information has been provided is asked to contact hello@veceto.com so that it can be deleted.

10.) Changes

Although most changes are likely to be minor, this policy may be amended from time to time. Visitors are encouraged to check this page periodically. Continued use of the site after any change constitutes acceptance of that change. Changes are posted on this page with an updated revision date.