Privacy Policy

DRAFT — pending review by Prime AutoBase Ltd and/or their legal adviser before the site goes live. This document is not legal advice. It has been prepared as a starting-point based on the NZ Privacy Act 2020 framework and the Office of the Privacy Commissioner’s guidance. The client or their lawyer should confirm all details — including data-retention periods, third-party processors, and whether any analytics or marketing tools are in use — before publishing.

Prime AutoBase Ltd
19 Chelsea Avenue, Otahuhu, Auckland 1062
Email: support@primeautobase.co.nz
Phone: 027 358 1750
Website: https://primeautobase.co.nz

Last updated: 27 May 2026

1. Who We Are and Why This Policy Exists

Prime AutoBase Ltd (“we”, “us”, “our”) is a European-vehicle mechanical workshop based in Auckland, New Zealand. This Privacy Policy explains how we collect, use, store, and protect personal information in accordance with the Privacy Act 2020 (NZ) and its 13 Information Privacy Principles (IPPs).

We are committed to handling personal information responsibly, transparently, and with respect for your rights. If you have any questions about this policy or how we handle your information, please contact us using the details above.

2. What Personal Information We Collect

We collect only the personal information that is reasonably necessary to provide our mechanical services and respond to your enquiries. Depending on how you contact us or use our services, this may include:

  • Contact form (WPForms): your name, email address, phone number, and the content of your message.
  • Booking system (Amelia): your name, contact details (email, phone), vehicle information (such as make, model, or registration), the type of service requested, and your preferred booking date and time.
  • Google Reviews display: We display public reviews from Google via the Google Places API. We do not collect any personal information from you as part of this feature; we only retrieve publicly available review data from Google’s platform.

We do not collect sensitive categories of personal information (such as health information, financial account details, or government-issued identifiers) through this website.

3. How We Collect Personal Information (IPP 2 & 3)

We collect personal information directly from you when you:

  • complete and submit the contact form on our website;
  • make or manage a booking through our online booking system; or
  • contact us by phone or email.

At the point of collection, we will make it clear what information is being collected and why. We will not collect personal information by unlawful, unfair, or unnecessarily intrusive means (IPP 4).

4. Why We Collect Personal Information — Purpose of Collection (IPP 1)

We collect personal information for the following lawful purposes directly related to our business:

  • To respond to your enquiries and provide customer support.
  • To schedule, confirm, and manage vehicle service bookings.
  • To communicate with you about your appointment, vehicle, or service (including sending reminders or follow-up messages).
  • To manage our business operations.

We will not use your personal information for any purpose that is incompatible with the reason it was collected without first obtaining your consent or as otherwise permitted by the Privacy Act 2020 (IPP 10).

5. How We Use and Disclose Your Personal Information (IPP 10 & 11)

We use your personal information only for the purposes described in Section 4 above. We do not sell, rent, or trade your personal information to third parties.

We may share your personal information with third parties only in the following limited circumstances:

  • Service providers acting on our behalf: We use third-party tools to deliver our website and services (see Section 6). These providers process your data only to the extent needed to provide the service.
  • Legal obligations: We may disclose information where required to do so by law, court order, or to assist with a lawful investigation by a government authority.
  • With your consent: For any other purpose, only if you have given us explicit consent.

6. Third-Party Service Providers

Our website uses the following third-party platforms that may process your personal information:

  • Web Hosting: Our website is hosted by a third-party hosting provider. Your data may be stored on servers operated by or on behalf of that provider. [Client to confirm hosting provider name and data-centre location.]
  • Contact Form — WPForms: Contact form submissions are processed and stored within WordPress. Form data is transmitted to us by email using Site Mailer.
  • Booking System — Amelia: Booking data is stored in our WordPress/database environment. Amelia Privacy Policy.
  • Email — Site Mailer: Used to deliver form notifications and booking confirmations to us. [Client to confirm the specific SMTP/email provider in use and link their privacy policy.]
  • Google Places API: Used solely to retrieve and display publicly available Google Reviews on our homepage. No personal information about website visitors is transmitted to Google for this feature. Google Privacy Policy.
  • Cookie Consent: A consent-management tool stores your cookie preferences on our site so we can remember your choices. It does not collect information that identifies you personally.
  • Cache — LiteSpeed Cache: A performance caching plugin. No personal information is stored in the cache.

When engaging third-party providers, we take reasonable steps to ensure they handle personal information in a manner consistent with the Privacy Act 2020 (IPP 5).

7. Overseas Disclosure (IPP 12)

Some of our third-party service providers (including Google) are based outside New Zealand and may process or store data on servers located overseas. Where this occurs, we take reasonable steps to ensure those providers maintain privacy protections comparable to the standards required under the New Zealand Privacy Act 2020.

Note for overseas visitors: This website is primarily directed at customers in New Zealand. If you are located in the European Union or European Economic Area, you may have additional rights under the General Data Protection Regulation (GDPR), including rights to data portability and erasure. While the NZ Privacy Act 2020 is the governing framework for this policy, we are happy to respond to reasonable requests from overseas visitors in a manner consistent with those rights. Please contact us using the details in Section 11.

8. Storage and Security (IPP 5)

We take reasonable steps to protect personal information from loss, unauthorised access, use, modification, disclosure, or other misuse. These steps include:

  • Secure access controls for our website and booking system.
  • Using reputable, professionally maintained platforms and plugins.
  • Limiting access to personal information to staff and contractors who need it to carry out their role.

No method of electronic transmission or storage is completely secure. While we strive to protect your personal information using reasonable safeguards, we cannot guarantee absolute security.

9. Retention of Personal Information (IPP 9)

We retain personal information only for as long as it is needed for the purpose for which it was collected, or as required by applicable law (for example, for tax, warranty, or legal-record obligations).

  • Contact form enquiries: retained for 12 months after the enquiry is resolved, unless ongoing business dealings require longer retention.
  • Booking records: retained for 10 years.

When personal information is no longer required, we will take reasonable steps to destroy or permanently de-identify it.

10. Accuracy of Information (IPP 8)

We take reasonable steps to ensure that personal information we hold is accurate, up-to-date, complete, and relevant before using or disclosing it. If you believe we hold inaccurate information about you, please let us know (see Section 11).

11. Your Rights — Access and Correction (IPP 6 & 7)

Under the Privacy Act 2020, you have the right to:

  • Access your personal information (IPP 6): You may request a copy of the personal information we hold about you.
  • Correct your personal information (IPP 7): If you believe any information we hold about you is inaccurate, incomplete, or misleading, you may ask us to correct it. If we decline to make the correction, we will note that a correction was requested.

To make an access or correction request, please contact us at:

We will respond to your request as soon as practicable and within the timeframes required by the Privacy Act 2020.

12. How to Make a Privacy Complaint

If you believe we have breached your privacy rights, we encourage you to contact us directly first so we have the opportunity to resolve the matter promptly (see contact details in Section 11).

If you are not satisfied with our response, you may also lodge a complaint with the Office of the Privacy Commissioner (OPC):

If the Privacy Commissioner declines to investigate, you may also have the right to apply to the Human Rights Review Tribunal.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, technology, or legal obligations. When we make material changes, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically.

14. Contact Us

For any questions, requests, or concerns about this Privacy Policy or our handling of your personal information, please contact us: