Privacy Policy
This page explains how Nonogram handles information submitted through the website, checkout, onboarding, and delivery process.
Last updated: 9 May 2026
01
Information we collect
We collect the information you submit through forms, checkout, onboarding, and project communication. This may include your name, email, phone number, business details, billing details, project brief, assets, preferences, account/access context, and support messages.
02
How we use information
We use this information to respond to enquiries, process orders, collect payment, prepare project briefs, deliver services, provide support, send transactional emails, maintain records, prevent abuse, and manage delivery and administration.
03
Payments and third-party processors
Payments are processed by Stripe. Nonogram does not store full card details. We may also use service providers such as Convex, Resend, hosting providers, analytics tools, file/storage providers, and other operational tools to run the website, checkout, onboarding, communication, and delivery system. These providers may process information in New Zealand or overseas under their own security and privacy practices.
05
Project assets and confidential material
Assets, briefs, files, logins/access context, and business information supplied for a project are used for delivery and support. We do not sell client project material. Public case studies, testimonials, or portfolio use require permission or must be clearly agreed as public-safe.
06
Security
We take practical steps to protect information, limit unnecessary access, and avoid storing sensitive secrets in project notes or handoff documents. No website, payment processor, hosting service, or communication system can be guaranteed completely secure.
07
Retention
We keep records for as long as needed to deliver services, provide support, meet legal/accounting obligations, maintain project history, resolve disputes, and protect business records. Project assets, communications, and billing records may be retained where operationally or legally necessary.
08
Access, correction, and deletion requests
You can ask us to access, correct, update, or remove personal information where legally and operationally possible. Some records may need to be retained for accounting, security, legal, dispute, or project-history reasons.
09
Contact
For privacy questions or requests, email hello@nonogram.co.nz.