Privacy Policy

Effective Date: 16 March 2026

1. Introduction & Data Controller

WEBSORTED LIMITED ("WebSorted", "we", "us", or "our") operates the WebSorted SaaS platform and related services. We are a registered New Zealand company (NZBN: 9429053502049) and act as the data controller for the personal information we collect from our customers.

We are committed to protecting your privacy and handling your data in accordance with the New Zealand Privacy Act 2020. This policy explains how we collect, use, share, and protect your information when you use our website generation platform.

For any privacy-related questions, requests, or complaints, please contact our Privacy Officer at support@websorted.co.nz.

2. Information We Collect

We collect information directly from you, automatically through your use of our platform, and via our third-party integrations.

  • Information Provided Directly: When you create an account and use our generator, we collect your name, email address, business name, and the descriptive prompts you input to generate your website.
  • User-Uploaded Content: If you upload business logos or images to our platform, we collect and store these files.
  • Information Collected Automatically: We collect standard usage data, including your IP address, browser type, device information, pages visited, and referring URLs.
  • Payment and Financial Information: Payment card transactions are processed by our third-party payment processor, Stripe. We do not collect, store, or process full payment card numbers (PAN), card verification values (CVV/CVC), or magnetic stripe data. Cardholder data is entered directly into the processor's secure checkout environment and never touches our servers. We only receive and retain billing information necessary for order fulfilment, such as your name, email address, billing address, and transaction amount.

3. How We Use Your Information

We use your information strictly for the following lawful purposes:

  • Service Delivery: To generate your website copy (by sending your business description to our AI provider), to provision and route your custom domain, and to securely host your website files and uploaded images.
  • Account Management: To process monthly subscription payments, fulfil orders, and manage your account.
  • Security & Compliance: To prevent fraud, misuse, and unauthorised transactions. We specifically log your IP address and timestamp at the time of account creation to maintain a secure audit trail of your agreement to our Terms of Service. We also use this data to comply with legal, regulatory, tax, and audit obligations, including those of our payment processor, Stripe.
  • Platform Improvement (Aggregated Data): We may anonymise and aggregate your data and inputted prompts to train our systems, improve our proprietary AI prompt engine, and enhance the overall platform. This aggregated data is stripped of personally identifiable information and cannot be used to identify you or your business.
  • Marketing & Analytics: To measure the effectiveness of our advertising campaigns and understand user behaviour on our primary marketing website.

4. Who We Share Your Data With (Third-Party Processors)

To provide our rapid SaaS website generation, we rely on specialised third-party infrastructure providers. We share your data with:

  • AI Service Providers: We transmit your business name and inputted descriptions to third-party Large Language Models (LLMs) via secure enterprise APIs to generate your website text. We strictly utilize API tiers that do not permit the AI provider to retain your data or use your confidential inputs to train their public models.
  • Cloud Infrastructure & Hosting: We use secure, enterprise-grade cloud providers (with primary data centers located in New Zealand) to host your website text and codebase.
  • Domain & Content Delivery Networks: We utilize third-party registrars and storage networks (including secure storage environments located in Australia) to provision your domain, route your DNS, and host your user-uploaded images and logos.
  • Stripe: For secure PCI-DSS compliant payment processing.
  • Meta (Facebook/Instagram): For advertising analytics (see Section 6 below).
  • Business Transfers: In the event that WebSorted Limited is involved in a bankruptcy, merger, acquisition, reorganization, or sale of assets, your personal data may be sold or transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or uses of your personal information, as well as any choices you may have regarding your data.

5. International Data Transfers

While your core website text and code are hosted in New Zealand, the operational nature of our third-party processors means your data may be transferred, processed, or stored in countries outside your residence. Specifically, user-uploaded images may be stored in Australian data centers, and data processed by our payment processors, AI providers, and analytics partners may be routed globally. We ensure we only use reputable third-party providers that maintain appropriate technical and organizational measures and comparable privacy safeguards as required by the New Zealand Privacy Act 2020.

6. Cookies and Tracking Technologies

Our primary marketing website utilises cookies and similar tracking technologies for essential operation, analytics, and marketing.

  • Meta Pixel: We utilize the Meta Pixel to track visitor activity on our marketing site. This means third parties, including Meta, may use cookies, web beacons, and other storage technologies to collect or receive information from our website and elsewhere on the internet and use that information to provide measurement services and target ads.
  • Opting Out: You can control cookies through your browser settings. Furthermore, you can opt out of the collection and use of information for ad targeting by visiting YourAdChoices or the settings within your Meta (Facebook/Instagram) account.

7. Email Marketing and Communications

We may send you transactional, account-related, or promotional emails in accordance with the New Zealand Unsolicited Electronic Messages Act 2007. You may opt out of promotional communications at any time by using the "unsubscribe" link provided in our emails.

8. Data Retention and Security

  • Website Data (Dormant Accounts): If your subscription is cancelled or suspended, we keep your core account profile active to allow for easy reactivation. We generally retain your heavy website configuration, text, and uploaded images for an extended dormant period (typically up to 24 to 36 months). To comply with our data minimization obligations under the New Zealand Privacy Act 2020, if your account remains inactive beyond this period, your website data will be routinely purged from our active systems. Residual copies may remain in secure backups for a limited time before being fully overwritten.
  • Financial Records: Transaction and billing records are retained for a minimum period required by tax law, financial regulations, and card network rules (typically seven (7) years or longer where mandated).
  • Security & Data Breaches: We implement reasonable technical and organisational measures to protect your data against unauthorised access, loss, or misuse. However, no method of transmission is completely secure. In accordance with the New Zealand Privacy Act 2020, if a data breach occurs that we believe poses a risk of serious harm to you, we will promptly notify you and the New Zealand Privacy Commissioner as required by law.

9. Your Rights (Access and Correction)

Under the New Zealand Privacy Act 2020, you have the right to ask for a copy of any personal information we hold about you, and to ask for it to be corrected if you think it is wrong. If you would like to request a copy of your information or have it corrected, please contact our Privacy Officer at support@websorted.co.nz. We will respond to all valid access and correction requests within 20 working days.

10. Third-Party Links

Websites generated by our platform may contain links to external, third-party websites. We are not responsible for the privacy practices, content, or security of these external sites. We encourage you to review the privacy policies of any third-party sites you or your users visit.

11. Children's Privacy

WebSorted is designed strictly for business use and is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a minor, we will take immediate steps to delete it from our servers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last Updated” date at the top reflects the latest version. If we make material changes, we will notify active subscribers via email. Continued use of the site after changes constitutes acceptance of the updated policy.