Privacy Policy

SAE Ltd — Version 1.0 — April 2026

SAE Ltd ("we", "us") respects your privacy and is committed to protecting your personal information in accordance with the Privacy Act 2020 (NZ). This policy explains what information we collect when you use our website and tools, how we use it, and your rights.

1. What We Collect

Website and map usage data (Google Analytics): When you visit subeng.nz or use the NZ Overland Flow Path Map, we collect anonymised usage data through Google Analytics 4 (GA4), including:

Pages visited and time spent
Browser type, device type, and operating system
Approximate geographic location (country/region level only)
How you arrived at the site (referrer)

This data is collected in aggregated, anonymised form. IP addresses are anonymised before storage. We do not collect your name, email address, or any personally identifiable information through the Map.

Tile delivery logs: Map tile data is served from Cloudflare R2. Cloudflare may record standard server access logs including IP addresses, request timestamps, and file paths. These logs are used for security monitoring and service operation. SAE Ltd does not independently store or process these logs.

Contact and enquiry information: If you submit a contact form, email, or phone enquiry, we collect the personal information you provide (name, contact details, project description) to respond to your enquiry and provide services. This information is stored securely and is not shared with third parties except where necessary to provide the service.

2. How We Use Your Information

To operate and improve the website and Map
To understand how users find and use our services
To respond to enquiries and provide engineering services
To comply with legal obligations

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Third-Party Services

Google Analytics: We use Google Analytics 4 to analyse website usage. Google may process data in the United States. You can opt out using the Google Analytics opt-out browser add-on or by enabling "Do Not Track" in your browser.

Cloudflare: Our tile data is delivered via Cloudflare's content delivery network. Cloudflare's privacy policy applies to their processing of request data.

OpenStreetMap / Nominatim: The address search feature uses the OpenStreetMap Nominatim service. Search queries (addresses you enter) are sent to Nominatim. No personal data is retained by SAE Ltd from this process.

4. Cookies and Local Storage

The Map uses browser local storage (not cookies) to remember that you have accepted the disclaimer. This stores a single flag ("accepted") and no personal data. It persists until you clear your browser storage.

Google Analytics uses cookies. You can control cookies through your browser settings.

5. Your Rights (Privacy Act 2020)

Under the Privacy Act 2020, you have the right to:

Request access to personal information we hold about you
Request correction of inaccurate personal information
Request deletion of personal information where we have no lawful basis to retain it
Make a complaint to the Office of the Privacy Commissioner (privacy.org.nz)

To exercise these rights, contact us at info@subeng.nz.

6. Data Retention

Contact enquiry information is retained for seven years to comply with professional obligations and tax requirements. Analytics data is retained per Google's standard retention period (up to 14 months for user-level data). We do not independently store server access logs beyond what Cloudflare retains by default.

7. Changes to This Policy

We may update this policy. Material changes will be indicated by updating the version date above. Continued use of our services after changes constitutes acceptance.

8. Contact

SAE Ltd
Napier, Hawke's Bay, New Zealand
Email: info@subeng.nz