Privacy policy

Who we are

Natty is a mobile beauty and wellness service in beta, based in Auckland, New Zealand. This policy explains how we handle personal information collected through this website, and it follows the New Zealand Privacy Act 2020. In this policy, "we" and "us" mean Natty.

What we collect

When you register your interest as a professional, you give us your name, your service, your suburb, your phone number or Instagram handle, your email address, and anything else you choose to put in the notes box.

When you set up your profile as a Natty professional, you give us your name and email address, and what you'd like on your public page: the name to show, your suburb, your services and prices, where you travel, the days you usually work, your photos and logo, and anything else you add. Photos are made smaller in your browser before they're sent. What you type is saved on your device until you send the form, so you can come back to it. If you've used one of our guide tools in the same browser, the form fills in your prices, your cancellation policy and your logo from it. You can clear any of them, and they only reach us if they're still there when you press Send.

When you request a booking on a professional's page, you give us your name, your email address, your phone number if you add it, your suburb, the service you'd like and when would suit you. We pass these to that professional so the booking can be arranged.

When you leave a review for a professional, you give us the name you'd like shown, your email address, what they did for you, your rating and your review. We show the review on that professional's page under the name you gave. Your email address isn't shown, and we may use it once to check the review is yours. To help us spot fake reviews, we also note how long the form took to fill in, and look at it alongside the details our form service records with every submission.

When you join the client waitlist, you give us your email address and your suburb.

When we contact a professional first, we use details they have published themselves, such as an Instagram or Facebook account, a website or a business listing. We keep their name or business name, their service, their area, the contact details they published, a short note about their work, and a record of the messages we sent and any reply, so that we don't contact anyone twice.

Along with every form submission, our form service automatically records your IP address, your browser and device type, and the page you came from.

When you just visit the site, we collect basic, anonymous statistics such as which pages are viewed, the site or search that sent you, your browser and device type, and your approximate country. This is done with Cloudflare Web Analytics, which Cloudflare describes as cookieless and says does not track individuals across sites.

We don't set advertising or tracking cookies, and we don't ask for anything you haven't typed into a form.

When you use a tool in our guides, such as the cancellation policy builder, what you type and any logo you add stay in your own browser. Your answers are saved on your device so you can come back to them later, and aren't sent to us or anyone else. The one exception is the profile form for Natty professionals, described above, which fills itself in from them and sends them only when you press Send. You can delete them with the tool's “Clear saved answers” link, or by clearing your browser's data for this site.

Why we collect it

To get back to professionals who register their interest, and to arrange a chat about joining Natty.
To arrange a booking someone has asked for, with the professional they asked for.
To show reviews from a professional's clients on their Natty page.
To build a professional's public Natty page. We show it to them first, and it goes live only once they've agreed to it.
To contact professionals who might want to join Natty, and to keep track of who we've contacted and what they said.
To tell people on the client waitlist when Natty opens bookings in their area.
To understand how the website is used, so we can improve it.
To keep the website secure and block spam.

We only use your details for these purposes. We don't sell your information, and we don't use it for third-party advertising.

Who else handles your information

We use a few services to run the website. They handle your information only to provide their service to us:

Netlify hosts the website, stores form submissions, and emails us a notification when someone submits a form.
Cloudflare provides our website statistics. If you download a PDF from one of our guide tools, your browser also fetches the free PDF tool we use from Cloudflare's cdnjs service, which means Cloudflare receives your IP address. The content of your PDF isn't sent.
Google Fonts supplies the typefaces used on the site. When a page loads, your browser contacts Google's servers to fetch them, which means Google receives your IP address.

People who help us reach out. Team members who help us contact professionals may send messages from their own social media or email accounts. They use professionals' details only for that purpose, and the messages and replies will sit in those accounts as well as in our own records.

We may also share information if the law requires it.

Information held overseas

Netlify, Cloudflare and Google operate internationally, including in the United States, so your information may be stored or processed outside New Zealand. Those countries may not give your information the same protection as New Zealand law does. By submitting a form, you accept this.

How long we keep it

We keep your details for as long as we need them for the purposes above, or until you ask us to delete them. We'll delete details we no longer need. Website statistics are anonymous and aren't linked to you personally.

Keeping it safe

We take reasonable steps to protect your information, including limiting who can see form submissions and keeping our records of professionals we contact in a private, password-protected tracker. No website or service can guarantee complete security, so please don't put sensitive details, such as ID numbers or health information, in the notes box. If you become a Natty professional, we'll ask for anything more we need, such as ID or a police check, separately, and we'll tell you what we're collecting and why at that time.

Your rights

You can ask us:

what personal information we hold about you, and for a copy of it
to correct anything that's wrong
to delete your details or take you off the waitlist
to stop contacting you, if we've reached out to you first. Every message we send says how to opt out.

We'll respond within 20 working days. If you're not happy with how we've handled your information, you can raise it with us first, and you can also complain to the Office of the Privacy Commissioner.

Children

Natty is not aimed at children, and this website isn't intended for anyone under 16. If you think a child has given us their details, tell us and we'll delete them.

Changes to this policy

If we change how we handle personal information, we'll update this page and the date at the top.

Contact us

For any privacy question or request, email privacy@booknatty.com. Please say what you'd like us to do, and use the email address you gave us so we can find your details.