Your privacy is as important to us as our own.

Our full privacy policy, we respect your privacy as much as respect our own.

Mahony Painting Ltd — Privacy Policy
Last updated: 28 Sept 2026

1. Who we are

Mahony Painting Ltd ("Mahony Painting", "we", "us", "our") is a New Zealand painting company. We respect your privacy and handle your personal information in line with the Privacy Act 2020 and its Information Privacy Principles.

This policy explains what personal information we collect, why we collect it, how we use and protect it, and your rights. It applies when you:

  • fill in one of our lead forms or enquiry forms on Facebook or Instagram (Meta)

  • click one of our ads or visit our website

  • contact us by phone, email, text or social media message

  • request a quote or become a customer

By submitting your details to us, you acknowledge that we will handle them as set out in this policy.

Company details

  • Legal name: Mahony Painting Ltd

  • NZBN: 9429052197833

  • Company number: 9258285

  • Address: 9 Havelock Place, Blagdon, New Plymouth, 4310 , New Zealand

  • Privacy Officer: Cris Omahony 

  • Email: Crisomahony@gmail.com

  • Phone: +64223456020

2. What information we collect

We only collect information we need to respond to your enquiry, quote on and complete painting work, and run our business.

Information you give us through Meta lead forms and enquiries

  • Full name

  • Phone number

  • Email address

  • Property address or suburb/town

  • Details of the job (e.g. interior or exterior, number of rooms, surface type, preferred timeframe)

  • Photos of your property, if you choose to send them

  • Your preferred contact method and time

Information we collect when you become a customer

  • Quote, invoice and payment records (we do not store full card details)

  • Site access notes (e.g. gate codes, pets, parking), which you choose to provide

  • Notes from our conversations with you

  • Before and after photos of the work area

Information collected automatically

  • When you interact with our ads, Meta may share limited information with us, such as which ad you responded to, the date and time of the inquiry, and aggregated (non-identifying) campaign performance data.

  • If you visit our website, we may collect technical data such as IP address, browser type, device type, pages viewed and referring site, through cookies and the Meta Pixel (see section 6).

Information from other sources

We may receive your details from Meta (when you submit a lead form), from someone who refers you to us (e.g. a property manager, landlord or builder), or from publicly available sources. If we collect your information indirectly, we will take reasonable steps to let you know we have it, where required by law.

We do not knowingly collect information from anyone under 16. Please do not submit a lead form if you are under 16.

3. How we use your information

We use your personal information to:

  • contact you about your enquiry and arrange a site visit or quote

  • provide, schedule and complete painting services

  • send quotes, invoices and receipts, and process payments

  • follow up on quotes and completed jobs (e.g. warranty or touch-ups)

  • send you occasional offers or updates, only if you have agreed (you can opt out at any time)

  • measure and improve our advertising, including creating Custom or Lookalike Audiences on Meta (see section 6)

  • keep business records and meet our legal, tax and health and safety obligations

We will not sell or rent your personal information to anyone.

Photos of our work: we may photograph completed work for our portfolio, website or social media. We will not show your address, your face, or anything that identifies you or your property without your permission.

4. Who we share it with

We only share your information where needed to deliver our services or where the law requires it. This may include:

  • Our team and subcontractors who carry out or help manage your job

  • Service providers we use to run the business, such as our CRM or job management software, accounting software (e.g. Xero), email and text messaging tools, and cloud storage

  • Meta Platforms, Inc. in connection with our ads and lead forms

  • Our professional advisers, such as our accountant, lawyer or insurer

  • Government agencies or authorities, such as Inland Revenue or the Police, where required or permitted by law

  • Debt collection agencies, only if an invoice is seriously overdue

We require our service providers to protect your information and use it only for the purpose we gave it to them.

5. Storage, security and retention

Where it's stored: some of our service providers, including Meta, store data outside New Zealand (for example in the United States or Australia). Before sending information overseas, we take reasonable steps to make sure it will be protected in a way comparable to the New Zealand Privacy Act, as required by Information Privacy Principle 12.

How we protect it: we use password-protected accounts, two-factor authentication where available, access limited to staff who need it, and secure, reputable software providers. No system is 100% secure, but we take reasonable steps to protect your information against loss, misuse and unauthorised access.

How long we keep it:

Type of information

How long we keep it

Lead form enquiries that don't go ahead

Up to 12 months, then deleted

Customer records, quotes and job notes

Up to 7 years

Invoices and financial records

7 years (required under NZ tax law)

Marketing list details

Until you unsubscribe

When we no longer need your information, we securely delete or destroy it.

6. Meta advertising, cookies and tracking

We advertise on Facebook and Instagram, which are owned by Meta Platforms, Inc.

  • Lead forms: when you submit a lead form in a Meta ad, the details you enter are shared with us by Meta. Meta also handles that information under its own Privacy Policy.

  • Meta Pixel and Conversions API: our website may use the Meta Pixel and/or Conversions API. These tools help us understand how people respond to our ads and show relevant ads to people who have visited our site. They may use cookies and collect information such as page visits and actions taken on our site.

  • Custom Audiences: we may upload customer contact details (such as email or phone number) to Meta to show ads to existing customers or to people with similar interests. Meta converts these details into a scrambled code ("hashing") before matching and does not keep them for other purposes.

Your choices:

  • Manage the ads you see through your Facebook or Instagram Ad Preferences in your account settings

  • Block or delete cookies in your browser settings

  • Ask us to stop using your details for Custom Audiences by contacting us (section 9)

7. Your rights

Under the Privacy Act 2020, you have the right to:

  • Access the personal information we hold about you

  • Correct information that is wrong, out of date or incomplete

  • Opt out of marketing messages at any time, by using the unsubscribe link, replying STOP to a text, or contacting us

  • Ask us to delete your information, where we don't need to keep it for legal or business reasons

To make a request, contact our Privacy Officer (section 9). We will respond within 20 working days, as required by law. We may need to confirm your identity first. There is no charge for most requests.

8. Privacy breaches and complaints

If a privacy breach happens that is likely to cause serious harm, we will notify you and the Office of the Privacy Commissioner as soon as practicable, as required by the Privacy Act.

If you have a concern about how we've handled your information, please contact us first so we can try to fix it. If you're not satisfied with our response, you can complain to the Office of the Privacy Commissioner:

9. Contact us

For any privacy questions or requests:

Privacy Officer, Mahony Painting Ltd

  • Email: Crisomahony@gmail.com

  • Phone: +64223456020

  • Post: 9 Havelock Place, Blagdon, New Plymouth, 4310 , New Zealand

10. Changes to this policy

We may update this policy from time to time, for example if we change how we advertise or the tools we use. The latest version will always be available at [INSERT WEBSITE URL]/privacy, with the "Last updated" date shown at the top.

This policy is a template for general guidance and is not legal advice. Have a lawyer review it if your situation is complex.