Privacy Policy — FieldTag

Before you use FieldTag, please read this Privacy Policy. If you have any questions or concerns about this Policy or how we handle your information, please contact us at hello@fieldtag.co.nz.

This Privacy Policy (the “Policy”) describes the types of personal information that FieldTag Limited (“FieldTag”, the “Company”, “us”, “we” or “our”) collects, uses, discloses, stores and otherwise handles when you (“you”, “your” or a “User”) use our website at https://fieldtag.co.nz (the “Website”), our manager, super-admin and on-site scan applications, and any other software, products or services we offer (collectively, including the Website, the “Services”).

This Policy supports FieldTag’s compliance with applicable privacy laws, including the New Zealand Privacy Act 2020 and its Information Privacy Principles.

We may change this Policy from time to time by posting revisions on our Website. For existing Users, a revision takes effect 14 days after it is posted; if you do not agree to a revision, you must stop using the Services before it takes effect. For new Users, revisions take effect immediately on posting.

This Policy was last updated on 18 June 2026.

1. Who we are

FieldTag Limited is a company registered in New Zealand (NZBN 9429053752574, Company number 9436478). Our registered office is 51a Dominion Street, Takapuna, Auckland 0622, New Zealand.

FieldTag is a QR-based site-management platform for residential builders. Site managers author project, room and building information (levels, set-out, specifications, plans, photos, checklists and trade items) and generate room QR codes. People working on site — trades, workers and inspectors — scan a room’s QR code to see a read-only, role-filtered view of the information relevant to them, without needing an account.

2. Exclusion of external third-party services

This Policy does not cover external third-party services you reach through external links or optional integrations, except to the extent that we handle personal information received from them.

3. The types of personal information we may collect

We may collect personal information directly from you, automatically from your device, and from third parties. The information we collect depends on how you interact with the Services.

3.1. Information collected from you

Account and profile data — for managers and administrators: name, email address, organisation name, login credentials and multi-factor authentication details, and account preferences.
Project and site content — information you enter about projects, rooms, buildings and trades, including plans, documents, photographs, specifications, checklists and notes. This content may incidentally contain personal information (for example, a name in a document or a person visible in a site photo).
On-site scan and comment data — if you are a site user leaving a comment on a room, the email address you provide to verify yourself and the content of your comment.
Communications — information in support requests, contact or demo-request forms, emails and other correspondence with us.
Feedback — survey responses, bug reports and other information you choose to provide about the Services.

3.2. Information collected automatically

Technical and device data — IP address, approximate location derived from IP, browser and device type, operating system, referring pages, timestamps and similar technical metadata.
Usage data — log data, page views, navigation and account events, session information and interactions with the Services, including a record of QR-code scans (which room was scanned, the role, and when) used to maintain an access and audit trail.
Security and abuse-prevention data — records generated to detect and prevent fraud, misuse, unauthorised access and other harmful or unlawful activity.

3.3. Information received from third parties

Identity and email providers that help us authenticate users and deliver email.
Cloud and infrastructure providers that help us operate, secure and support the Services.
Other users or organisations that invite you to use the Services or identify you as an account administrator or authorised user.

4. How we use personal information

We use personal information only where we have a lawful basis and a legitimate, disclosed purpose, including to:

Provide, operate, maintain and secure the Services.
Create and manage organisations, manager accounts, roles and user access.
Authenticate users, including by multi-factor authentication, and provision new managers when an administrator invites them.
Resolve QR-code scans to the correct room and role and serve the relevant read-only information.
Maintain an access and audit trail of scans and key actions.
Communicate with you about your account, updates, service and security matters, and support requests.
Troubleshoot errors, investigate incidents and improve reliability, security and usability.
Detect, prevent and respond to fraud, abuse and unlawful activity.
Comply with legal obligations and respond to lawful requests.
Establish, exercise or defend legal claims.

We do not sell personal information.

5. How we disclose personal information

Where there is a legitimate purpose, we may disclose personal information to:

Service providers and subprocessors that help us provide the Services, including cloud hosting, identity, email delivery, storage, error monitoring and security providers.
Professional advisers, such as legal, accounting and audit advisers.
Participants in an actual or proposed merger, acquisition, financing or similar transaction, where reasonably necessary.
Law enforcement, regulators, courts and other authorities, where required by law or reasonably necessary to protect rights, property, safety or the integrity of the Services.
Other parties at your direction or with your consent.

We require service providers that process personal information on our behalf to handle it under appropriate confidentiality, security and data-protection obligations.

6. Cookies and analytics

Our Website uses cookies and similar technologies to operate the site, remember your preferences and understand how the site is used. We use analytics to measure and improve the Services.

Where we use Google services for analytics: this site uses cookies from Google to deliver its services and to analyse traffic. Your IP address and user-agent are shared with Google along with performance and security metrics to ensure quality of service, generate usage statistics, and to detect and address abuse.

You can control cookies through your browser settings. Disabling some cookies may affect how the Website works.

7. Storage, security and international processing

FieldTag is based in New Zealand and uses reputable cloud infrastructure to host and deliver the Services. Some of our service providers may store or process information outside New Zealand. Where information is transferred overseas, we take reasonable steps to ensure it is handled consistently with the New Zealand Privacy Act 2020.

We take reasonable technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, misuse and loss. These measures may include encryption in transit, hashing of secrets, access controls, multi-factor authentication, monitoring and administrative safeguards. Documents and photographs are stored in access-controlled cloud storage and served through signed, time-limited links.

8. Retention of personal information

We retain personal information for as long as needed for the purpose it was collected and to meet our legal obligations. For example, account and organisation records are kept while the account is active and afterwards for as long as reasonably necessary for audit, dispute resolution and legal compliance; usage, scan and audit records are kept for as long as reasonably necessary to maintain service integrity, investigate incidents and prevent abuse. When personal information is no longer reasonably required, we will delete, anonymise or de-identify it, unless we are required or permitted by law to retain it.

9. Your rights and choices

Subject to applicable law, you may have rights to:

Request access to the personal information we hold about you.
Request correction of inaccurate or incomplete personal information.
Request deletion of personal information in certain circumstances.
Object to or request restriction of certain processing.
Withdraw consent where processing is based on consent.
Complain to a privacy regulator.

To exercise your rights, contact us at hello@fieldtag.co.nz. We may need to verify your identity before acting on your request.

10. Children

The Services are intended for use by builders and trades professionals and are not intended for children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at hello@fieldtag.co.nz.

11. Complaints

If you have a complaint about how we handle your personal information, please contact us at hello@fieldtag.co.nz. We may ask for further information to clarify your concern. If we agree the complaint is well founded, we will take appropriate steps to resolve it. If you remain dissatisfied, you may refer the matter to the Office of the New Zealand Privacy Commissioner.

12. Contact us

FieldTag Limited

51a Dominion Street, Takapuna, Auckland 0622, New Zealand

hello@fieldtag.co.nz