Effective date: 30 October 2026
This statement explains how Leaf Salon handles personal information when you visit leafsalon.co.nz, contact the editors, or follow links to another website. It applies to this static editorial website and is written with the New Zealand Privacy Act 2020 in mind.
Who operates this site
This site is operated by the owner of leafsalon.co.nz and published under the name Leaf Salon. The privacy contact is the Leaf Salon Privacy Officer, reachable at fieldnotes@leafsalon.co.nz. The operator is responsible for privacy decisions on this site and for taking reasonable steps to give any notice required when personal information is collected indirectly, including through a service provider acting on the operator's behalf, subject to the exceptions in Information Privacy Principle 3A.
What information is collected
You can read the pages without creating an account. The site code does not include an account system, analytics service, advertising pixel, or newsletter database.
- Messages you choose to send: The contact form opens your own email application with a draft. The form does not transmit or save its fields on this website. If you send that email, the editors receive the email address, name and message you provide, along with ordinary email delivery details and any attachments you add.
- Website access logs: The hosting provider may record technical request data such as an IP address, date and time, requested page, browser details, referring page and response status to operate, secure and troubleshoot the site. IP addresses can be personal information.
Why it is used and who may receive it
Messages are used to reply, consider corrections or story suggestions, and keep a record where needed to handle the correspondence or meet a legal obligation. Providing contact details is voluntary; without them, the editors may not be able to reply. Messages are available to the site operator and the email providers that send, deliver or store them.
The hosting provider and its technical support may handle access logs to deliver and protect the website. Providers may store or process information outside New Zealand. The applicable provider, storage location and log-retention period depend on the hosting and email services selected by the domain owner. Information may also be disclosed where New Zealand law requires it or where needed to respond to a serious security incident.
Retention and security
Correspondence is kept only for as long as reasonably needed to respond, maintain an appropriate record, or meet a legal requirement. Hosting logs are retained according to the hosting provider's settings and policies. The website itself does not store contact-form submissions.
Reasonable care should be taken to protect information handled by the site operator and service providers. No internet transmission or storage method can be guaranteed completely secure. If a privacy breach is likely to cause serious harm, the operator will follow the notification requirements that apply under New Zealand law.
Cookies, analytics and external sites
This version of the website does not deliberately set tracking or advertising cookies and does not use a web-analytics service. The contact form hands a draft to your email application; the email provider's own privacy settings then apply. External links open sites managed by other organisations, which set their own privacy and cookie practices.
Your privacy rights
You may ask for access to personal information held about you and request correction if it is inaccurate. Contact fieldnotes@leafsalon.co.nz with enough detail for the editors to identify the correspondence. Requests are handled under the Privacy Act 2020, including any applicable exceptions and response periods. You can also read the Office of the Privacy Commissioner's guidance on privacy rights or contact the Office directly.
Changes to this statement
This notice may be updated when the site's features, service providers or legal requirements change. The date at the top shows when it was last reviewed. If the site begins collecting information through a new form, newsletter, analytics tool or other service, this statement should be updated before that collection begins.