Privacy Policy

StorageFinder (storagefinder.co), operated by TruckPark Pty Ltd (ABN 55 695 402 423), Brisbane, Queensland, Australia ("we", "us", "our") operates an online marketplace that connects storage space hosts with vehicle and equipment owners seeking secure parking and storage in New Zealand and internationally.

We are committed to protecting your personal information in accordance with the Privacy Act 2020. We have implemented practices, procedures, and systems to ensure we manage your personal information in accordance with applicable law and this Privacy Policy.

This Privacy Policy explains how we collect, hold, use, and disclose your personal information when you use our website and services at storagefinder.co and associated domains.

By using StorageFinder, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described in this policy.

We acknowledge that some individuals may prefer to limit the personal information they share with us. However, we are required to identify you in order to provide our services, process payments, verify your identity, and maintain the integrity of our marketplace. It is therefore not practicable for you to use our services anonymously or under a pseudonym. The Privacy Act 2020 does not include an information privacy principle specifically for anonymity or pseudonymity; this section is provided as a general transparency statement.

In accordance with Information Privacy Principle 1 of the Privacy Act 2020, we only collect personal information that is necessary for the lawful functions and activities of our marketplace. We collect your information for the following purposes:

• To create and manage your account
• To facilitate bookings between hosts and storers
• To process payments and payouts securely
• To verify user identity and prevent fraud
• To enable communication between users
• To provide customer support and resolve disputes
• To improve our services, including search relevance and user experience
• To send transactional notifications (booking confirmations, payment receipts, messages)
• To send marketing communications (only with your consent, and you can opt out at any time)
• To comply with legal obligations

In accordance with Information Privacy Principles 10 and 11 of the Privacy Act 2020, we will only use personal information for the purpose for which it was collected, or for a directly related purpose. We will only disclose your information where consistent with the purpose of collection.

We may disclose your personal information to:

• Other users: hosts see storer names, vehicle details, and booking dates; storers see host names and listing details
• Payment processors: Stripe, for processing payments, payouts, and identity verification
• Service providers: hosting providers, email services, analytics tools, and AI services that assist with platform functionality
• Law enforcement or regulators: where required by applicable law, by court order, or to protect the safety of our users

We will never sell your personal information to third parties for marketing purposes.

Some of your personal information may be disclosed to overseas recipients or processed outside New Zealand:

• Stripe: payment data and identity verification documents may be processed in the United States and other countries where Stripe operates
• Supabase: our database and authentication infrastructure is hosted on AWS. Our primary database region is ap-southeast-2 (Sydney, Australia). Some infrastructure services may involve data processing in other AWS regions. Australia has not been formally prescribed under section 214 of the Privacy Act 2020. We have assessed on reasonable grounds that our infrastructure provider operates under the Australian Privacy Act 1988, which we consider to provide safeguards comparable to the New Zealand Privacy Act 2020, as permitted under IPP 12(1)(c).
• Google Gemini AI: listing description text (not personal information such as addresses, names, or contact details) may be processed by Google's AI services for generating and improving listing descriptions. Google processes this data in accordance with their Cloud Data Processing Addendum. Users can opt out by writing their listing descriptions manually.

We take reasonable steps to ensure that overseas recipients handle your personal information in a manner consistent with the Privacy Act 2020. Where possible, we use service providers that comply with equivalent privacy standards or are subject to binding privacy commitments.

We take reasonable steps to ensure that the personal information we collect, use, and disclose is accurate, up to date, complete, and relevant.

You can update your personal information at any time through your account settings. We encourage you to keep your details current to ensure smooth communication and accurate bookings.

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. Our security measures include:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication with password hashing and optional multi-factor authentication
• Role-based access controls limiting internal access to personal information
• Regular security reviews and monitoring of our systems
• Payment card data handled exclusively by PCI-DSS compliant payment processor (Stripe)

We retain personal information for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our standard retention periods are:

• Account data: retained for the life of the account plus 7 years (New Zealand tax record-keeping obligations under the Tax Administration Act 1994)
• Booking and payment records: as required by applicable tax law
• Messages: 3 years after booking completion
• Analytics data: 26 months

When personal information is no longer needed for any purpose for which it may be used or disclosed, and we are not required by law to retain it, we will take reasonable steps to destroy or de-identify it.

Under the Privacy Act 2020, we are required to notify the Privacy Commissioner and affected individuals of privacy breaches that have caused, or are likely to cause, serious harm. As a matter of internal process, we target notification within 72 hours of becoming aware of a notifiable breach. We maintain an internal data breach response plan and will take all reasonable steps to contain and remediate any breach as quickly as possible.

Under the Privacy Act 2020, you have the following rights in relation to your personal information:

• Access: request a copy of the personal information we hold about you (Information Privacy Principle 6). We will respond within 20 working days of receiving your request.
• Correction: request correction of personal information that is inaccurate, out of date, incomplete, irrelevant, or misleading (Information Privacy Principle 7).
• Deletion: request deletion of your account and associated personal information, subject to any legal retention requirements (see section 10).

You can manage much of your information directly through your account settings. For formal requests, please contact us at hello@storagefinder.co.

We may refuse access or correction in limited circumstances permitted by the Privacy Act 2020. If we decline, we will provide you with written reasons and information about how to complain.

If you believe we have mishandled your personal information, please contact our Privacy Officer at hello@storagefinder.co.

If you believe we have interfered with your privacy or breached the Information Privacy Principles, you may contact us first. We aim to resolve complaints within 30 days. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner:

Office of the Privacy Commissioner (OPC)
Website: www.privacy.org.nz

We use cookies and similar tracking technologies to improve your experience on our platform. These include:

• Essential cookies: required for core functionality such as authentication, session management, and security
• Analytics cookies: help us understand how users interact with our platform so we can improve our services
• Preference cookies: remember your settings and preferences (such as search filters and location)

You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent some features from functioning correctly.

Our marketing communications comply with the Unsolicited Electronic Messages Act 2007. We will only send commercial electronic messages with your consent. Every marketing email includes a functional unsubscribe link, and we will process unsubscribe requests promptly.

You can manage your email preferences at any time through your account settings at Settings > Notifications.

Our platform integrates with the following third-party services, each with their own privacy policies:

• Stripe: payment processing, payout management, and identity verification. Stripe's privacy policy is available at stripe.com/nz/privacy
• Google Maps Platform: map display, geocoding, and address autocomplete for displaying listing locations. Google's privacy policy is available at policies.google.com/privacy
• Google Gemini AI: used to assist with generating listing descriptions. Only listing text is submitted - personal information is not sent. Content submitted for AI processing is subject to Google's Privacy Policy
• Supabase: database hosting, authentication, and file storage. Supabase's privacy policy is available at supabase.com/privacy

We encourage you to review the privacy policies of these third-party services to understand how they handle your data.

We may update this Privacy Policy from time to time to reflect changes to our practices, legal requirements, or platform features. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Notify registered users via email for significant changes
• Display a prominent notice on our platform when appropriate

Your continued use of StorageFinder after changes are published constitutes your acceptance of the updated Privacy Policy.

If you have any questions about this Privacy Policy or how we handle your personal information, please contact our Privacy Officer:

Privacy Officer
StorageFinder (storagefinder.co), operated by TruckPark Pty Ltd (ABN 55 695 402 423), Brisbane, Queensland, Australia
Email: hello@storagefinder.co