CAMINO

Your privacy policy was written for a website you don't run anymore.

Most NZ businesses are carrying a template policy from years ago — while their actual operation collects data the policy never mentions. The Privacy Act 2020 doesn't grade on effort. Find your gaps before someone else does.

Free instant check

No signup. Takes about ten seconds. Sample scoring — the full audit goes deeper.

Reading your privacy policy…
out of 10

Gaps found.

🔒 This is the surface check. The full audit reviews your policy line by line against all 13 privacy principles — and tells you exactly what to fix, in plain English.
Get my full audit
Why this matters now

The rules changed. Most policies didn't.

The Privacy Act 2020 rewrote the rulebook, and the 2025 Amendment tightened it further. If your policy hasn't been rewritten since, it's not just out of date — parts of it may be working against you.

Breaches must be reported now

If a breach is likely to cause serious harm, you're legally required to notify the Privacy Commissioner and affected customers. Most policies don't even mention a breach process — which usually means there isn't one.

Your data is probably offshore

Email marketing, analytics, booking systems, CRMs — most of them process your customers' data in the US. The law says you have to disclose that and make sure it's protected. Almost nobody does.

Template policies contain traps

Copied policies often include clauses that are actually unenforceable — or worse, illegal. We regularly find clauses that try to contract out of rights customers can't waive. That's a liability sitting on your own website.

Nobody keeps data forever legally

You're required to state how long you keep personal information — and to actually delete it when the time's up. If your policy doesn't say, and your systems don't do it, that's two gaps, not one.

What the full audit delivers

Not a report that sits in a drawer. A fix.

The audit isn't the product — it's the diagnosis. What you're buying is everything needed to close the gaps, written for your business, ready for legal sign-off.

01

Your full audit report

Every gap in your current policy, scored and ranked by risk — explained in plain English, not legal jargon. You'll know exactly what's wrong, why it matters, and what it could cost you to ignore.

02

A redrafted privacy policy

Written for your actual business — the data you really collect, the platforms you really use, the customers you really serve. Not a template. Not a copy-paste job. Yours.

03

The internal playbook

A set of plain-English procedures for your team: what to do when a customer asks for their data, what to do in a breach, how long to keep what, and who's responsible. The stuff the policy promises — made real.

04

Built for lawyer sign-off

This is the part that matters. Everything is structured so your lawyer reviews and approves — instead of drafting from scratch at their hourly rate. Hours of legal work become a review job. That's the difference between a $10k legal project and one sign-off meeting.

The honest bit

"We're not lawyers — and that's exactly why this works. We do the heavy lifting. Your lawyer does the sign-off. You get both, without paying legal rates for the drafting."

Everything we produce is designed to be reviewed by a qualified NZ solicitor. If you've already got legal counsel, they'll get a structured, complete draft to work from. If you don't, we'll point you in the right direction.

How it works

Four steps. No homework.

1

Run the free check

Enter your website above. See where you stand in seconds.

2

Get the full audit

We review your policy and your actual operation — every principle, every platform, every gap.

3

Receive your pack

Redrafted policy, internal playbook, breach plan — written for your business, ready to review.

4

Lawyer signs off

Your solicitor reviews and approves. You publish. Done — and defensible.

Find out where you stand. It's free.

Ten seconds, no signup. If there's nothing wrong, you'll sleep better. If there is — better you find it than someone else.

Run my free check