The Privacy Act changed on 1 May 2026. If your policy was written before then, it's missing the 14th principle. Enter your website — your score takes about two minutes and costs nothing.
When was your policy written? Watch how the 14-Principle Audit works, what the pack contains, and exactly what the guarantee covers.
Not a template. We audit how your business actually handles information, then rebuild your documentation against all 14 principles — delivered in 7 working days.
All 14 principles — where you stand on each, what changes, in plain English.
Current law, your actual data flows. No GDPR ghost-rights, no boilerplate.
Access requests, breach response, retention, IPP 3A notifications and more — the documents that make the policy true in practice.
Who does what, when, in what order — including your named Privacy Officer.
For scale: a lawyer-drafted privacy policy alone runs about $900 + GST and takes 5 working days — one document, no score, no procedures. Founding rate rises to $1,690 + GST when the lawyer-reviewed tier goes live. Founding builds include case-study permission — that's the deal.
No law firm or generator in the category offers any guarantee. We can, because the framework is published and the score is measurable.
Online payment is being wired up. Until then: leave your email, we'll confirm your spot and invoice you directly — same price, same guarantee, first come first served.
You can — that's what most businesses scoring 2–4/10 did. A template writes a document; it never checks what you currently have, doesn't know your data flows, and almost all of them predate the 14th principle. If you score well on the free check, keep your template with our blessing.
It's not legal advice, and it says so on every document — no fine print games. Every finding traces to a numbered principle in the Privacy Act 2020 and OPC guidance, and there's a route into review by a real NZ privacy lawyer. Compare that honesty with a generator that quietly hands you GDPR text.
True — the Privacy Commissioner isn't door-knocking. The real trigger is a person: one unhappy customer, ex-staff member or job applicant filing a complaint, and you're responding with whatever documents you have that day. It's also becoming a procurement question — bigger customers now ask for your privacy documentation before signing.