Your information should be treated with care.

Last updated: 28 August 2026

Smartfix Electronics, operated by Mark Curd in Whanganui, is responsible for the personal information collected through this website. This notice explains what is collected, why it is needed, who may receive it, and the choices available to you.

Information you choose to provide

Providing information is voluntary. However, Smartfix may be unable to respond to a repair enquiry without a name, a way to contact you and enough information to understand the problem. Please do not include passwords, payment-card numbers, identity documents or unrelated personal information in a message or photo.

Repair enquiries and jobs

Smartfix collects the name, contact details, device or service category, problem description, preferred contact method and any optional photo you submit. This is used to respond to the enquiry, arrange and perform work, agree costs, record payments, provide customer support and meet legitimate business, accounting and legal obligations. Job information is visible only in the protected administration area.

Customer reviews

Reviews are stored for moderation. They are not displayed publicly until approved. The public version may show your chosen display name, area, rating, review text and a response from Smartfix. Private moderation notes are not published. You may ask for your review to be corrected, hidden or removed.

MailBridge updates

MailBridge notification signups use double opt-in. Your name and email become an active subscription only after you use the confirmation link. Every campaign includes an unsubscribe link, and messages are delivered individually so recipients do not see one another’s addresses.

Smartfix Labs requests

When you request project updates or early access, Smartfix stores your name, email address, chosen project, request type and any optional testing information you provide. A confirmation link verifies the address before updates are enabled or an access request enters the review queue. Early access may be approved, waitlisted or declined by Smartfix. Project messages include an unsubscribe link.

Approved testers may receive an individual, expiring, one-time access link. Smartfix records when that invitation was sent and whether the link was redeemed, but does not use invisible email-open tracking.

My Smartfix accounts, Labs and learning progress

A Smartfix Account can be used across Labs and the Learning Centre. Smartfix stores your name, email address, email-verification date, account status, Labs access decisions, general course or product entitlements and update preferences. Learning users also have their chosen practice-phone style, lesson progress, practical-task completion, quiz attempts and best scores stored so learning can continue across devices.

If you request remote learning, Smartfix stores the requested session length, topic, learning goal, device details you choose to provide, preferred times and the request’s status. Mark may add private scheduling notes, an agreed quote, payment state and a secure meeting link. The request form does not take payment and must not be used to send passwords, PINs or one-time security codes.

Sign-in links are random, one-use and expire after 15 minutes; only a cryptographic hash of each link is stored. If you optionally enable an authenticator app, its setup secret is encrypted at rest. Recovery codes are stored only as keyed cryptographic hashes and are shown to you once. Security events, project launches and protected downloads may be logged for account protection and abuse investigation.

Project-update consent remains separate for each project. You can stop those updates without deleting your account or losing approved project access. Public repair enquiries do not require a Smartfix Account.

Service providers and disclosure

Information may be processed by the website hosting and email providers used to operate Smartfix, and by Cloudflare if its optional anti-spam service is enabled. It may also be disclosed where required by New Zealand law or where reasonably necessary to prevent or investigate misuse. Smartfix does not sell personal information or provide it to advertising networks. If a provider processes information outside New Zealand, Smartfix will use providers and safeguards appropriate to New Zealand Privacy Act requirements.

Security and spam prevention

The website uses encrypted HTTPS connections, server-side access controls, short-lived one-use sign-in links, optional authenticator security, secure administrator sessions, request limits, honeypots, restricted uploads and browser security headers. A one-way cryptographic representation of the submitting network address is stored for abuse prevention rather than the plain address. No internet service can be guaranteed completely secure, so safeguards and access are reviewed over time.

Website analytics

The website uses limited first-party analytics. Your browser creates a random device identifier and a separate visit identifier. The server stores only one-way cryptographic versions of those identifiers, not the original values.

This helps Smartfix estimate anonymous devices, new and returning visits, commonly used pages, referring websites and active time. Active time counts only while the page is visible and your browser window is focused. Only the page path and referring domain are recorded—not full browsing URLs.

Smartfix does not use Google Analytics, advertising trackers, precise location, browser fingerprinting or cross-site tracking. Raw network addresses are not stored in the analytics records. These figures describe devices rather than identified people, so one person using several browsers or devices may be counted more than once. Analytics records are retained for approximately 13 months.

Retention and deletion

Information is reviewed and removed when it is no longer needed for the reason it was collected. Unsuccessful or inactive enquiries, optional photos, reviews, unsubscribed marketing details, old session requests and abandoned Learning Hub accounts should be deleted or de-identified when they no longer serve a lawful business or consent-record purpose. Completed-job and paid-session cost or payment records may need to be retained for at least seven tax years under New Zealand business record-keeping requirements. Backups may retain protected copies for a limited additional period until they rotate out.

Access, correction and complaints

You may ask whether Smartfix holds information about you and request access to, correction of, or—where no retention obligation applies—deletion of that information. Smartfix may need to verify your identity before responding. You may also complain to the New Zealand Office of the Privacy Commissioner if you believe your privacy rights have not been respected.

Privacy breaches

Suspected privacy incidents will be contained and assessed promptly. If a breach has caused or is likely to cause serious harm, Smartfix will notify the Office of the Privacy Commissioner and affected people as soon as practicable, aiming to assess notification within 72 hours of becoming aware of the incident.

Contact

For a privacy request or concern, contact Mark Curd at markcurd09@gmail.com.