Privacy policy

Last updated 28 October 2026

This policy explains what personal information GetListed collects, why, who we share it with and the choices you have. It is written to meet the New Zealand Privacy Act 2020.

Who we are

GetListed (getlisted.co.nz) is a directory of New Zealand businesses, operated by Choyo Labs ("we", "us"). We are the agency responsible for the personal information described here. You can reach our privacy officer through our contact form.

What we collect

We only collect what we need to run the directory. Most of it you give us directly.

Information	When we collect it
Business details: name, service, location, address, phone, website, hours, social links, description, logo and photos	When you add or edit a listing. These can include personal information, for example a sole trader's name or mobile number.
Listing contact email	When you add a listing, so we can tell you when it is approved and confirm claims.
Account email	When you sign in to manage a listing. We email you a one-time sign-in link; there is no password.
Claim details: your email and the message you send to show the business is yours	When you claim a listing.
Contact messages: name, email, optional phone and your message	When you use the contact form.
Billing details for Featured listings	When you buy a Featured listing. Card details go straight to our payment provider, Stripe; we never see or store your card number. We keep the Stripe subscription reference so we can switch Featured on and off.
Technical information: IP address, browser and device type, pages visited	Automatically when you use the site. See Cookies and analytics below.

You don't have to give us any of this, but without it we can't publish or manage a listing, reply to you or process a payment. You can browse the directory without giving us anything.

How we use it

To publish and keep business listings up to date, and to check submissions and claims before they go live.
To sign you in, and to let you edit listings you manage.
To email you about your listing, claim, sign-in or Featured subscription. We don't send marketing email without your agreement.
To take payment for and manage Featured listings.
To reply to messages you send us.
To keep the site secure: for example we count requests per IP address to stop spam and abuse.
To understand how the site is used, in aggregate, so we can improve it.

We don't sell personal information, and we don't use it for automated decisions about you.

What is public and what is private

Public: the business details on a listing page, as listed above, except email addresses. Public listings can be found by search engines and other services that index the web.

Private: listing contact emails, account emails, claims, contact messages and billing records. These are visible only to the GetListed team and are never shown on the site or in our public data feeds.

We use a small number of service providers to run GetListed. They handle personal information on our behalf and only for that purpose:

Provider	What they do	Where
Cloudflare	Network, security and delivery of the website. Sees IP addresses and requests.	Global network
Our hosting provider	Runs the servers that store the directory database and files.	Cloud servers we rent
Stripe	Takes payment for Featured listings and stores card details.	United States and other countries
Plunk	Sends our emails, such as sign-in links and approval notices.	Overseas
Google Analytics	Website usage statistics.	United States and other countries
OpenStreetMap Foundation	Shows maps on listing pages. Your browser loads map images from their servers, which see your IP address.	United Kingdom and other countries

Some of these providers are outside New Zealand. When we send personal information overseas, we only use providers that are subject to privacy laws or contract terms that protect it in a way comparable to the Privacy Act, as principle 12 of the Act requires.

We may also disclose information if the law requires it, to prevent a serious threat to someone's health or safety, or to protect our legal rights, as the Privacy Act allows.

Cookies and analytics

Sign-in cookie: if you sign in, we set a cookie that keeps you signed in for up to 30 days. It is needed for your account to work. Signing out removes it.
Google Analytics: sets cookies to count visits and see which pages are used. Google receives your IP address and device information. You can block it with your browser's privacy settings or Google's opt-out add-on.
Plausible Analytics: runs on our own server, sets no cookies and does not store IP addresses.

We don't use advertising cookies or share data with ad networks.

How long we keep it

Listings: while the listing is on GetListed. If a listing is removed, we delete it, along with its photos and logo.
Sign-in links: expire after 15 minutes and are deleted once used or expired.
Claims and contact messages: as long as we need them to deal with the request and any follow-up. We review and delete old records at least every two years.
Billing records: as long as tax and accounting law requires, usually seven years. Stripe keeps its own records under its privacy policy.
IP addresses used to limit spam: held in memory for up to an hour, not stored.

Security and privacy breaches

We protect personal information with reasonable safeguards, including encrypted connections, access limited to the GetListed team, and private fields that our public interface never returns. No system is perfectly secure, so please tell us through the contact form if you think something is wrong.

If a privacy breach is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and the people affected as soon as practicable, as the Privacy Act requires.

Your rights: access, correction and removal

Under the Privacy Act you can ask to see the personal information we hold about you, and ask us to correct it. You can also ask us to remove your listing or close your account.

If you manage a listing, you can update it yourself at any time from your account.
For anything else, send a request through our contact form. We may need to confirm who you are before we act.

We will respond within 20 working days. If we decline a correction, you can ask us to attach a statement of the correction you wanted. Access and correction requests are free.

Business details from public sources

Some listings start from publicly available business information, including open data from the Overture Maps Foundation, before the business claims them. If a listing includes personal information about you, for example because you trade under your own name, you can claim the listing to manage it, or ask us to correct or remove it.

Children

GetListed is for businesses and people looking for local services. It is not aimed at children, and we don't knowingly collect personal information from anyone under 16.

Changes to this policy

We may update this policy as the site changes. The date at the top shows the latest version. If a change significantly affects how we handle your personal information, we will tell account holders by email before it takes effect.

Contact and complaints

Questions, requests and complaints about privacy can be sent through our contact form. If you are not happy with our response, you can complain to the Office of the Privacy Commissioner.