Privacy Policy

• LFW (complimentary website build) and related support, maintenance and hosting referrals.

• Donations made via our website to listed charities/organisations.

• Other activities on our sites (enquiries, newsletter sign‑ups, analytics, cookies).

This does not cover how each charity handles your information once we share it with them; see the charity’s own privacy policy.

We collect the following categories of information:

• Account & contact details: name, email, phone, business name, role, billing address.

• Service & content inputs: copy, images, brand assets, domain/DNS details, instructions and approvals you give us.

• Support & ticket data: messages, attachments, logs needed to resolve issues.

• Technical data: IP address, device/browser, pages viewed, referral URLs, time stamps, diagnostic logs, cookies and similar technologies (see Section 9).

• Payment & billing metadata: invoice totals, payment status, transaction IDs, last 4 digits/brand of card (tokenised). We do not collect or store full card numbers.

• Donations data (when you donate): your name, email, billing/postal address (if provided), donation amount and date, frequency (one‑off/recurring), and limited gateway metadata (transaction ID, status, last 4 digits). We pass donor details to the recipient charity for receipting and (if you opt in) updates.

We collect information directly from you (forms, emails, tickets, uploads), automatically through our sites, and from service providers (e.g., payment gateway status) as needed to operate the service.

• We use information to:

  • Provide and support LFW services (scoping, setup, configuration, maintenance, support).

  • Facilitate Donations and pass donor details to the recipient charity for receipting and stewardship.

  • Process payments via PCI‑compliant gateways; issue invoices/receipts; reconcile accounts; prevent fraud.

  • Communicate with you about your site, support, maintenance schedules, donations, and (if opted‑in) updates.

  • Operate, secure, troubleshoot and improve our sites and services; generate de‑identified analytics.

  • Meet legal, tax, and record‑keeping obligations.

• We may share personal information with:

  • Recipient charities you choose to support via our Donations page (for receipting and donor stewardship).

  • Payment processors (e.g., Stripe) to securely process charges, prevent fraud, and manage recurring payments.

  • Hosting/CDN, email, analytics, and operational providers used to run our websites and services.

  • Contractors and related companies who help us deliver services (under confidentiality obligations).

  • Authorities when required by law or to investigate suspected unlawful activity or security incidents.

  • Business transfers (e.g., a merger or sale) subject to appropriate safeguards and notification where practicable.

  We do not sell personal information.

• How payments work. Donations made via our site are processed using Stripe Connect. Charges are created in Localist’s Stripe account and settled to the charity’s connected account (vendor). The charity receives the net amount after card processing fees charged by the payment processor. Localist does not deduct a platform fee unless expressly disclosed on the donations page.

• Who issues receipts. Our system generates and emails the donation receipt on behalf of the charity (the receipt shows the charity’s name/details). For copies or corrections, contact [email protected]. We also share donor details with the charity so they can reconcile donations and (if you consent) keep in touch.

• Tax credit note. Eligibility for NZ donation tax credits depends on whether the recipient is an IRD‑approved donee organisation. Please check the charity’s status. We do not provide tax advice.

• Recurring donations & cancellations. To cancel or change a recurring donation, please contact Localist at [email protected]. We will stop future charges via Stripe. Cancellations take effect from the next billing cycle; charges already processed are not refundable by Localist.

• Refunds. Donations are generally final. Localist cannot issue refunds on behalf of a charity. If you believe a refund is appropriate (for example, a duplicate payment or clear error), please contact the recipient charity directly.

• Card data. Payments are handled by PCI‑compliant gateways. Localist does not collect, store, or process full card numbers on its servers.

• Our providers (e.g., hosting/CDN, payment gateway, email) may process information outside New Zealand. We take reasonable steps to ensure they use appropriate safeguards (e.g., contractual commitments and security standards).

• We use reasonable administrative, technical and physical safeguards to protect personal information. No security is perfect; if we become aware of a notifiable privacy breach, we will notify affected parties and the NZ Privacy Commissioner as required by law.

• We use cookies and similar technologies to operate the site, remember preferences, and understand usage. Third‑party scripts (e.g., analytics, payment gateway widgets) may set cookies for fraud prevention and session continuity. You can control cookies through your browser, but essential cookies are needed for core functionality (e.g., checkout).

• Payments (including recurring charges and donations) are handled by PCI‑compliant gateways (e.g., Stripe), sometimes via our WHMCS billing platform. Localist does not collect, store, or process cardholder data on its servers. Do not email card numbers to us.

• We send service emails (onboarding, tickets, invoices). Marketing from Localist is opt‑in. Marketing from a recipient charity is separate and also opt‑in. You can unsubscribe at any time using the links in emails or by contacting us/ the charity.

• We retain personal information only as long as reasonably necessary for the purposes above, including:

  • Financial records (invoices, donation reconciliation metadata): up to 7 years.

  • Support tickets and operational logs: generally 24 months unless needed longer for security, disputes, or legal obligations. We may retain de‑identified/aggregated data that does not identify you.

• You have the right to access and request correction of your personal information. To exercise these rights, contact [email protected]. We may need to verify your identity and we’ll respond within a reasonable time.

  ---

• If you have a privacy concern, please contact us first at [email protected]. If we can’t resolve it, you can contact the Office of the Privacy Commissioner (www.privacy.org.nz).

• We may update this Policy by posting a new version with an updated date. Significant changes will be highlighted on this page or notified where practicable.

• Localist Privacy Contact
  Email: [email protected]
  Postal: Localist - PO Box 11205, Palm Beach, Papamoa 3151