Privacy Policy

We may collect the following categories of personal information:

• Contact details: Full name, phone number, email address, and property address.
• Service details: Information about your property, the type of service required, and the nature of the asbestos-containing materials involved.
• Communication records: Emails, phone call notes, and written correspondence between you and JP Asbestos.
• Payment information: Bank account details for invoicing purposes (we do not store full card numbers).
• Website usage data: IP address, browser type, pages visited, and time spent on our website (collected via Google Analytics anonymised).
• Photographs: Site photos taken during inspections or work, which may incidentally include images of your property.

We only collect personal information that is necessary for the purposes described in this policy. We do not collect sensitive personal information (such as health or financial information) beyond what is necessary for service delivery.

We collect personal information through the following channels:

• Website contact and quote forms: Submitted through our website via Formspree.
• Phone calls and emails: When you contact us directly.
• On-site inspections: Information gathered during property visits.
• Referrals: When your details are provided by a third party (e.g., a real estate agent or builder) with your consent.
• Cookies and analytics: Automatically collected when you visit our website (see section 7).

We collect information directly from you wherever possible. Where we receive information from a third party, we will inform you that we hold this information and how it was obtained.

We use your personal information for the following purposes:

• To provide asbestos removal, inspection, testing, and re-roofing services you have requested.
• To prepare and send quotes, invoices, and project documentation.
• To comply with our legal obligations under the Health and Safety at Work (Asbestos) Regulations 2016 including WorkSafe NZ notification requirements.
• To communicate with you about your project, scheduling, and compliance documentation.
• To maintain records required by law for asbestos removal projects.
• To improve our services and website through anonymised analytics.
• To respond to enquiries, complaints, or feedback.

We will not use your personal information for direct marketing unless you have explicitly consented to receive marketing communications from us.

Under the Privacy Act 2020, we rely on the following grounds for collecting and using your personal information:

• Contract performance: To fulfil our obligations under the service agreement with you.
• Legal compliance: To meet our obligations under the Health and Safety at Work Act 2015, the Health and Safety at Work (Asbestos) Regulations 2016, and other applicable NZ legislation.
• Legitimate interests: To operate and improve our business services, subject to your interests and rights not overriding our legitimate interests.
• Consent: Where you have specifically consented (e.g., to receive marketing communications).

We may share your personal information with the following parties, only to the extent necessary:

• WorkSafe New Zealand: As required by law for Class A asbestos removal notifications.
• Licensed waste disposal facilities: Property address and project details required for lawful disposal of asbestos waste.
• Subcontractors and preferred partners: Re-roofing contractors and clearance assessors who require your contact details and property information to complete the agreed work.
• Formspree: Our contact form provider processes form submissions on our behalf. Formspree's privacy policy applies to data processed through their platform.
• IANZ-accredited laboratories: Sample details provided for asbestos testing analysis.

We do not sell, rent, or trade your personal information to third parties for commercial purposes. We require all third parties we share information with to maintain appropriate confidentiality and security standards.

Our website uses Google Analytics to understand how visitors use our site. Google Analytics collects anonymised data such as page views, time on site, and general geographic location. This data does not personally identify you.

Cookies are small text files stored on your device. You can disable cookies in your browser settings, though this may affect the functionality of some website features.

We do not use advertising cookies or tracking pixels. We do not share website analytics data with third parties for advertising purposes.

We retain your personal information for the following periods:

• Quotes and project enquiries (not proceeded with): 12 months.
• Project records and compliance documentation: 10 years (required under Health and Safety at Work Act 2015 and related regulations).
• Financial records: 7 years (required under NZ tax law).
• Email and correspondence: 3 years from last contact.
• Website analytics data: 26 months (Google Analytics default retention period).

After the applicable retention period, personal information is securely deleted or anonymised.

Under the Privacy Act 2020, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete personal information.
• Request deletion of personal information we no longer have a lawful basis to hold (subject to legal retention requirements).
• Withdraw consent where we rely on consent as the basis for processing.
• Object to processing of your personal information in certain circumstances.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 20 working days, as required by the Privacy Act 2020.

We may need to verify your identity before actioning a request to ensure your information is protected.

We take reasonable steps to protect your personal information from unauthorised access, loss, misuse, or disclosure. Our security measures include:

• HTTPS encryption for all website communications.
• Restricted access to personal information on a need-to-know basis.
• Secure password practices and two-factor authentication on business accounts.
• Regular review of our data security practices.

No internet transmission or electronic storage is 100% secure. While we implement reasonable security measures, we cannot guarantee absolute security of your information transmitted to or from our website.

Our website may contain links to third-party websites, including WorkSafe NZ and the NZ Government website. We are not responsible for the privacy practices of those websites. We encourage you to review the privacy policies of any third-party sites you visit.

Our services are not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately and we will take steps to delete it.

We may update this Privacy Policy from time to time. The updated policy will be posted on this page with a revised "last updated" date. We encourage you to review this policy periodically. Continued use of our services following any changes constitutes your acceptance of the updated policy.

If you have a concern or complaint about how we have handled your personal information, please contact us first at [email protected]. We will acknowledge your complaint within 5 working days and endeavour to resolve it within 20 working days.

If you are not satisfied with our response, you have the right to complain to the Office of the New Zealand Privacy Commissioner:

Office of the Privacy Commissioner privacy.org.nz ↗

For any questions, requests, or concerns regarding this Privacy Policy or our privacy practices, please contact: