Privacy

How we handle your information.

Short version: we collect only what you give us, we use it only to reply to you, we never sell it, and we delete it when you ask.

Last updated: 21 April 2026

Who we are

This site is operated by Petitgen Ltd, a company registered in Aotearoa / New Zealand. We are the data controller under the New Zealand Privacy Act 2020 and, for visitors in the EU/UK, under the GDPR / UK GDPR.

What we collect, and why

When you contact us

If you use the intake agent or the contact form, we collect the details you choose to share — name, email, and anything else you put in. We also log your IP address and approximate country for abuse prevention. We use this information only to reply to you and to understand whether your project fits our work.

Intake agent (AI chat)

The intake agent is powered by Anthropic's Claude model. Your messages are sent to Anthropic's API so the model can respond. We do not train the model on your conversation. Anthropic's privacy terms apply to that processing — see anthropic.com/privacy.

We keep a log of intake conversations for up to 30 days so we can review quality and handle edge cases. After that we delete them unless the conversation turned into an active engagement, in which case it moves into the engagement file.

Server logs

Like every website, our server receives an access log — IP address, user-agent, the page requested, the time of the request. Cloudflare (our hosting and CDN provider) retains these logs per their defaults. We use them for security and debugging. We do not use them for profiling.

Analytics

We do not run third-party analytics. If we add Cloudflare's privacy-friendly Web Analytics in future, it sets no cookies, tracks no individuals, and respects Do Not Track. We will update this page when that happens.

Cookies

This site does not set cookies. No tracking, no ad pixels, no consent banner needed.

Who we share with

Minimum possible. Specifically:

Cloudflare — hosting, CDN, and DDoS protection.
Anthropic — the model behind the intake agent.
Resend — the service that delivers your intake submission to our inbox.
Google — for the Gmail account we read replies on.

We do not sell data to anyone. We do not share it with advertisers. We do not join it with third-party datasets.

How long we keep it

Unanswered intakes: up to 90 days, then deleted.
Intake chat logs: up to 30 days, then deleted.
Active client correspondence: for the life of the engagement plus seven years (NZ tax / company law requirement).
Server logs: per Cloudflare defaults.

Your rights

You can ask us at any time to:

see what we hold about you,
correct it if it is wrong,
delete it,
export it in a portable format,
stop using it for a specific purpose.

Email [email protected] with the subject line "privacy request". We reply within one working day and action the request within 20 working days, as the NZ Privacy Act requires.

Children

This site is not directed at children under 16. If you believe a child has contacted us, email us and we will delete the record.

Complaints

If we have mishandled your information, email us first — we would much rather fix it than have a regulator arbitrate. If we cannot resolve the issue, you can complain to the Office of the Privacy Commissioner in New Zealand, or to your local data-protection authority if you are in the EU / UK.

Changes to this policy

If we change how we handle information, we update this page and change the "last updated" date. Material changes are noted at the top for 30 days. The current version is always at /privacy.