Privacy Policy
What we collect when you book or get in touch, what we do with it, and your rights under the Privacy Act 2020. Last updated 22 October 2026.
Who we are
The Waterboy Mangawhai is the trading name of Kurawai Limited, a family-owned water delivery and tank cleaning business based on Kaiwaka Mangawhai Road, Mangawhai. In this policy "we", "us" and "our" mean Kurawai Limited. We are the agency responsible for your personal information under the Privacy Act 2020.
What personal information we collect
When you book a delivery or service online, we collect:
- your name, email address and mobile number;
- the delivery address, and the map location that address resolves to, so we can check our service area and work out any distance charge;
- your order: load size and quantity, any tank cleaning, your preferred date, and delivery notes such as a gate code, whether there are dogs on the property and where your tank is;
- the amount paid, your booking reference, and a record of the payment from our payment provider. We never see or store your card number.
When you use the contact form, call, text or email us, we collect what you send us, such as your name, contact details and your message. When you order by phone or email, we record the same details we would need for an online order.
How we use your information
We use your information to:
- confirm and carry out your delivery or service, including finding your tank and getting the truck in;
- work out the right price for your address and date;
- take payment and send you a confirmation and receipt;
- contact you about your booking, for example to confirm the date, let you know the driver is on the way, or sort out an access problem;
- answer your enquiries;
- keep business records, including for tax and accounting;
- run and improve the website and protect it from misuse.
We do not sell your information, and we do not use it for marketing you have not asked for.
Who we share it with
We share personal information only with the service providers we need to run bookings, and only what each one needs:
- Stripe processes card and Afterpay payments. Stripe receives your name, email, the order description and the amount, and handles your card details under its own privacy policy. Afterpay payments are also subject to Afterpay's terms.
- Address lookup and distance: the address you type is sent to a New Zealand address lookup service to suggest and verify the address and return its map location, and, for addresses outside our standard service area, to a routing service to measure the road distance from our fill station. Only the address or its coordinates are sent, never your name.
- Email delivery: booking confirmations and notifications are sent through an email delivery service.
- Contact form: messages sent through the contact form are delivered to us by a form processing service.
- Website analytics: Google Analytics receives information about how the website is used, as described under Cookies and analytics below.
- Website hosting: the website runs on a hosting platform that records standard server logs, such as IP addresses and the pages requested, for security and to keep the site running.
Some of these providers store information outside New Zealand, including in Australia and the United States. We use providers that are subject to privacy safeguards comparable to New Zealand's, or that have agreed to protect your information to a similar standard. We may also disclose information where the law requires it.
Storage and security
Booking records are kept with our payment provider and in our email and office systems, and are protected by access controls and encryption in transit. We keep booking records for as long as we need them to run the business and meet our record-keeping obligations, which for financial records is at least seven years. Enquiries that do not lead to an order are deleted when no longer needed.
Cookies and analytics
We use Google Analytics to understand how people find and use this website, such as which pages are visited, how long people stay, the type of device and browser, and the general area they are browsing from. Google Analytics uses cookies to tell visits apart and does not receive your name, contact details or booking details. You can opt out with Google's browser add-on or by blocking cookies in your browser. We do not use advertising cookies. Our payment provider sets cookies on its own checkout page to run the payment securely and prevent fraud.
Your rights
Under the Privacy Act 2020 you can ask for a copy of the personal information we hold about you and ask us to correct it. Email admin@kurawai.co.nz or call 0800 426 269 and we will respond within 20 working days. If you are not satisfied with how we have handled your information, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.
Changes to this policy
We may update this policy from time to time. The latest version is always on this page, with the date it was last updated at the top.
Contact us
Questions about privacy can be sent to admin@kurawai.co.nz or by calling 0800 426 269. See also our Terms and Conditions.