iterate

privacy

What we collect, and why.

Plain English, like everything else here. iterate is based in Lower Hutt, New Zealand. This is how we handle data on this website. We don't sell it, and we collect as little as we can.

what we collect

Three things, all minimal.

  • Website analyticsWe use Google Analytics 4 to see which pages get visited and roughly where visitors come from, so we can make the site better. It's aggregate and not used to identify you. Google sets cookies to do this.
  • Session insightsWe use Microsoft Clarity for anonymised heatmaps and session replays (where people click and scroll), to find what's confusing. Text you type is masked. We don't use it to identify individuals.
  • What you send usIf you use the contact form or email us, we receive your name, email and message. We use it only to reply and to talk about working together - nothing else.

the details

The bits that matter.

  • We don't sell your dataEver. We don't run ad networks or share your details with anyone except the tools named here.
  • Third partiesGoogle (Analytics), Microsoft (Clarity), our website host (Vercel) and our form handler process data on our behalf, under their own privacy terms.
  • CookiesThe analytics tools above set cookies. You can block or clear them in your browser, or install Google's opt-out add-on, without affecting the site.
  • Your rightsUnder the NZ Privacy Act 2020 you can ask what we hold about you, or ask us to correct or delete it. Email us and we'll sort it.
  • Get in touchhello@iterate.nz · 021 027 75346 · Lower Hutt, New Zealand.

Last updated July 2026. If we change how we handle data, we'll update this page.

if you're a client

How we handle your business data.

When iterate runs your IT, we hold admin access to your Microsoft 365 so we can manage it - but managing it and reading it are different things. We only open your mail or files when a specific support ticket or incident needs it, and we tell you first.

  • What we hold for youBackups of your mail and files, your support tickets, and a record of the configuration changes we make on your behalf.
  • Where your backups liveAn immutable offsite copy with Backblaze, stored in the United States, plus a second copy here in New Zealand. The offsite copy is locked for 180 days and can't be altered or deleted early - that lock is what makes it ransomware-resistant. Because that copy sits overseas, we're telling you plainly, as the Privacy Act requires.
  • Who else handles itMicrosoft (your own tenant), Backblaze (offsite backup, US), and iterate's own self-hosted systems in New Zealand (helpdesk, restore portal, device monitoring). We don't sell your data or share it with anyone else.
  • It stays yoursYour data lives in your accounts, not ours. You can ask what we hold, have it corrected, or have it handed back at any time - and if you leave, our off-boarding policy sets out exactly how it comes back to you.
  • If something goes wrongIf there's ever a privacy breach likely to cause you serious harm, we'll tell you and notify the Office of the Privacy Commissioner, as the law requires.