This notice describes how CrimeCheck NZ handles personal information. It applies to the crimecheck.nzwebsite. CrimeCheck NZ is an independent project operated by John Gregoriadis (the “operator”) and is not affiliated with, endorsed by, or operated by NZ Police, Stats NZ, or any government agency.
What we collect
The crime statistics shown on this site are aggregated public data and contain no information about identifiable individuals. CrimeCheck only collects personal information if you choose to subscribe to neighbourhood email alerts or order a suburb crime report.
If you subscribe to alerts, we collect:
- Your email address
- The suburb you ask to be alerted about
- Timestamps for verification, subscription, and any unsubscribe action
If you order a suburb crime report, we collect:
- Your email address
- The address you want the report on, and whether you’re buying, renting or something else
- An order reference, the date you ordered, and whether you’ve paid
- Any emails you send us about your order
We don’t ask for your name or phone number. Payment is made through a secure link from our payment provider, so we never see or store your card details. Visitors who don’t subscribe or order are not personally identified by us.
Your choices
Providing an email address is voluntary. If you choose not to provide one, you simply will not receive alerts — the rest of the site is unaffected. The legal basis for processing is your express consent under Information Privacy Principle 12 of the Privacy Act 2020. You can withdraw consent at any time by clicking the unsubscribe link in any alert email, or by contacting us directly.
Ordering a report is also voluntary. We need your email address and the report address to prepare and deliver it, so we can’t take an order without them.
Why we collect it
Email and suburb are used solely to deliver the monthly alerts you signed up for and to confirm your subscription via a one-time magic link. Timestamps support security (link expiry) and operations (responding to unsubscribe requests).
Report order details are used to send you a payment link, prepare and deliver your report, and answer questions about it. We don’t share the report address with anyone except the service providers listed below, or use it for anything else.
Monthly digest emails include an open-tracking image and tracked links, provided by our email service (Resend), so we can see whether digests are being read and which are not. Turning off remote images in your mail client prevents open tracking. We record only the delivery, open and click status of each email, never its content.
How long we keep it
Active subscriptions are retained until you unsubscribe. Unsubscribed records are retained for up to 12 months for fraud and abuse prevention, then deleted. Verification tokens expire 30 minutes after issue and are cleared automatically.
Report orders, the reports we deliver and payment records are kept for 7 years, because New Zealand tax law requires business records to be kept that long. They are then deleted.
Where it’s stored
- Subscription data is stored in PostgreSQL hosted on Railway in their US-East region.
- Transactional email delivery is performed by Resend in the United States. Resend processes your email address and the message body of each alert.
- Report ordersare emailed to the operator through Resend and kept in the operator’s email account, hosted by Google. Report working files and the finished PDF are kept on the operator’s computer.
- Payments are handled by our payment provider, which receives your payment details directly.
- Site hosting is provided by Vercel.
Storage and processing therefore occurs outside New Zealand. By subscribing or ordering a report you consent to this offshore disclosure under Information Privacy Principle 12 of the Privacy Act 2020. You can withdraw consent for alerts at any time by unsubscribing.
Cookies and tracking
We use Google Analytics 4 (GA4) to understand aggregate site usage (page views, button clicks, navigation). GA4 sets first-party _ga cookies that persist for up to 13 months and may be considered personal information. IP addresses are not logged by Google, and we do not enable Google Signals, Google Ads linking, remarketing, or advertising features. You can opt out of GA4 by installing the Google Analytics opt-out browser add-on or by enabling tracking protection in your browser. Links from the monthly digest to this site carry campaign tags so GA4 can attribute those visits to the email.
Crime statistics — not personal information
The statistics on suburb pages are aggregates over Area Units (Statistics NZ neighbourhood-sized regions, ~2,000 across NZ). They contain no records of individual incidents, victims, or offenders. Any single bucket with a count below 6 is suppressed to protect against re-identification.
Security
Verification and unsubscribe tokens are stored as HMAC-SHA-256 hashes, never as plain text. All traffic to the site is HTTPS. Access to the database is restricted to the operator.
Your rights under the Privacy Act 2020
You may at any time:
- Unsubscribe via the link in any alert email — this stops future emails immediately.
- Request access to the personal information we hold about you.
- Request correction or deletion of that information. To request deletion of unsubscribed records before the 12-month retention period, email us using the contact below. Order and payment records we must keep for tax purposes are kept for the full 7 years.
If you are not satisfied with how we have handled a request, you can complain to the Office of the Privacy Commissioner on 0800 803 909.
Contact
For privacy questions, data requests, or corrections email hello@crimecheck.nz. You can also reach the operator via jonno.nz.