Health & Support

Delverie Privacy Policy

Last updated:

This Privacy Policy explains how Delverie (“we”, “us”, “our”), owned and operated by [Health & Support] (“H&S”), collects, uses, discloses, and protects personal information in connection with the Delverie mobile application, website, APIs, and related services (the “Platform”). This Policy applies to all users of the Platform, including (1) personal users who browse or post Reviews and (2) business/event account holders who list venues or events. It forms part of our Terms & Conditions.

1. Who we are

Delverie is operated by H&S, a New Zealand non‑profit charitable trust whose purposes include one‑on‑one mental‑health therapy and drug‑ and addiction‑rehabilitation services.

2. What we collect (by role/feature)

We collect personal information you provide directly, information created when you use the Platform, and limited data from service providers. The exact data depends on your role and the features you use.

  • Cloud backend provider (Appwrite): provides our authentication, database, file storage, and serverless functions. Processes your account and content data on our instructions to deliver the Platform.

    A) Personal users (reviewers, browsers)

    • Account details: username, email, password/credential material (managed by our auth provider).
    • Profile & content: your description, Reviews, ratings, images, and comments you post.
    • Optional device location: precise and/or coarse location when you enable location features to show nearby listings and distance.
    • Security/verification: hCaptcha challenge/response data to prevent abuse.
    • Usage & device data: app interactions, device/OS, crash logs, diagnostics.
    • Communications & preferences: messages you send to us, opt‑in/opt‑out settings.

    B) Additional information for Business & Event accounts

    • Business profile: business name, category, public description, website.
    • Address & coordinates: the address you provide and its geocoded latitude/longitude (for maps, distance, and discovery).
    • Representative details: creator’s name and role.

    C) Transactions & donations (if used)

    • Amounts, timestamps, method and status. Card data is handled by our payment processor; we do not store full card numbers.

    D) Web only

    • Cookies or similar technologies for essential functionality, analytics, and remembering preferences.

    Third‑party features we use to provide the service

    • Address autocomplete & maps (e.g., Google Places/Maps): receives your place queries, IP, and may receive approximate coordinates to return suggestions.
    • hCaptcha (bot detection): receives device/network data to determine if a request is legitimate.

    • 3. How we use personal information

    We use personal information to:

    1. provide, maintain, and improve the Platform and your account;
    2. show nearby listings, compute distance, and rank discovery results using device location when enabled and/or business address coordinates;
    3. communicate with you about your account, security events, and updates;
    4. send marketing about similar products or services only if you opt in (you can withdraw consent at any time);
    5. protect trust & safety (fraud prevention, abuse detection, enforcement of our Terms, including Serious Misconduct investigations);
    6. comply with laws and our reporting obligations as a New Zealand charity;
    7. produce aggregated and de‑identified analytics (which is not personal information).

    5. Location controls

    You control location‑based features in‑app (and at the OS level). Disabling location removes you from location‑specific searches and marketing placements but does not affect core account functions.

    6. Sharing & disclosure

    We do not share personal information with service providers. We may disclose information to authorities where required by law or to protect people, our rights, or the Platform, and to other parties with your direction or explicit consent. We do not sell personal information.

    7. International transfers

    Your information may be processed in New Zealand and other countries where our providers operate. Where transferred outside New Zealand, we take reasonable steps to ensure comparable safeguards are in place.

    8. Retention

    We keep personal information only as long as necessary for the purposes above:

    • Personal user accounts & Reviews: for the life of your account and a reasonable period thereafter for legal/compliance purposes.
    • Business listings & address/coordinates: while the listing is active and as needed for discovery/maps, then archived/de‑identified where possible.
    • Security logs and diagnostics: consistent with our operations and security practices.
    • Transaction/donation records: as required by tax and charities laws.

    We then delete or de‑identify data.

    9. Your rights

    You may request access personal information we hold about you. You may ask us to delete information we no longer need and may withdraw consent to optional processing (marketing, device location) at any time. support@healthandsupport.org

    9A. Account deletion (all users)

    You can delete your account at any time in Settings or by emailing support@healthandsupport.org from your account email. When you delete your account we will remove or de‑identify your profile and Reviews (e.g., display “Deleted User”), revoke credentials, and stop marketing. We may retain limited information we are legally required to keep (e.g., tax/charity donation records), necessary fraud/security logs, and a suppression record so we don’t contact you again. Backup copies are overwritten on their normal cycle; if a backup is restored, we will re‑apply your deletion.

    9B. Additional rights (EEA/UK)

    If you are in the EEA or UK, you also have statutory data‑protection rights (including the right to erasure). We will respond within one month and will instruct our processors/recipients to erase your data unless this is impossible or involves disproportionate effort. Some legal exemptions may require us to keep limited data.

    10. Children

    The Platform is not directed to children under 13, and we do not knowingly collect personal information from them. If we learn we have collected personal information from a child under 13, we will delete it. If you are in the EEA/UK and are below your country’s digital age of consent (13–16), or if you are otherwise under 16, your parent or legal guardian must consent before you use the Platform.

    11. Security

    We use administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is 100% secure, but we work to prevent loss, misuse, and unauthorised access.

    12. Changes to this Policy

    We may update this Policy from time to time. For material changes we will provide at least 14 days’ notice to the email address on file or via in‑app notice.

    13. Contact

    Questions or privacy requests: support@healthandsupport.org. You may also contact the Office of the Privacy Commissioner in New Zealand.