Privacy policy

Blue Carrot Reports (reports.bluecarrot.co.nz) is an internal operations tool run by Blue Carrot Catering in Wellington, New Zealand. Only our staff and contractors we authorise can use it. This policy explains what personal information the tool handles and why. We follow the New Zealand Privacy Act 2020.

What we collect when you sign in

• Google sign-in: your name, email address and Google account identifier, as shared by Google. We ask only for basic profile and email access. We do not read your Gmail, Drive, contacts or calendar.
• Staff username sign-in: the username and display name we set up for you. Passwords are stored hashed by our authentication provider. We never see them.
• Email link sign-in: the email address you give us.
• Session and security data: sign-in times, IP address and browser details, kept in security logs.

Customer and business information

The tool also processes order information from our booking system to produce kitchen, packing and delivery reports: customer and contact names, delivery addresses and phone numbers, and order details. This information is used only to prepare and deliver catering orders and to run our business.

How we use it

• To confirm who you are and whether you are allowed to use the tool.
• To run kitchen, dispatch and delivery work, and to keep the tool secure.

We do not sell personal information, use it for advertising, or share it except as described here.

Where it is stored

We use service providers to run the tool: Supabase (database and sign-in), Vercel (hosting), Resend (sign-in emails) and PrintNode (printing). Some of them store data outside New Zealand, including in the United States. We use reputable providers with appropriate security safeguards.

How long we keep it

Sign-in accounts are kept while you work with us and removed or disabled when you leave. Order information is kept for as long as we need it for operations and legal and accounting obligations.

Your rights

You can ask to see or correct the personal information we hold about you. Email admin@bluecarrot.co.nz. If you are not happy with our response, you can complain to the Office of the Privacy Commissioner (privacy.org.nz).