How we look after your details

Who we are

Decoration X is a family-run event styling and hire business at 16D Howell Crescent, Mount Roskill, Auckland 1041. We collect and hold the details described here. Write to decorationx3@gmail.com or call (+64) 028 419 8442 about any of it.

When you ask for a quote

The form sends us what you tell it: the kind of event; the date, or that it is not set yet and roughly when; the venue or suburb, or that it is not booked yet and which part of Auckland; guest numbers; a budget; what you would like us to handle, with any photos or files you attach; your name, email and phone number; how you would rather we reply; and how you found us. To send it you need to pick the kind of event, answer the date and venue questions (not sure yet and not booked yet both count), write a line about the event, give your name and an email or a phone number, and tick that you agree to our terms. Guest numbers, budget, attachments and how you found us are up to you. Where your browser can, a large photo is made smaller on your device before it is sent. Without a way to reply we cannot answer. We use what you send to reply, to quote and to plan your event, and to measure our ads (see Meta, below). If you go on with an estimate on the form, it also sends which of our rooms you picked, the parts you took off it, the table items you added, and the guest number it followed.

What the website keeps

The website keeps a short record of each enquiry, locked (encrypted) and deleted after 13 months, so we can note how it went — a good fit, not a fit, or booked — and tell Meta: your first name; the kind of event, its date or roughly when, the guest number, whether you named a venue or which part of Auckland, the estimate and budget ranges, and the page you asked from; your email address, phone number and name in scrambled form; and what Meta needs to match them — your IP address, your browser, and Meta's click and browser identifiers. It does not keep what you wrote, your venue, your contact details in readable form, or your files: those come to us only in the enquiry email.

What the site notes about your visit

When you send the form, the site also tells us how your visits began — your first visit in the last 90 days and this one: the date, the page you landed on, the website that sent you (Instagram, Facebook, Google or another site's name), any campaign tags in the link, and whether the link came from Facebook or Instagram — and the page or photograph you asked from. Until then it is kept only in your browser on this device (the first visit's record is replaced after 90 days; this visit's is cleared when you close the tab), and the site does not send it anywhere else. Clearing this site's data in your browser removes it. We use it to see which of our posts and ads lead to real bookings.

Meta (Facebook and Instagram)

We use Meta's pixel and its Conversions API to measure our Facebook and Instagram ads, and to show our ads to people who have visited this site and to people like our clients.

The pixel tells Meta the pages you open (their full address, including any campaign tags), the site that sent you, your IP address, browser and device, the kind of work you looked at, when you start the quote form or pick one of our rooms, and when you tap to call, message, email, WhatsApp or book a call with us or open our Instagram. When you send an enquiry, the website tells Meta from our server as well as from your browser: its reference number, the kind of event, roughly how soon it is, whether you named a venue or which part of Auckland, the guest and budget ranges, the room and estimate you built and its figure, how many files you attached — and your email address, phone number and name in scrambled form (hashed), which Meta uses only to match the enquiry to a Facebook or Instagram account, and then deletes. Never what you wrote, your venue's name or your files.

Later we tell Meta how the enquiry went: a good fit, not a fit, or booked and for how much. If you arrive from one of our ads, the site keeps Meta's click and browser identifiers in cookies for 90 days. Meta may use what it collects here and elsewhere to measure ads and to choose which ads to show you. If you would rather none of your enquiry went to Meta, call or email us instead of using the form. You can also block cookies for this site in your browser, and choose how ads use your activity in your Facebook or Instagram ad preferences (Accounts Centre).

Google Analytics

We use Google Analytics to see how people find and use this site, so we can make it better. It tells Google the pages you open (their full address, including any campaign tags), the site that sent you, your browser and device, roughly where you are (worked out from your IP address), how far down a page you scroll, when you start filling in the quote form (not what you write), and the full address of any link you open to another website — for WhatsApp, that includes the message it writes for you. Google keeps its own identifiers in cookies. You can block cookies for this site in your browser, or install Google's opt-out add-on at tools.google.com/dlpage/gaoptout. How Google uses this information: policies.google.com/technologies/partner-sites.

Who else handles it

Vercel hosts this website; like any web host it receives your IP address, browser details and the addresses of the pages you open, and keeps them in its logs. Resend delivers the form, with anything you attach, to our inbox, which is Gmail (Google), and keeps a record of the emails it sends. Upstash, a database service, holds the website's locked record of each enquiry. We copy each enquiry into a Google Sheets spreadsheet to follow it up and to see which posts and ads lead to bookings. Calendly runs the booking page if you book a call with Ali, and is told the booking came from this website. Meta receives what is described above, and Google runs Google Analytics. These companies are overseas, so your information may be stored outside New Zealand. We do not sell your details.

Seeing and correcting it

You can ask to see what we hold about you and ask us to correct it — email decorationx3@gmail.com. If you are unhappy with how we have handled your information, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.