Last updated: August 2026
rohe.nz (“we”, “us”) is operated by Sevenoways Innovations, Coolaney, Co. Sligo, Ireland. We are an overseas operator serving the New Zealand market: our servers are located in France and Germany, and our staff are based in Ireland. This policy explains what data we collect, how we use it, and your rights under the New Zealand Privacy Act 2020. Because we operate from the EU, the EU General Data Protection Regulation (GDPR) also applies to our processing. For any privacy query, contact us at hello@sevenoways.com.
We use your data to operate the directory, respond to enquiries, process Premium subscriptions and sponsored placements, send service and marketing emails you have opted into, and improve the site. We do not sell your personal data.
We use cookies for essential functionality — signing you in, keeping your session, and remembering saved listings — and for analytics, which tells us which pages are useful. We use two analytics tools: Google Analytics, and Rybbit, which we run ourselves on our own infrastructure at sevenlytics.com. Because we host Rybbit, the data it collects stays with us — it is not shared with an outside analytics company.
Rybbit — which we host ourselves, so replays are stored on our own systems and never sent to a third-party analytics provider — records a replay of visits to rohe.nz. A replay reconstructs what happened on the page — the pages you viewed, how you scrolled and moved the pointer, the buttons and links you clicked, outbound links you followed, any technical errors, and the fact that you interacted with a form field. We use replays for one purpose: finding parts of the site that are confusing or broken. We do not use them to build a profile of you, and we do not sell or share them.
Our lawful basis is our legitimate interest in diagnosing and fixing usability problems. Under the GDPR you may object to this processing at any time, and under the Privacy Act 2020 you may ask what we hold and request correction. Email hello@sevenoways.com and we will exclude you from replay and delete any recording of your visits. Blocking sevenlytics.com in your browser also stops replay entirely, with no loss of access to the site.
We rely on trusted processors including Google Analytics (analytics), Stripe (payments), and Amazon SES (email). Each processes data under its own privacy policy. We do not use an advertising network.
Our other analytics tool, Rybbit (sevenlytics.com), is not a third party: it is our own software running on our own infrastructure, operated by Sevenoways Innovations. Nobody outside our team receives that data.
Your personal information is stored on servers in France (the directory itself) and in Germany — our self-hosted analytics and session replay run on our own server in Nuremberg. Both are accessible to our team in Ireland. Information principle 12 of the Privacy Act 2020 permits this where the receiving country provides comparable safeguards — the European Economic Area is subject to the GDPR, which New Zealand recognises as comparable, and New Zealand itself holds an EU adequacy decision. Some processors named above (Google, Stripe, Amazon) may also process data in the United States under their own standard contractual clauses.
Under the Privacy Act 2020 you have the right to access the personal information we hold about you and to request correction of it. Where the GDPR also applies, you additionally have the right to erasure, to restrict processing, and to withdraw consent at any time. To exercise any right, email hello@sevenoways.com. If you are not satisfied with our response you may complain to the Office of the Privacy Commissioner (privacy.org.nz).
We keep personal data only as long as necessary to provide our services and meet legal obligations. IP addresses recorded with review and enquiry submissions are deleted after 90 days. You can request deletion of your account and associated data at any time.
We may update this policy from time to time. Material changes will be reflected by the “last updated” date above.