Legal
Privacy Statement
How TCR collects, uses and looks after the information you give us when you enquire about property management.
Last updated 1 October 2026
The short version
- We ask only for what we need to respond about your property.
- Your enquiry is used to respond to you about our property management services.
- Marketing updates only if you choose them, with a separate tick box.
- No payment details are collected.
Who we are
This Privacy Statement is from TCR (The Concept Realty), a property management business launching in Auckland, New Zealand. We are responsible for the personal information collected through this website, and this statement explains how we handle it under the Privacy Act 2020.
You can contact us at our office: 4th Floor, Smith & Caughey Building (entrance at 11 Wellesley Street West), Auckland 1010.
What we collect
The only personal information this website asks for is what you type into the property enquiry form:
- your name
- your email address
- your phone number (optional, unless you ask us to call or text you)
- the property’s address or suburb
- whether the property is tenanted (optional)
- whether it currently has a property manager (optional)
- the weekly rent (optional)
- how you would prefer us to contact you: phone, email or SMS (optional)
- whether you would like marketing updates, which is a separate, optional tick box that is never ticked for you.
With your answers, the form sends where you sent it from: the address of the page on this website, the website that referred you to it (when your browser reports one, and only when it is another website) and any campaign tags in the link you arrived on (utm_source, utm_medium and utm_campaign), so we know which of our links brought you. It sends no advertising click reference.
When you visit
Like any website, ours is delivered by a hosting provider, which processes standard technical information about each request, such as your IP address and browser type, to deliver the pages to you. See Overseas providers.
So the form cannot be flooded, or used to send someone repeated emails, our server keeps two things in its memory, and only there: a count of recent requests from each network address, cleared within half an hour; and, once it has sent you a confirmation email or tried to, a fingerprint of your email address (a code computed from it, not the address itself), kept for a day so it does not send you a second confirmation. Neither is written to disk, and both are lost when the service restarts.
For each enquiry it writes a line to its log (two if the confirmation email is held back or cannot be sent), with a random reference and the domain of your email address, never the address itself nor anything else you typed, so a failed delivery can be traced.
This website does not collect payment details.
Why we collect it
We use the information in your enquiry to:
- respond to your property management enquiry, and explain our service and its availability
- understand your property and its tenancy situation, so we can talk about your property specifically
- contact you in the way you prefer
- know which of our links or campaigns brought you to us
- set up and provide our management of your property, if you become a client
- send you marketing updates, but only if you ticked the separate marketing box.
We will not use it for an unrelated purpose unless you agree or the law allows it.
If you choose not to provide it
You do not have to give us any information. The form needs your name, email address and the property’s address or suburb, and a phone number if you ask us to call or text you. Without them it cannot be sent, and we cannot respond to your enquiry. Everything else is marked optional and can be left blank.
Who receives it
When you send an enquiry, this website passes it, at the same time, to two services: Resend, the email delivery service we use, which delivers it to the TCR team’s inbox and sends a confirmation to the email address you gave; and HighLevel, our customer relationship management system, where it is kept as a contact with a note and a record of your enquiry so we can follow it up.
Enquiries are read by the TCR team so we can respond to you. Apart from these two services, this website does not send your enquiry to any other organisation, and we do not sell, rent or trade it or pass it to an advertising platform. We will only share it with anyone else if you agree, or if the law requires it.
Storage and security
This website does not keep its own copy of your enquiry: there is no database behind the form. Once sent, it is held in the TCR team’s email, in HighLevel, and in the records Resend keeps of the messages it delivers.
We take reasonable steps to protect personal information from loss, and from access, use, changes or disclosure that we have not authorised, as the Privacy Act 2020 requires. If a privacy breach is likely to cause you serious harm, we will tell you and the Office of the Privacy Commissioner.
Overseas providers
Enquiries are delivered by Resend, a company based in the United States, which may process and store them there to deliver them. HighLevel, where we keep the record of your enquiry, is a customer relationship management service based in the United States, and stores it there.
This website’s hosting provider processes standard technical information about each visit, such as your IP address and browser type, to serve the website’s pages.
How long we keep it
We keep your enquiry only for as long as we need it for the purposes described in Why we collect it. That means as long as it takes to respond to you and talk with you about your property. If you become a client, we keep it while we manage your property. If you ticked the marketing box, we keep your contact details for that purpose until you ask us to stop. When you ask us to delete your enquiry, we delete it from our inbox and from HighLevel.
Access and correction
You have the right to ask for the personal information we hold about you, and to ask us to correct it if you think it is wrong.
To make a request, contact us as described in Who we are. We may need to confirm your identity first. We will respond as soon as we reasonably can, and within 20 working days unless the Privacy Act 2020 allows us more time, in which case we will tell you.
If we do not agree to change the information, you can ask us to attach a statement of the correction you asked for.
Marketing
We only send you marketing updates, whether by email or text message, if you tick the separate marketing box on the enquiry form. The box is optional, it is never ticked for you, and leaving it blank does not affect your enquiry.
If you did tick it, you can ask us to stop at any time. Every marketing email or text message we send will include a way to unsubscribe.
Cookies, browser storage and analytics
This website does not set cookies of its own.
The demo at /demo keeps what you do in it in your browser’s session storage for that tab, so you can walk away and come back to the same place. It is not shared with another tab, it is not readable by us, and your browser deletes it when you close the tab. Nothing you do in the demo is sent to us: every person, address and figure in it is invented.
This website does not currently use analytics or advertising tracking tools, and no analytics code is loaded. If that changes, we will update this statement.
Our fonts are served from this website itself, so viewing a page does not send a request to a font provider.
Complaints
If you have a concern about how we have handled your personal information, please contact us first, as described in Who we are, so we can try to put it right.
You can also make a complaint to the Office of the Privacy Commissioner at www.privacy.org.nz.
Changes to this statement
We may update this statement, for example when we change how enquiries are handled. The date at the top shows when it last changed.