Public website

Website privacy notice

This notice covers Braided’s public information website while the clinical platform is closed. It explains the limited information we collect from visitors and people who choose to contact us.

Last updated: September 4, 2026 · Version: 2026-09-04

1. Who this notice covers

The collecting agency is Braided Health Limited, a New Zealand company (Company Number 9352117, NZBN 9429052935855). This website notice is governed by the New Zealand Privacy Act 2020.

The clinical platform is not open to the public. Do not send patient, referral, or health information through the updates, general contact, or provider-interest forms. These forms are not clinical pathways.

Invited platform users are covered by the separate Platform Privacy Notice.

2. Information we collect

Website visits

Information: Basic request, browser, device, network, and security information, including an IP address where it is present in ordinary service logs.
Why: Deliver the website, keep it reliable, prevent abuse, and investigate security events.
Your choice: This information is generated when you visit the site. You can choose not to use the site.

Updates registration

Information: Your email address, confirmation status, consent version, date, and registration source.
Why: Confirm your request and send occasional Braided updates, including notice of referral-pathway changes.
Your choice: Registration is optional. If you do not provide an email address, we cannot send updates.

General enquiries

Information: Your name, email address, organisation or role if provided, enquiry reason, and message.
Why: Route and respond to your enquiry and keep an appropriate record of the correspondence.
Your choice: Contacting us is optional. Required fields are needed so we can receive and answer the enquiry.

Provider interest

Information: Your contact details, professional specialty, credentials, experience, location, interests, preferred contact method, user agent, and a one-way hash derived from the request IP address.
Why: Assess and respond to interest in the future Braided provider network, manage follow-up, and prevent duplicate or abusive submissions.
Your choice: Registration is optional. If you do not provide the required fields, we cannot register your interest.

3. Who handles website information

We use service providers to run the public site and its forms. Their relevant services may process information outside New Zealand, including in the United States. We remain responsible for deciding why the information is collected and used.

Vercel · Website hosting and delivery

United States

Website requests and ordinary delivery logs. Serve the public Braided website.

Railway · Public form API hosting

United States

Provider-interest submissions and related request metadata. Run the provider-interest submission service.

Supabase · Public form records and abuse controls

United States / EU services depending on product path

Provider-interest records and limited rate-limit records. Store provider interest and protect public forms from abuse.

Resend · Contact and updates email

United States

Email addresses, consent records, contact details, and enquiry content submitted for delivery. Deliver contact enquiries, confirmation messages, and requested updates.

We may also disclose information when required by law, to protect people or the security of the site, or as part of a properly managed business transaction. We do not sell personal information to advertisers or data brokers.

4. How long we keep it

Confirmed update registrations are kept while you remain subscribed. We may retain a limited suppression record after unsubscribe so we do not resume sending updates without a new request.
Contact correspondence and provider-interest records are kept while reasonably needed to respond, manage the relationship, resolve disputes, and meet legal obligations. You may ask us to review or delete them.
Security, delivery, and service logs are retained for the periods reasonably needed to operate and protect the site, including the applicable service-provider retention periods.

Retention can be longer where reasonably necessary for a legal obligation, dispute, fraud prevention, or security investigation. We may remove or anonymise information when it is no longer needed.

5. Your privacy rights

Access

You can ask whether we hold personal information about you and request a copy.

Correction

You can ask us to correct personal information that is inaccurate or incomplete.

Withdrawal and deletion review

You can unsubscribe from updates or ask us to review whether information from an enquiry or interest registration should be deleted.

Complaint

You can raise a concern with us and may complain to the Office of the Privacy Commissioner if it is not resolved.

We may need to confirm your identity before acting on a request. Contact privacy@braided.nz. You can also learn about complaints through the Office of the Privacy Commissioner.

6. Contact and changes

Privacy requests: privacy@braided.nz
General enquiries: hello@braided.nz
Postal details for a formal request are available from the privacy contact above.

We will update this notice before materially changing how the public website collects or uses personal information.