Who we are, and who to contact
This policy covers Find My Roofer New Zealand, which is run by Blufire Pty Ltd, ABN 14 665 545 282, from 2/8 Bromham Place, Richmond VIC 3121, Australia.
Our privacy officer can be reached at info@blufire.com.au. Put Privacy request in the subject line and it'll go straight to them.
What do we collect?
When you ask for a roofer, we collect what you put in the form: the job and your description of it, what your roof is made of, your postcode or suburb, your name, your mobile number and your email address. The form doesn't take photos, though the roofer may ask for some when they get in touch. We also keep a record of the consent you gave: the wording you agreed to, and when you sent the form.
We use Microsoft Clarity to see how people move through the site, like which links they tap and where they stop scrolling, so we can improve it. Clarity sets cookies, and Microsoft handles that information under the Microsoft Privacy Statement. The quote form also uses Google reCAPTCHA to stop spam, which Google runs under its own privacy policy.
Why do we collect it?
Our main purpose is to pass your roofing job to a suitable roofer so they can contact you about it. We also use your details to verify your phone number before your job goes to a roofer, to check in about how the job went, to deal with complaints, and to keep any records the law requires.
We only ask for what that needs. If you'd rather not give us your phone number or postcode, we can't match you with a roofer, but every guide on the site is still yours to use.
Who do we pass it to?
Local roofers who cover your area can see your job, your first name and your suburb, but never your mobile number or email address. If none of them takes the job within 48 hours, roofers elsewhere in your region may see it on the same basis. The first roofer to take it gets your first name, mobile, email and message so they can contact you, and only that roofer ever receives your contact details. We don't sell your details or swap them, and we never pass them to a marketer.
Companies that help us run the site, such as hosting and messaging providers, may handle your details on our behalf. We do what's reasonably within our power to stop them misusing it. Right now those are Vercel, which hosts the website, Microsoft Clarity (site analytics), Google reCAPTCHA (spam checks on the quote form), and the tools Blufire's lead system uses to run jobs, including automated tools that read each job description.
Some of those providers may store information overseas. The Privacy Act only allows that where the provider is covered by the Act or by comparable safeguards, or where you've agreed after being told it may not be protected to the same standard. Vercel, Microsoft and Google are in the United States, and some of the lead-system tools are too, so your details may be stored or processed there.
Beyond that, we only disclose information where one of the exceptions in the Privacy Act applies.
Information we get from someone else
Sometimes we'll learn something about you from someone else. The usual example is a roofer telling us a job's details look wrong, such as a mobile number that doesn't work or a request that isn't roofing work, so we can review it. A roofer may also give us their side if you make a complaint. Since 1 May 2026 the Privacy Act expects us to let you know when that happens, unless an exception applies, and we will.
Messages from us
We'll text or email you about the job you asked about. Marketing messages only go to people who've agreed to them. Every message says who it's from, how to reach us, and offers a free way to unsubscribe, and we act on unsubscribe requests within five working days. You can also use our unsubscribe page.
Keeping it safe, and if something goes wrong
We protect your information with reasonable security safeguards against loss, misuse and access by anyone who shouldn't have it. In practice, the whole site runs over HTTPS, the form goes through our own server rather than straight to a third party, and our access keys never reach your browser.
If we ever have a privacy breach that's likely to cause serious harm, we'll tell the Privacy Commissioner and the people affected as soon as practicable.
How long do we keep it?
We keep job details only while we need them to run the service or meet a legal obligation, and never for more than seven years. After that we delete them or strip out anything that identifies you.
Seeing and correcting your details
You can ask whether we hold information about you, ask for a copy, and ask us to correct it, through our privacy request page. We'll respond as soon as we reasonably can, and no later than 20 working days after we receive your request.
If you're unhappy with how we've handled your information, tell our privacy officer first. If we can't put it right, you can complain to the Office of the Privacy Commissioner.
Any change to this policy will show in the date on this page. If something here is unclear, ask us. We'd rather explain it than leave you guessing.