Privacy Policy

What we collect

Account details (name, email, phone, company), vendor business details, booking details (site addresses, hire dates, zones), payment information (handled by our payment provider — Bear staff and vendors never see your card number; we store only a token and last four digits), evidence photos linked to bookings, and usage data.

Why we collect it

To operate the marketplace: manage bookings, share necessary job details between customer and vendor, process payments and held-payment releases, evidence post-hire charges, resolve disputes, send notifications, prevent fraud, meet legal obligations and improve the service. We do not sell personal information.

Who we share it with

The other party to your booking (only what's needed to do the job — never card details), and service providers: hosting/database (Supabase, hosted in Sydney), payments (Stripe) and email delivery (Resend), each processing data only to provide their service. We disclose otherwise only when required by law, to protect safety, or with your authorisation. Offshore providers are used only with comparable privacy safeguards (Privacy Act 2020, IPP 12).

Retention and security

Booking and payment records are kept 7 years for tax and dispute obligations; other data for the life of the account plus a short period, then deleted or de-identified. Data is encrypted in transit and at rest, access is restricted so users only reach their own records, and payment credentials never touch Bear's servers. Notifiable breaches are reported to you and the Privacy Commissioner as required.

Your rights

Under the Privacy Act 2020 you may request access to and correction of your personal information — contact hello@peerscreative.co.nz; we respond within 20 working days. Unresolved concerns can go to the Office of the Privacy Commissioner (privacy.org.nz).

Marketing

Booking and account notifications are part of the service. Marketing messages are sent only with consent, always with an opt-out.