Last updated 20 June 2026
PureLayer is a security architecture and governance advisory based in Christchurch, New Zealand. This page explains what information PureLayer collects through purelayer.co.nz, why it collects it, and what happens with it after that. It is written to comply with the Privacy Act 2020 and applies to anyone who visits this website or gets in touch through it.
PureLayer collects the information you choose to provide through the forms and chat tool on this site. Right now that is:
PureLayer does not ask for or collect payment details, ID documents, or any sensitive information such as health or biometric data through this site.
The chat widget on this site is built on Claude, an AI model made by Anthropic. When you type a message, it travels from your browser through the site's server to Anthropic so it can generate a reply. No copy of that conversation is kept in a separate database. If you choose to share your name, email or organisation with the assistant so it can pass on a lead, that detail is emailed through in the same way as the contact form, described below.
Anthropic processes the content of your chat messages to generate the reply. Their handling of that data is governed by their own privacy policy, which you can read at anthropic.com/legal/privacy.
When you submit the contact form or assessment request form, the details you entered are sent through the site's hosting provider, Netlify, to an email service called Resend, which delivers them straight to lee@purelayer.co.nz. Form submissions are not stored in a separate database or CRM. The only copy that exists is the email itself, sitting in PureLayer's normal business email account, along with any reply sent back to you.
Resend processes this information purely to deliver the email. You can read their privacy policy at resend.com/legal/privacy-policy.
PureLayer uses the information you provide for one purpose: to respond to your enquiry, prepare a quote or assessment, or otherwise carry on the conversation you started. Your information is not sold, rented or traded to anyone, and it is not used for anything beyond what you got in touch about.
This site uses Google Ads conversion tracking to measure whether visitors who click an ad go on to fill in a form. This works through a small piece of tracking code from Google and may set cookies in your browser. It shows how many people took an action after clicking an ad. It does not reveal who you are unless you also fill in a form. You can read Google's own privacy policy at policies.google.com/privacy, and you can block or clear these cookies at any time through your browser settings.
No other analytics or tracking tool currently runs on this site.
Because this site relies on Netlify, Resend, Anthropic and Google to run, some of the information described above may be processed or briefly stored on servers outside New Zealand, generally in the United States. This counts as an overseas disclosure under the Privacy Act 2020. Each of those providers has its own security and privacy commitments, linked above, and they were chosen because they are established, reputable services used widely by NZ businesses.
Enquiry emails and replies are kept for as long as they are useful to the working relationship with you, generally for the life of any engagement plus a reasonable period afterward for record keeping. If you ask for your information to be deleted and there is no legal or accounting reason to retain it, it will be.
Reasonable steps are taken to keep your information secure, including relying on providers that encrypt data in transit and at rest, and keeping access to the email account limited to PureLayer itself. No method of sending information over the internet is completely without risk, and absolute security cannot be guaranteed, but your information is treated the way PureLayer would want its own treated.
Under the Privacy Act 2020 you have the right to ask what personal information PureLayer holds about you and to ask for it to be corrected if it is wrong. To do either of these, email lee@purelayer.co.nz and you will get a response within a reasonable time, generally within 20 working days as the Act requires.
If you are unhappy with how your information has been handled and it cannot be resolved directly, you can make a complaint to the Office of the Privacy Commissioner at privacy.org.nz.
If the way information is collected or used changes, for example if a new tool or service gets added to the site, this page will be updated and the date at the top will change.
For any privacy question, email lee@purelayer.co.nz.