Privacy & data protection

هذه الصفحة متاحة باللغة الإنجليزية فقط في الوقت الحالي. النص الإنجليزي هو النسخة المعتمدة.

1. Scope

This policy applies to baqshi.com, its contact tools, inquiries, support, and the services we provide. It explains how Baqshi handles personal information.

It does not govern WhatsApp, Telegram, email providers, partner platforms, banks, registries, or other third-party services. Those services have their own privacy policies. If a signed engagement, escrow agreement, or build contract has its own privacy or confidentiality terms, those terms apply to the extent of any inconsistency.

2. Who we are

Baqshi is a global property consultancy based in New Zealand, working in 90+ countries. We are responsible for the personal information we collect under this policy.

Baqshi is the trading name used on this website. The Baqshi entity that contracts with you, its registration details, and its registered office are named in your engagement letter or services agreement. If you need those details before engaging us, ask.

Privacy questions and requests: email hello@baqshi.com with “Privacy request” in the subject, or call +64 27 338 8500. Our support page lists every channel. We may need to verify your identity before we act on a request.

3. What we collect

The information we collect depends on how you contact us and what we are doing for you.

• Contact and identity: name, email address, phone number, country, preferred language, time zone, company, role, and the details needed to verify who you are.
• Inquiry and property: the country you are in and the country of the property, whether you want to buy, build, or invest, budget or price range, timeline, property details, and the notes or messages you send.
• Engagement and verification: identity documents, proof of address, date of birth, tax residency, company, trust, and beneficial-ownership details, source-of-funds information, bank details, signatures, authorities, and references. We collect these only where the engagement or the law requires them.
• Transaction and build: property, title, contract, invoice, payment, escrow, schedule-of-quantities, inspection, certification, and correspondence records.
• Communications: emails, messages, call notes, attachments, and the record of how we responded.
• Technical: IP address, browser and device type, pages viewed, timestamps, referring page, and server logs. Our hosting provider may collect standard logs to serve and protect the site.

We do not ask for wallet seed phrases, private keys, or passwords. Never send them to us or to anyone who claims to represent us. If you send us information about another person, you confirm that you have the right to do so.

We do not seek sensitive information (such as health, religion, or political views) through this site. If an engagement genuinely requires it, we collect it with consent or as the law allows.

4. How we collect it

• From you: when you use the contact chooser, form, call-back request, email, WhatsApp, Telegram, or phone; when you send documents; and when we speak or correspond.
• From third parties: your advisers, lawyers, banks, partners, registries, public records, sanctions and politically-exposed-person lists, and fraud-prevention sources, where the law allows.
• Automatically: standard server logs from our hosting provider. The site estimates your country in your browser from your time zone or language settings; that estimate is sent to us only if you choose to include it in a message or form.

5. Why we use it

• to respond to inquiries and arrange consultations;
• to assess, scope, and provide our services;
• to coordinate with lawyers, notaries, banks, registries, QSME, contractors, and escrow or settlement providers;
• to verify identity, authority, source of funds, and sanctions status, and to prevent fraud;
• to manage contracts, payments, invoices, and transaction records;
• to communicate with you, provide support, and handle complaints;
• to keep records, enforce agreements, and defend legal claims;
• to improve the site and our services using de-identified or aggregated information;
• to send updates or marketing where you have consented or where the law allows, with an opt-out; and
• to comply with the law, court orders, and requests from regulators or government bodies.

We do not sell or rent personal information. We do not use it for automated decision-making that produces legal or similarly significant effects.

6. Our legal bases

In New Zealand, we handle personal information in line with the Privacy Act 2020 and its information privacy principles. We collect it for a lawful purpose connected with our functions or activities, and we take reasonable steps to make sure it is accurate, protected, and kept only as long as needed.

If the GDPR or UK GDPR applies to you, we rely on one or more of these bases: performance of a contract with you; compliance with a legal obligation; our legitimate interests in running and improving our services, preventing fraud, and protecting our rights, balanced against your rights; your consent where we ask for it; or another basis the law allows. Where we rely on consent, you can withdraw it at any time. Withdrawal does not affect processing that already happened.

7. Who we share it with

We share personal information only as needed for the purposes above, including with:

• in-country lawyers, notaries, and other professional advisers;
• banks, payment providers, and escrow, trust, or settlement providers;
• land registries, government bodies, tax authorities, regulators, and courts;
• QSME, construction partners, contractors, and consultants working on your project;
• technology providers for hosting, email, form delivery (including Web3Forms), document storage, and IT support;
• insurers, auditors, accountants, and our own legal advisers;
• the other party and their advisers in a transaction, to the extent needed to complete it (for example, identity, title, and payment status); and
• a successor or buyer if our business or assets are transferred, or with your consent, or where the law requires.

Where we can, we require service providers to protect the information and use it only for the service they provide. Banks, registries, government bodies, and other institutions act under their own laws and may have their own disclosure rules.

8. Overseas disclosure

We are based in New Zealand, but a transaction or build involves the country where the property is. Our service providers may also process information outside New Zealand. For example, Web3Forms delivers form submissions to our inbox, and our hosting provider may process data in another country. Their locations and privacy laws may differ from yours.

When we disclose personal information to an overseas recipient, we take reasonable steps to ensure it is protected by comparable safeguards, or we rely on an exception the Privacy Act allows (for example, where the disclosure is necessary for a contract with you or required by law). If you use WhatsApp, Telegram, or email, those providers handle the message under their own policies and may process it outside New Zealand.

9. How long we keep it

We keep personal information only as long as we need it for the purposes above, including legal, tax, accounting, and dispute requirements. In general:

• inquiry records are kept for up to 24 months after the last contact if no engagement follows;
• engagement and transaction records are kept for at least 7 years after the relationship ends, or longer where the law or a contract requires;
• identity and source-of-funds records are kept for the period the applicable anti-money-laundering or other law requires;
• marketing preferences are kept until you opt out, plus a suppression record so we do not contact you again; and
• server logs are kept for a short operational period.

When we no longer need information, we delete or anonymise it. Backup copies may remain for a limited period before they are overwritten. If you ask us to delete something, we may need to keep some records by law or to defend a legal claim.

10. How we protect it

We use reasonable technical and organisational safeguards, including access controls, encryption in transit, least-privilege access, secure service providers, confidentiality obligations, and monitoring. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Tell us immediately if you think your information has been compromised or if a message claiming to be from Baqshi looks wrong. We never ask for wallet seed phrases, private keys, passwords, or remote access to your device.

If a privacy breach occurs, we assess it and notify affected people and the Office of the Privacy Commissioner where the Privacy Act 2020 requires it.

11. Cookies and tracking

The current site does not use advertising, profiling, or analytics cookies, and it does not require an account. The hosting provider may use strictly necessary technology and standard logs to serve and protect the site.

When you choose WhatsApp, Telegram, or email, those services may set cookies or track activity under their own policies. When you submit a form, Web3Forms processes the content to deliver it to us.

If we add analytics or marketing cookies, we will update this policy and, where the law requires, ask for your consent before using them. You can also block or delete cookies in your browser, though some site features may not work.

12. Your rights and choices

Depending on where you live, you may have the right to:

• ask for access to the personal information we hold about you;
• ask us to correct information that is wrong, incomplete, or out of date;
• ask us to delete information, or to restrict or object to how we use it;
• ask for a copy of information you gave us in a portable format;
• withdraw consent where we rely on it;
• opt out of marketing at any time; and
• complain to us or to a privacy regulator.

Under the New Zealand Privacy Act 2020, you can ask for access to, or correction of, your personal information. We respond within 20 working days, though the Act allows an extension in some cases. We may need to verify your identity first.

If you are in the EU or UK, you have the rights the GDPR or UK GDPR gives you, including access, rectification, erasure, restriction, objection, portability, and complaint to your local supervisory authority. If another law gives you additional rights, we will honour them.

To make a request, email hello@baqshi.com with “Privacy request” in the subject and tell us what you want. You can also opt out of marketing by using the unsubscribe link in a message or by emailing us.

13. Complaints

If you are unhappy with how we have handled your information, contact us first at hello@baqshi.com with “Privacy complaint” in the subject. Tell us what happened and what you would like us to do. We will look into it and respond.

If you are not satisfied, you can complain to the New Zealand Office of the Privacy Commissioner at privacy.org.nz or on 0800 803 909. If you are in the EU or UK, you can complain to your local supervisory authority. Complaints about our services (rather than privacy) are handled through our support page and the dispute process in your engagement.

14. Children

The site and our services are for adults. They are not directed at children under 18. Do not send us a child’s personal information without the permission of a parent or guardian. If we learn that we have collected it without the right permission, we will delete it.

15. Changes

We may update this policy as our services, providers, or the law change. The version and effective date at the top of this page show the current version. The updated policy applies from that date. Where a change is material, we will take reasonable steps to let you know, and where the law requires consent, we will ask for it.

16. Version

Version 1.0, effective 24 October 2026. Read this with our Terms & Conditions. This page explains our privacy practice; it is not legal advice to you.