Publication Date: 19 October 2026
Chef Harbour - By The Dutchman is a New Zealand directory and manual introduction service operated by Hidde Hein Meijers, a sole trader also trading as The Dutchman. These are trading names of the same individual, not separate legal entities. This policy covers Chef Harbour profiles, applications, Work Requests, waiting-list and newsletter activities at https://thedutchman.co.nz/chefharbour/home and related communications. The Dutchman’s direct consulting, digital and relief-chef activities have a separate privacy policy.
Privacy Officer: Hidde Hein Meijers. Contact: info@chefharbour.co.nz. Correspondence address: 11 Mackwell Road, Fairview heights, 0632, Auckland, New Zealand.
Chef applicants and participants: names, business names, email addresses, telephone numbers where requested, region and service areas, professional background, experience, qualifications, specialisations, services, websites and social or portfolio links, application answers and material voluntarily supplied. Profile preparation may also involve approved photographs, logos, biographies, testimonials and publicity permissions. We do not require an NZBN merely to apply or undertake comprehensive identity, background or credential verification.
Venue Work Requests: contact and venue identity, contact details, work location, kitchen assistance or service type, dates, times, duration, requirements, and budget or rates where requested, together with relevant messages and additional details supplied.
Waiting-list and newsletter records: email address, any name, business details or interest category requested by the form, signup and confirmation records, subscription status, communication preferences, unsubscribe requests and necessary consent or suppression evidence.
Administration and technical records: submission dates, enquiry type, source or service selections where passed or stored, correspondence, introduction permissions, exact agreement versions and acceptance evidence, public-content approvals and change requests. Providers may also process IP addresses, browser or device information, timestamps and security or access logs. This does not mean all provider technical data is available to us or retained in our form results. We do not deliberately collect additional device fingerprints or IP evidence solely to prove agreement acceptance.
Providing information is voluntary. Fields marked required are needed to assess or respond to the request; without them we may be unable to proceed. Optional information can be withheld. Each collection point explains the relevant purpose, recipients and consequences. Please avoid unrelated sensitive information about staff, clients or other people.
We use relevant information to assess Flagship applications; prepare, maintain and promote approved profiles; respond to venue enquiries; identify potentially suitable independent chefs and facilitate introductions; operate the waiting list and send the requested membership updates and offer; administer separately requested newsletters; provide support; keep necessary agreement and approval evidence; handle withdrawal, complaints and disputes; protect security; and meet legal obligations.
An application is not consent to publish a profile. A Work Request or application does not automatically subscribe anyone to marketing. Joining the waiting list requests communications about the relevant Chef Harbour membership opportunity, not unrelated campaigns. Retaining an unsuccessful application for a separate waiting-list purpose requires the person’s agreement. We do not use introduction contact details as an unrelated marketing list without an applicable lawful basis.
Only approved Flagship profiles are published during launch. A participating chef gives a recorded approval of the intended profile content and a clearly described publicity permission covering the directory, organic Chef Harbour social posts and Chef Harbour newsletters promoting that chef. Only approved contact channels are made public. Material changes to professional claims or public contact channels require further approval. Paid advertising and unrelated endorsements are outside this permission.
Public material may be viewed, copied, indexed or reposted by others. On a pause or withdrawal from the directory, we remove the public profile reasonably promptly. On that event, or a request to stop promotional use, we also remove relevant promotional posts from channels we control reasonably promptly, stop scheduled and future promotional use, and remove relevant accessible newsletter archives we control. Stopping optional promotion alone does not require removal of the directory listing. We cannot recall delivered emails or guarantee removal of independent reposts, search caches or copies held by others. Necessary private agreement and approval evidence may be retained as described below.
We review a venue’s needs and may first send a potentially relevant chef limited opportunity information, avoiding identifying details where practicable. A combination of location, dates or unusual requirements may itself identify a venue, so we consider what is necessary before sharing. When the chef expresses interest, we may exchange names, work locations and appropriate contact information with relevant notice and permission to arrange the introduction. We do not publish venue enquiries.
If no suitable listed chef is available, we may seek a lawful basis to approach an external chef or separately offer Hidde’s services as The Dutchman, expressly identifying that connection before the venue decides. We do not share an external chef’s non-public information without appropriate permission. Chefs and venues have independent responsibilities for information they exchange directly.
We normally collect information from the person or their authorised representative. Referrals, public professional sources or information supplied by a venue may also be used where there is an applicable basis under Information Privacy Principle 2. Where Principle 3A applies, we take reasonable steps to provide the required notice as soon as reasonably practicable unless an exception applies, and record the basis for any exception. Public availability alone does not authorise unrelated marketing or publication of a profile.
We use Framer for website hosting and native analytics; Fillout for forms; Kit for the Chef Harbour newsletter and email reporting; 1st Domains for business email hosting and forwarding; and OpenAI’s ChatGPT for the limited assistance described below. Access is restricted to people and providers who reasonably need information for the stated purpose. We may also disclose necessary information to professional advisers or authorities where justified or required by law. We do not sell personal information to advertisers.
Fillout stores completed submissions. Partial-submission collection is disabled; this does not mean no technical service logs are processed before submission. The only configured external workflow is email notification, with no Zapier, Make, CRM, payment or other external workflow integration at launch.
Chef Harbour form notifications and Kit administrative new-subscriber alerts are sent to info@chefharbour.co.nz. Enquiries and form submissions are received through our business email systems and may be forwarded internally to email accounts managed by our operator, Hidde Meijers, for administration and response purposes, forwarded copies or correspondence may also be retained. Kit maintains the subscriber database separately; signup alerts do not transfer that entire database to the mailboxes.
A business transfer may require limited information to be disclosed to advisers or a prospective successor where the Privacy Act permits, with appropriate confidentiality and security. A continuing successor receives only information lawfully transferable for the continuing service. We provide any required notice; this is not blanket consent to sell personal information.
Kit manages the newsletter’s existing confirmation process, subscription records, delivery and unsubscribe controls. We use basic open and click reporting: an invisible email image and tracked link interactions may indicate whether a subscriber opened a message or clicked a link. These reports may relate to an identifiable subscriber and are not the same as Framer’s aggregate website statistics.
At launch we do not use Kit’s advanced subscriber-ID or hashed-email URL parameters, automatic global UTM tagging, Creator Network recommendations, paid recommendations, newsletter advertising, website tracking pixel or Insights installation, or third-party advertising integrations. General non-person-specific campaign labels may be used separately.
Commercial messages require an applicable consent basis, identify the sender and provide an easy unsubscribe. We honour unsubscribe requests within five working days and keep the unsubscribe facility functional for at least 30 days after sending. Unsubscribing from marketing does not prevent necessary communications about an existing agreement or open request. We keep only necessary suppression evidence to honour the request. External opportunity outreach using a published business address is sent only where a lawful consent basis, including the conditions for deemed consent where applicable, exists.
We use Framer’s built-in website analytics to understand aggregate visits, page views, traffic sources, referring sites, country and device categories, campaign performance and, where supported, limited button-click counts. Framer states that its standard analytics use no analytics cookies or persistent visitor identifiers. Its documentation describes processing IP addresses and browser user-agent information using a daily rotating hash to calculate daily unique visits. We receive aggregate reporting rather than a named visitor history. A button click is not treated as proof of a completed form submission.
At launch we do not use Google Analytics, Google Tag Manager, Meta Pixel, advertising retargeting, heatmaps or session recordings. Campaign labels and event names are used to measure general activity; we do not deliberately place names, email addresses or private enquiry details in analytics parameters. Embedded forms, newsletter services and website infrastructure may still process technical information for delivery, security and their disclosed functions. We do not describe the entire site as cookie-free merely because Framer analytics is cookie-free. We provide additional notices or choices where applicable law requires them.
We use ChatGPT, provided by OpenAI, to assist with copywriting, proofreading, professional-profile content, business documents and website or design reviews. Selected text, professional contact details, photographs and other relevant material may be supplied manually for a specific task. We have no automatic connection supplying Fillout submissions or Kit subscriber lists to ChatGPT. Our account is configured with the model-training opt-out. We limit inputs to what is reasonably needed, avoid unnecessary sensitive or confidential information, restrict project access, check outputs and delete working material when no longer needed. Before supplying identifiable unpublished material for this external AI-assisted work, we explain the intended use and obtain the relevant person’s informed approval where required. Public-profile approval is not unlimited permission for unrelated AI use. Provider retention and lawful exceptions may still apply; training opt-out does not mean immediate deletion or zero retention.
We take reasonable security safeguards proportionate to the information, including restricted access, account security, careful sharing and provider assessment. No online system is risk-free. We assess suspected privacy breaches promptly and notify the Privacy Commissioner and affected people where the Privacy Act requires, including where a breach has caused or is likely to cause serious harm, subject to applicable exceptions.
Our providers and their supporting providers may process or store information in New Zealand and overseas. We do not promise a particular country of storage or a single backup-expiry period across all services. We remain responsible for personal information held or processed on our behalf and take reasonable steps to assess provider safeguards. Where a transfer is a disclosure to an overseas recipient for its own purposes, we must have an applicable basis under Information Privacy Principle 12, including comparable safeguards where required. This policy is not blanket consent to overseas disclosure without those protections.
We delete or irreversibly anonymise unsuccessful applications and venue Work Requests from operational systems within 30 days after closure, unless a documented lawful reason requires specific information to be retained longer. Closure occurs on withdrawal, decline, completion without an introduction, or cessation of active progress after reasonable follow-up. Open cases are reviewed and are not left open solely to avoid deletion.
For successful introductions, we keep a minimal accountability record for up to 12 months from introduction: participant identifiers, date, permissions and details of what was shared. Unnecessary full correspondence is deleted earlier. Complaints or disputes may justify holding relevant evidence separately for longer, with a recorded reason and review date.
Approved profile information is kept during participation and necessary withdrawal administration. During an agreed Flagship pause, we retain the minimum private information needed to reserve the entitlement and support reactivation for up to 12 months or the mutually agreed period. A chef can ask us to delete working profile material and supply it again when returning. The entitlement record is separate from public display.
We normally retain the accepted Flagship agreement, essential acceptance and publication/publicity approval evidence, agreed variations and termination record during participation and for six years after the agreement ends, subject to a documented continuing need or legal hold. This does not justify retaining every image, draft or email, and is not a statement that every claim expires six years after termination.
Waiting-list and newsletter records are retained while needed for the requested purpose and reviewed periodically. After withdrawal we retain only necessary suppression, consent or dispute evidence. Relevant tax and accounting records follow the applicable statutory period, generally at least seven tax years. AI working uploads and review material are deleted when the task and any necessary review are complete, except for specifically justified records. Archiving a chat alone is not treated as deletion.
We review and delete information manually. Deletion covers relevant active form records, originating and forwarded email copies, attachments, working files and other copies we control. Deleting a record from one service does not automatically delete copies elsewhere. We have not configured a separate independent backup system. Service providers may retain residual copies in backups, archives, security logs or recovery systems under their applicable retention arrangements or lawful preservation requirements. These copies may not be erased immediately when an active record is deleted. We use available deletion controls, make provider requests where appropriate, and take reasonable steps to prevent restored information being returned to ordinary use when it should have been deleted. These qualifications do not authorise indefinite retention or remove our Privacy Act responsibilities.
You may request access to personal information we hold about you, correction of it, removal of public material or deletion of information no longer needed, subject to applicable law. We respond within the Privacy Act timeframes and explain any relevant refusal or continuing retention. If we decline a correction, you may request that a statement of the correction sought be attached where the law provides. You do not need to contact each provider first.
Contact Hidde Hein Meijers at info@chefharbour.co.nz. Provide enough information to locate the records without unnecessary identity documents. If we cannot resolve a privacy concern, you may complain to the Office of the Privacy Commissioner at https://www.privacy.org.nz/.
The service is intended for professional hospitality participants. We do not knowingly seek applications from people under 18 acting without appropriate authority.
We update this policy when practices or legal requirements change and identify the effective version. Material changes receive appropriate notice. Updating a page does not replace any additional notice, permission or lawful basis required for a new use or disclosure.
Provider information: Framer privacy statement (https://www.framer.com/legal/privacy-statement/); Fillout privacy policy (https://www.fillout.com/privacy); Kit privacy policy (https://kit.com/privacy); 1st Domains privacy policy (https://1stdomains.nz/info/privacy-policy); OpenAI privacy policy (https://openai.com/policies/privacy-policy/). These sources provide further information about provider practices. They supplement this policy and do not replace our obligations, change your agreement with us or require you to contact a provider instead of us to exercise your rights.