1. Who We Are
My Trade Flow is operated by LSCH Limited (trading as My Trade Flow), a New Zealand registered company. We provide pipeline management software for trades businesses.
Contact: hello@mytradeflow.co.nz
2. Scope
This Privacy Policy applies to all services provided through mytradeflow.co.nz and its subdomains (e.g., energon.mytradeflow.co.nz). It explains how we collect, use, store, and protect personal information in compliance with the New Zealand Privacy Act 2020.
3. Information We Collect
3.1 Information You Provide
- Account information: Name and email address via Microsoft 365 sign-in
- Pipeline data: Lead names, phone numbers, email addresses, physical addresses, and notes that you enter into the dashboard
- Booking information: Site visit dates, times, and notes
3.2 Information Collected Automatically
- Authentication tokens: Microsoft 365 access tokens for cloud sync (stored locally in your browser)
- Usage data: Basic interaction data for system functionality (not analytics or tracking)
3.3 Third-Party Data
- Fergus job data: Job numbers, customer names, job statuses, and descriptions synced via the Fergus Partner API
4. How We Use Your Information
We use personal information solely to provide the My Trade Flow pipeline management service. Specifically:
- To display and manage your sales pipeline
- To sync data with Fergus and Microsoft 365 at your direction
- To enable multi-device access via cloud sync
- To maintain and improve the service
We do not sell, rent, or share your personal information with any third party for marketing purposes.
5. Data Storage & Security
5.1 Where Data is Stored
- Browser localStorage: Pipeline data is stored locally in your web browser. This means your data stays on your device by default.
- Microsoft OneDrive: When cloud sync is enabled, an encrypted backup is stored in your own OneDrive account (under your control).
- Netlify: The application code is hosted on Netlify. No pipeline data is stored on Netlify servers.
5.2 Security Measures
- All connections use HTTPS/TLS encryption
- Authentication via Microsoft 365 (OAuth 2.0 / MSAL)
- API keys are stored as environment variables on Netlify, never in client-side code
- Each tenant operates on an isolated subdomain with separate configuration
- Fergus API access is proxied through a serverless function to protect API credentials
- No passwords are stored by My Trade Flow — authentication is delegated to Microsoft
6. Your Rights Under the Privacy Act 2020
Under the New Zealand Privacy Act 2020, you have the right to:
- Access: Request access to any personal information we hold about you (Information Privacy Principle 6)
- Correction: Request correction of any inaccurate personal information (IPP 7)
- Deletion: Request deletion of your personal information. Since data is stored in your browser and your OneDrive, you can delete it directly at any time.
- Complaint: Lodge a complaint with the Office of the Privacy Commissioner if you believe your privacy has been breached
To exercise any of these rights, contact us at hello@mytradeflow.co.nz.
7. Third-Party Services
My Trade Flow integrates with the following third-party services. Each has its own privacy policy:
8. Cookies
My Trade Flow does not use tracking cookies, analytics cookies, or advertising cookies. We use browser localStorage for application functionality only (storing your pipeline data and authentication state). No third-party cookies are set.
9. Data Retention
Pipeline data remains in your browser localStorage and OneDrive for as long as you choose to keep it. We do not retain copies of your data on our servers. When you clear your browser data or delete your OneDrive backup, the data is permanently removed.
10. Data Breach Notification
In the event of a privacy breach that poses a risk of serious harm, we will notify the Office of the Privacy Commissioner and affected individuals as required under Part 6 of the Privacy Act 2020, without undue delay.
11. Children's Privacy
My Trade Flow is a business tool and is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Material changes will be communicated to active users via email.
13. Contact
If you have any questions about this Privacy Policy or how we handle your data:
LSCH Limited t/a My Trade Flow
Email: hello@mytradeflow.co.nz
Website: mytradeflow.co.nz