Not legal advice
PolicyPilot NZ is a drafting tool, not a law firm, and nothing on this site, in a generated draft, or in correspondence with us is legal advice. We do not review your specific facts, we do not form a lawyer-client or advisor-client relationship with you, and the generator is built to be generally applicable to businesses operating in New Zealand, not to your particular circumstances. If a decision carries real legal, financial or regulatory weight, have it reviewed by a qualified professional before you rely on it.
Not a guarantee of compliance
Answering the questionnaire and generating a draft does not guarantee compliance with the Privacy Act 2020, its Information Privacy Principles, the notifiable-breach scheme, or any other law, code or regulator guidance referenced here. Compliance depends on facts specific to your business — your industry, your contracts, the data you hold, the systems you run and how you actually operate — none of which we know when we generate a draft from a short set of answers.
This is an early beta
PolicyPilot NZ exists because none of the large policy-generator platforms have built proper New Zealand coverage — this tool is here to make the process simpler while that gap remains, not to replace it. It currently generates a website privacy policy only. Expect rough edges, gaps, and changes as coverage and wording improve. Treat every draft as a work in progress, not a finished document.
Jurisdiction: New Zealand only
The generator is written to New Zealand law and New Zealand government guidance — the Privacy Act 2020, its Information Privacy Principles, and Office of the Privacy Commissioner guidance. It is not written to Australian, UK, US, EU or any other jurisdiction's law. If your business operates outside New Zealand, or holds personal information from people outside New Zealand, this draft is not written for that and should not be relied on for it.
Currency: law and guidance change
Every draft is stamped with the date the underlying wording was current. Between that date and when you rely on the draft, the law or a regulator's guidance can change without this site being updated immediately — recent examples include the new IPP 3A notification obligation (in force from 1 May 2026) and the CERT NZ to NCSC integration. The generator flags when the sources behind a clause have moved since your draft was built; always check that flag, and check the source links for anything that looks like it may have moved on.
How the draft is grounded
Each clause in a generated draft is mapped to a specific Information Privacy Principle or statutory obligation, cited in the draft's Sources appendix. Where a practice you flagged (such as automated decision-making, or health or children's information) has no clean New Zealand basis for a specific clause, the generator does not invent one — it lists the item under "Items to review before you publish" instead, so you know exactly what still needs a professional's attention.
Third-party sources and links
Drafts cite and link to the Office of the Privacy Commissioner, the New Zealand legislation website, and occasionally other government or regulator sources. We do not control these external sites, cannot guarantee they remain accurate or online, and linking to a source is not an endorsement of everything else on that site. If a cited link has moved or the underlying guidance has changed, the draft's own text is what we stand behind, not the live state of a third-party page.
Using the generated draft
The generated draft is an editable starting point, not a finished policy. It has fields you must complete, decisions you must make for your own business, and sections you may need to delete or add to depending on what you actually do. A draft is only as good as the accuracy of what you told the questionnaire and the review it gets from someone with authority to approve it inside your business.
No warranty
PolicyPilot NZ, its generator and its generated drafts are provided "as is" and "as available," without warranty of any kind, express or implied, including but not limited to warranties of accuracy, completeness, fitness for a particular purpose, or non-infringement. To the maximum extent permitted by law, we disclaim all such warranties.
Limitation of liability
To the maximum extent permitted by law, PolicyPilot NZ and the people who produce it are not liable for any loss or damage arising from your use of, or reliance on, this site, its generator, or its generated drafts — including any failure to comply with a law, framework or standard, any regulatory action, or any business loss. Nothing in this disclaimer excludes or limits liability that cannot lawfully be excluded or limited under the New Zealand Consumer Guarantees Act or equivalent law that applies to you.
Changes to this disclaimer
We may update this page as the generator, its coverage, or the law changes. The version that applies is the one published at the time you use the site.