Skip to content

Privacy Policy

Last updated: March 2026

Who We Are

FreeSip is an Auckland-based company that distributes free water bottles at universities and public events. Advertising on the bottles covers the cost, so the water is free for you.

This policy explains how we handle information when you visit our website (freesipnz.com) or scan a QR code on one of our bottles.

What We Collect

When you scan a QR code

Scanning a QR code on a FreeSip bottle sends you through our redirect service before landing on the advertiser's website. During that redirect, we record:

  • Which advertiser's code was scanned — so we can report how many people engaged with their campaign.
  • When — the date and time of the scan.
  • Device and browser info(User-Agent header) — so we can report device breakdowns (e.g., “60% iPhone, 40% Android”).
  • Approximate location (city and country only) — derived from your IP address at the network edge, not from GPS.
  • A scrambled version of your IP address — we never store the real IP. We run it through a one-way hash (SHA-256) so we can approximate unique visitor counts without knowing who you are.

When you use our contact form

We collect the name, company, email address, and optional message you provide. This is used solely to respond to your enquiry.

When you browse our website

We do not use cookies for tracking. We may use basic hosting analytics (e.g., Vercel Analytics) that record page views and performance metrics without identifying individual visitors.

Why We Collect It

QR scan data lets us tell advertisers how their campaigns are performing — that's the core of our business model. Without it, we can't offer free water. We only collect what's necessary for aggregate campaign reporting. We do not build individual profiles or attempt to identify you personally.

Who Sees Your Data

  • FreeSip team — to operate the service and generate advertiser reports.
  • Advertisers— receive aggregate statistics only (e.g., “1,200 scans this month, 55% from Auckland”). They never see individual scan records.
  • Service providers — we use Supabase (database), Vercel (hosting), and Resend (email) to run our service. These providers process data on our behalf under their own privacy policies.

We do not sell your data. We do not share individual-level data with anyone.

How We Protect It

  • All data is transmitted over HTTPS.
  • IP addresses are hashed before storage — we never store the original.
  • The admin dashboard is protected by authentication and an email allowlist.
  • Database access is restricted with row-level security policies.

How Long We Keep It

QR scan data is retained for up to 24 months from the date of the scan, after which it is deleted. Contact form submissions are retained for as long as needed to respond to your enquiry.

Your Rights

Under the NZ Privacy Act 2020, you have the right to:

  • Access — request a copy of any personal information we hold about you.
  • Correction — ask us to correct any inaccurate information.
  • Complaint— if you believe we've mishandled your information, you can contact us directly or lodge a complaint with the Office of the Privacy Commissioner.

Because we hash IP addresses, we may not be able to identify your specific scan records — but we'll do our best to help with any request.

International Visitors

FreeSip operates in New Zealand and our bottles are distributed locally. If you're visiting from the EU or another jurisdiction with stricter data protection laws, please be aware that your scan data is processed under NZ law. Our approach — minimal collection, hashed IPs, no profiling, no cookies — is designed to meet a high standard regardless of jurisdiction.

Changes to This Policy

We may update this policy from time to time. The “Last updated” date at the top will reflect any changes. We won't reduce your rights without notice.

Contact Us

If you have questions about this policy or your data, reach out: