TheBackBenchersTech

TheBackBenchersTech

Logo of TheBackBenchersTech

TheBackBenchersTech

Welcome to TheBackBenchersTech, where innovation meets excellence. We specialize in Web Development, App Development, Graphics Design, Content Creation, Data Analytics, SEO, and Social Media Marketing. Our dedicated team delivers tailored solutions to drive your business’s growth and success.

CONTACT US

Privacy Policy
HomePrivacy Policy

Effective Date: July 2026

Website: thebackbencherstech.com

At The Backbenchers Tech (“Company”, “we”, “our”, or “us”), we are committed to upholding the highest standards of data security and transparency across our agency services, backend platforms, and proprietary software applications. As a New Zealand-registered entity operating globally across New Zealand, Australia, the United Kingdom, and India, we handle personal data strictly in compliance with the New Zealand Privacy Act 2020 and international data protection standards. This policy applies to our main agency website, our proprietary SaaS platforms including TBB SmartDine, TBB FormFlow, and TBB Backend App and all service integrations accessing client analytics, Search Engine Optimisation (SEO), and Social Media Marketing (SMM) data.

1. Information We Collect

A. Agency & Direct Inquiries

When you request a quote, submit a contact form, or engage our services:

  • Contact & Project Details: Name, business email, phone number, company name, and project specifications.
B. Client API Integrations & Marketing Data (SEO & SMM)

When managing or integrating digital platforms for our agency clients (such as Google Search Console, Google Analytics 4, Meta Business Manager, PageSpeed Insights, or social media platforms):

  • API Tokens & Service Accounts: We utilize service accounts, API keys, and OAuth 2.0 access tokens to safely query search performance, keyword rankings, impressions, user engagement, and social media advertising performance.
  • Scope of Access: API access is strictly limited to reading and processing data necessary to populate reporting dashboards or execute authorized automation tasks. We do not sell or expose client API tokens or proprietary performance data to third parties.

C. Proprietary SaaS Platforms

TBB SmartDine App (Restaurant POS & Ordering)

When diners, restaurant staff, or management interact with TBB SmartDine:

  • Customer Order Details: Customer name, phone number, email, table numbers, delivery/takeaway instructions, and order items.
  • Restaurant Management Accounts: Login credentials, menu data, staff user roles, and sales transaction logs.
TBB FormFlow & TBB Backend App

When clients or end-users submit data through TBB FormFlow or interact with the TBB Backend App:

  • Form Submissions & Workflow Data: Information submitted via custom forms (e.g., dynamic fields, contact forms, file uploads, and workflow states).
  • System Logs & User Roles: User IDs, administrative logs, IP addresses, and authorization credentials used for system audit trails and security monitoring.

2. Our Legal Roles: Data Controller vs. Data Processor

To provide complete transparency under global data protection laws:

  • When we are the Data Controller: We control personal data collected directly through thebackbencherstech.com for our own business marketing, client relationship management, and administrative billing.
  • When we are the Data Processor: For platforms like TBB SmartDine, TBB FormFlow, and our TBB Backend App, our clients (e.g., restaurant owners, businesses) act as the Data Controller regarding their customers’ or users’ personal details. The Backbenchers Tech acts as the Data Processor, hosting and running the infrastructure securely on their behalf.

3. How We Use Your Information

We process personal and technical data solely for legitimate operational purposes:

  • Providing, operating, and maintaining our agency solutions, SaaS apps (TBB SmartDine, TBB FormFlow, TBB Backend), and client web platforms.
  • Authenticating service account and OAuth connections to retrieve SEO, SMM, and analytics performance data for client dashboards.
  • Processing restaurant orders, reservations, and customer notifications via SmartDine.
  • Maintaining cloud platform security, debugging backend system errors, and preventing unauthorized access or fraud.
  • Fulfilling legal, auditing, and accounting obligations under New Zealand law.

4. Third-Party Integrations & API Safeguards

Our platforms integrate with trusted third-party providers and APIs:

  • Google APIs & Developer Services: (Google Analytics, Google Search Console, PageSpeed Insights, Google Maps/reCAPTCHA). Data accessed via Google APIs is used strictly to render performance reporting and ensure form security, adhering fully to Google API Services User Data Policies.
  • Meta & Social Media APIs: Used exclusively to monitor authorized ad performance, post analytics, or manage connected page interactions.
  • Cloud Infrastructure & Webhooks: Hosted on secure cloud environments utilizing encrypted databases and SSL/TLS transmission protocols.

5. International Data Transfers

Because we serve clients across New Zealand, Australia, the United Kingdom, and India, data processed by our applications (including SmartDine, FormFlow, and Backend systems) may cross international boundaries.

Under Information Privacy Principle 12 of the NZ Privacy Act 2020, we ensure that all cloud providers and server facilities hosting our backend systems maintain industry-standard security safeguards (encryption at rest and in transit) comparable to New Zealand privacy protections.

6. Data Security & Retention

  • Security Protocols: We enforce strict role-based access control (RBAC), API key encryption, and HTTPS/SSL data pipelines across all TBB platforms.
  • Retention Standards:
  • Agency client and billing records are kept for 7 years to meet New Zealand tax compliance (IRD).
  • SaaS transaction logs (e.g., SmartDine orders) and FormFlow submission records are retained for as long as active by the restaurant/client account holder, after which data is securely archived or deleted.
  • API access tokens can be revoked by clients at any time via their respective Google, Meta, or third-party account security dashboards.

7. Your Rights

Under the New Zealand Privacy Act 2020 (and applicable international laws like the UK/EU GDPR and Australian Privacy Act), you have the right to:

  1. Access: Request a copy of the personal information we hold about you.
  2. Correction: Request that we update or correct inaccurate or out-of-date personal information.
  3. API Access Revocation: Revoke TBB application permissions directly through your Google, Meta, or third-party account settings at any time.

If you are an end-customer of a restaurant or business using TBB SmartDine or TBB FormFlow, you may also reach out directly to the respective business (the Data Controller) to process your data request.

8. Contact Us

If you have questions regarding this Privacy Policy, your API permissions, or data handling across our TBB applications, please contact us: