Privacy
What I do with your information.
The short version: I collect as little as I can, I tell you where it goes, and you can ask for it back or ask me to delete it whenever you like.
The longer version is below. It describes the services that actually run on this website, checked against the code rather than copied off a template. I am Lian Passmore, I trade as dreamstorm, I am based in Whangārei, and I am the person responsible for the information collected here.
Last updated 25 August 2026
What I collect, and why.
/contact
The contact form
Your name, your email, your organisation if you choose to give it, and your message. It is sent straight to my inbox. There is no database record of it at all. I use it to reply to you.
/contact and /community-hour
Booking a call
The calendar on those pages is Google's appointment scheduling, embedded from Google Calendar. When you book, your name, your email and anything you type into the booking go to Google, and the booking lands in my calendar. Google's own terms cover that booking.
/webinar
Webinar registration
Your first name, email, business name, what you do, any questions you want covered, where you are up to with AI, and how you heard about the session. This one is stored in my database. I use it to run the session, send you the joining link, and send you the recap afterwards.
closed, and no longer collecting
The AI Curious wait list
Your first name, your email, and what you do if you answer that question. Stored, along with a private token that belongs only to your entry, so that the unsubscribe link can remove you and nobody else. AI Curious is not going ahead for now, so nothing new is being collected and everyone on the list has been told. If you are on it, the unsubscribe link in your email still takes you off, or email me and I will do it.
sent to you by link
Feedback forms
Your name and business as you typed them, your answers, and a testimonial if you write one. Stored. If you write a testimonial you choose whether it can be used with your name on it or anonymously, and I use it only the way you chose.
/diagnostic and /quiz
The diagnostic and the quizzes
Your answers work out a result in your browser and, if you ask for the longer read, send you an email. None of your answers are stored in a database. The email goes out and that is the end of it.
What I do not do.
- I do not sell your information, and I do not hand it over for anybody else's marketing.
- I do not train AI models on it.
- There is no AI system running on this website. The diagnostic and the quizzes are ordinary rules I wrote by hand, not a model forming a view about you.
- I do not use advertising pixels or ad network trackers.
Cookies and analytics.
Two things count visits here, and they are not the same as each other.
Vercel Web Analytics sets no cookies and does not follow you between sites. It counts pages and where visitors arrived from.
Google Analytics 4 was added on 25 August 2026, and it is the one worth telling you about properly. It does set cookies in your browser, and it sends information to Google, including to servers in the United States. It records which pages you look at, roughly where in the world you are, and three things I have deliberately asked it to record: when someone clicks a "Book a free half hour" button, when the booking calendar scrolls into view, and when the contact form is sent successfully. It records that those things happened. It does not record anything you typed. Google Analytics does not keep your full IP address.
If you block analytics, nothing on this site breaks. It is not doing any work that you depend on.
The homepage has a video on it. The still image is loaded from YouTube, so YouTube knows the image was requested, but nothing plays and no YouTube cookie is set until you press play. It uses the no-cookie version of the embed. One minor page, /bea, loads its fonts from Google Fonts. Every other page on the site serves its fonts from here, so no font request goes to Google.
Where your information is held.
Plainly: what you give me is held outside New Zealand. Here is exactly where.
- The website is hosted by Vercel, a United States company, on servers in several countries.
- The database that holds registrations, wait list entries and feedback is Supabase, and that database sits in Singapore.
- Email is sent through Resend, a United States company.
- Google receives analytics data, and receives your booking if you book a call through the calendar.
Each of those companies holds the information to provide a service to me, not to use for their own ends, with the exception of Google Analytics, where Google's own terms apply to what it collects.
Being straight about this
Māori data sovereignty.
I hold to Māori data sovereignty as a principle, so I want to name where this website falls short of it rather than let the principle do PR work it has not earned.
Information collected here sits on infrastructure owned by overseas companies, in Singapore and the United States. That is not tino rangatiratanga over data, and I am not going to write it up as though it were. It is what this site does today, and naming it is what I owe you while it is still true.
If you would rather your details did not go into those systems, email me or ring me and I will keep it out of them. The principles I am working to are those of Te Mana Raraunga, and they belong to Te Mana Raraunga.
How long I keep it.
I am still writing a proper retention schedule, and I would rather tell you that than invent a policy I do not yet follow.
As things stand: registrations, wait list entries and feedback stay in the database while they are still doing the job you gave them for. Messages from the contact form live in my email. Analytics data is kept by Google on its own schedule.
You do not have to wait for me to finish that schedule. Ask me to delete something and I will delete it.
Your say over it.
You can ask me what I hold about you, ask me to correct it, ask me to delete it, or take yourself off any list. Email lian@dreamstorm.org.
Under the Privacy Act 2020 I have 20 working days to answer a request to see or correct your information. In practice I will be quicker than that.
Every marketing email I send has a working unsubscribe link in it. One click, and you are off.
If something goes wrong.
If there is a privacy breach here that could cause serious harm, I have to tell the people affected and the Office of the Privacy Commissioner, and I will.
If you are unhappy with how I have handled your information, tell me first and give me the chance to put it right. If that does not settle it, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.
This statement is written for New Zealand's Privacy Act 2020. If I change what the site collects, I change this page, and the date at the top moves.