Privacy policy
Last updated: 1 November 2026
Who we are
ten.fifteen is a software and cybersecurity studio working from Christchurch, New Zealand and Yokohama, Japan. This policy covers personal information we collect through this website, 1015.dev.
Information you send us through this site is held by us and is not shared with anyone else except the service providers named below, who process it on our behalf.
What we collect
If you use the contact form, we receive what you type into it: your name, your company if you give one, your email address, the location and the kind of work you select, and the message itself. Nothing else about you is collected with it.
The form is protected by Cloudflare Turnstile, which checks that a submission is not automated. Turnstile receives your IP address and some technical signals from your browser in order to make that check.
Like any site, ours sits behind a server that keeps short-lived request logs — IP address, the page requested, the time, and the browser’s user-agent string — which we use to keep the site available and to investigate abuse.
We use Google Analytics to see how the site is used — which pages are read, how people arrive at them, and roughly how many visitors there are. It sets cookies in your browser and sends Google your IP address, the pages you visit, an approximate location worked out from that address, and basic information about your device and browser. We read it only in aggregate: we do not use it to identify you, we run no advertising, and the Google settings that would share this data for advertising are switched off.
If you would rather not be counted, Google publishes a browser add-on that turns Google Analytics off on every site, and any tracker-blocking extension, or a browser that blocks these cookies, does the same thing here. Nothing on this site stops working if you do.
How it is used
We use what you send to answer you, and, if that turns into a piece of work, to carry it out. That is the only reason we have it.
We do not sell personal information, and we do not add you to a mailing list. If you ask us a question and we never hear from you again, your enquiry simply stays in our email until it is cleared out.
Where it is held
The site is served by Cloudflare, whose network spans many countries. Enquiries are delivered to us by Mailgun, which processes them in the United States, and are then held in our business email. Analytics data is processed by Google, also in the United States. This means your enquiry, and the analytics record of your visit, are both processed outside New Zealand and Japan by those providers.
We keep enquiries only as long as they are useful: correspondence that does not become a project is deleted once it is clearly finished with, and project records are kept for as long as we work together and for a reasonable period afterwards for tax and legal reasons.
Your rights
You can ask us what personal information we hold about you, ask us to correct it, and ask us to delete it. Email us and we will act on it; we will not charge you for a reasonable request.
In New Zealand these rights come from the Privacy Act 2020, and you may complain to the Office of the Privacy Commissioner. In Japan the Act on the Protection of Personal Information applies, and the Personal Information Protection Commission is the equivalent body. If you are in the United Kingdom or the European Union, you also have the rights the UK GDPR and the GDPR give you.