Privacy policy

Last updated 18 October 2026.

TopGas is the trading name of North Harbour Hire Limited (“TopGas”, “we”, “us”), 646 East Coast Road, Pinehill, Auckland 0630. We deliver LPG gas cylinders in New Zealand.

This policy explains what personal information we collect, why we collect it, who we share it with, how long we keep it, and how you can see and correct it. We follow New Zealand’s Privacy Act 2020.

It covers our customers and the people at their delivery sites, anyone who signs up with us or sends us an enquiry, and anyone who visits the TopGas app (app.topgas.co.nz).

What we collect, and why

When you sign up or become a customer

• Your name, email address, phone and mobile numbers, and delivery and postal addresses.
• For a business: its legal and trading names, its NZ Business Number or company number, its GST number, and your job title.
• Your date of birth.
• Whether you own or rent the property and, if you rent, your landlord’s name, mobile number and email address.
• About the delivery site: where the cylinders go, what you use gas for, anything our driver should know (such as a dog, steps, a steep driveway or a locked gate) and any access notes you give us.
• That you agreed to our terms and conditions, which version and when; and whether you agreed to receive marketing, the words you agreed to and when.
• When you sign up online, the internet address (IP address) and browser of the device you used, to protect the form from misuse.

We use this to set up and run your account, deliver your gas safely, invoice you and contact you about your account.

We use your date of birth to confirm it is really you when you phone us — for example to place an order or to talk about your account — and for credit checks on business accounts (below). It never appears in the emails we send.

Checks on business accounts

When a business applies for an account with us, we check the business and its directors on public registers (the New Zealand Business Number register and the Companies Office), and we may check the business’s credit with a credit reporting agency. We check the credit of a person — a sole trader, partner, director or guarantor — only with their permission. The credit reporting agency keeps a record that we made the check.

If you do not give us information

• Without your name, address and contact details we cannot open an account for you or deliver to you.
• Without your date of birth we cannot confirm it is you when you phone us.
• Agreeing to marketing is up to you; saying no makes no difference to your account or your deliveries.

The people on your account

For each contact on an account: their name, role, phone numbers and email address, which sites they look after, and which emails they want from us (for example invoices or delivery emails). We keep a record of each change to what they are sent, who made it and how they told us.

Enquiries from our website

When you use the contact form on our website we receive your name, email address, phone number, area and your message, so that we can reply.

Orders and deliveries

• What you order, when, the prices and any purchase order number.
• When our driver arrives and leaves, which cylinders (by serial number) are delivered and collected, and the location our driver’s phone recorded at those moments.
• A photo taken at delivery as proof of delivery, and photos of a site or a cylinder when there is a problem. A photo may show part of your property.

Payments and invoices

• If you pay by card, you type your card details into a form provided by Stripe, our payment provider. TopGas never sees your full card number and does not store it. We keep what Stripe tells us: the card type, the last four digits, the expiry month and year, and Stripe’s reference for the payment.
• If you ask us to save a card for later orders, we keep the time you agreed and the words you agreed to. You can ask us to remove a saved card at any time.
• Invoices, payments and refunds are recorded in Xero, our accounting system.

Your online account

Your email address, your password in a scrambled (hashed) form that cannot be read back, when you signed in, and for each sign-in the IP address and browser used — to keep your account safe and to lock it after repeated wrong passwords.

Emails we send you

Who each email went to, its subject, when it was sent and whether it was delivered. We do not keep a copy of the email itself.

Cookies and your device

The app uses cookies only to keep people signed in. We do not use advertising or tracking cookies or analytics tools. The app remembers a few settings on your own device (for example, that you dismissed a suggestion to install it).

Who we share it with

We do not sell personal information. We share it only with the services that help us run TopGas, and only what each needs:

• Stripe — takes card payments. It receives your name, email address and the payment.
• Xero — our accounting system. It holds your account name, billing address, invoices and payments, and the names and email addresses of the people who receive invoices, and emails your invoices.
• Render — hosts the TopGas app and its database.
• Cloudflare — stores the photos and documents the app keeps.
• Resend — sends the emails the app sends.
• Google — receives the enquiries from our website’s contact form (in a Google Sheet), and works out driving times between delivery points (only the map position of each point is sent).
• Land Information New Zealand (LINZ) — when you type an address, it is checked against the official address list.
• The New Zealand Business Number register and the Companies Office — to check a business exists.
• A credit reporting agency — when we check the credit of a business that applies for an account, as above.

Our drivers see what they need for a delivery: the site, its address, access notes and who to ring. We may also share information where the law requires or allows it.

Storage outside New Zealand

Our database and app servers are in Singapore. Our card payment, accounting, email, map and photo storage providers keep information in other countries, including the United States.

How long we keep it

We keep invoices, orders, deliveries and payment records for seven years, because New Zealand tax law requires it. We keep everything else only as long as we need it.

Keeping it safe

The app is reached only over an encrypted connection. Passwords are stored scrambled. Card numbers are held by Stripe, never by TopGas. Our staff see only what their job needs, and every sign-in is recorded. If a privacy breach is likely to cause anyone serious harm, we will tell the people affected and the Privacy Commissioner, as the Act requires.

Your right to see and correct your information

You can ask for a copy of the personal information we hold about you, and ask us to correct anything that is wrong. Contact our Privacy Officer using the details below. We will answer as soon as we can, and within 20 working days.

You can switch off delivery emails yourself in your online account, under My details. To stop marketing, or to change which emails you get, tell us.

If you are not happy with how we have handled your information, please tell us first. You can also complain to the Office of the Privacy Commissioner: privacy.org.nz.

Contact us

Changes to this policy

We may update this policy. The date at the top says when it last changed.