1. Who we are
ThisFirewall is a firewall security-analytics platform operated by Belton IT Nexus Limited, a company incorporated in New Zealand ("Belton", "we", "us"). This Privacy Policy explains how we collect, use and protect personal information in connection with our website at thisfirewall.com and the public demo at demo.thisfirewall.com (together, the "Site").
Questions about this policy or your information can be sent to [email protected].
2. Scope - website vs product data
This policy covers personal information processed through the Site (for example, when you request a demo or browse the marketing pages).
ThisFirewall is normally deployed as a single-tenant instance on infrastructure you choose (self-hosted or managed). The firewall telemetry and logs processed inside a customer's instance are handled under that customer's own agreement and remain within that instance - they are not collected by this website. Your raw firewall logs never leave your instance.
3. Information we collect
Information you give us
- Contact and enquiry details you submit through our demo / contact form - typically your name, work email, organisation and any message.
- Correspondence you send us by email.
Information collected automatically
- Privacy-respecting usage analytics (pages viewed, approximate location, device/browser type and basic performance metrics), used to understand and improve the Site.
- Standard server and security logs (such as IP address and request metadata) needed to operate and protect the Site.
We do not use advertising cookies, we do not run third-party ad networks, and we do not sell personal information.
4. How we use information
- To respond to your enquiry, arrange a demo and provide information you ask for.
- To operate, secure, maintain and improve the Site.
- To meet legal and regulatory obligations.
Our lawful basis is your consent (where you contact us) and our legitimate interest in operating and securing the Site, consistent with the New Zealand Privacy Act 2020.
5. Analytics and cookies
We use a first-party, privacy-respecting analytics service (PostHog) to measure how the Site is used. It is configured to minimise personal data: anonymous visitors are not profiled, session recording is disabled, and form inputs are masked. We do not use it for advertising. Analytics requests are routed through our own first-party endpoint.
6. Service providers and disclosure
We share personal information only with service providers who help us run the Site, under appropriate confidentiality and data-protection terms. These currently include providers for email delivery, website hosting and the analytics described above. Some providers may process data outside New Zealand (for example, in Australia or the United States); where they do, we take reasonable steps to ensure comparable protection.
We may also disclose information where required by law, or to protect the rights, safety and security of Belton, our customers or others.
7. Retention
We keep personal information only for as long as needed for the purpose it was collected - for example, to follow up on an enquiry and for a reasonable period afterwards - and then delete or anonymise it, unless a longer period is required by law.
8. Security
We protect information in transit with TLS, restrict access on a least-privilege basis, and apply the security controls described in our Technical & Security Overview. No method of transmission or storage is completely secure, but we work to protect your information and to respond promptly to any incident.
9. Your rights
Under the New Zealand Privacy Act 2020 (and, where applicable, the Australian Privacy Principles) you may request access to, or correction of, the personal information we hold about you. To make a request, contact [email protected]. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner (New Zealand).
10. Changes to this policy
We may update this policy from time to time. The current version is always published on this page, with the "Last updated" date above.