Privacy

How we look after your information

Sally Says is a speech-language therapy practice in New Zealand. This page explains, in plain words, what we collect, why, who sees it and what you can ask us to do.

Last updated: 17 October 2026

Who we are

“We” means Sally Says Speech & Language Therapy. We follow the New Zealand Privacy Act 2020 and its Information Privacy Principles. Some of what you tell us about your child is health information. That may also be covered by the Health Information Privacy Code 2020.

Our Privacy Officer (Sally Says) can be reached at hello@sallysays.co.nz.

What we collect

We only collect what you choose to give us. This depends on what you use:

  • Waitlist and At-Home Lite starter. Your name, email, phone, suburb or area, the days and times that suit you, and any notes you write. For each child: first name, age group, main concern (this may include stuttering), target sounds, and an optional voice recording.
  • Contact and enquiry forms. Your name, email, and what you tell us. This may include your child’s age, your concern, your suburb, or details about your school or practice.
  • Job applications (therapists). Your contact details, experience, your CV, degree and NZSTA certificate, and your answers about insurance and police vetting.
  • Worksheets. If you get a worksheet code, your name and email. If you give feedback on a worksheet, what you write (and a recording, if you choose to add one).
  • Sound Check-In results. The answers from a check-in, such as which sounds were practised.
  • Accounts. If you have a login, your email and the information linked to your account.
  • Website visits. Pages visited, counted by Vercel Analytics.

Children’s voice recordings

  • A recording is always optional. You do not need one to join the waitlist.
  • We ask a parent or caregiver for consent before recording a child’s voice.
  • Waitlist and starter recordings are stored privately. Only our staff can play them, using links that expire after a short time.
  • Sound Check-In recordings stay on your device. They are never uploaded to us.
  • “Can Sally Hear It?” sends the child’s voice to Deepgram (in the United States) to turn it into text. We do not store that recording.
  • We never use a recording for marketing without separate written consent.
  • You can ask us to delete a recording at any time.

Why we collect it

  • To understand your child’s needs and match you with a therapist.
  • To contact you about the waitlist, appointments and your questions.
  • To send you worksheets and resources you asked for.
  • To assess therapists who apply to work with us.
  • To improve our games, resources and website.
  • To send you news, but only if you said yes. You can unsubscribe at any time.

Who sees it

Our speech-language therapists and staff see the details they need. When you join the waitlist, your details are emailed to our team and to the therapists who might work with your family.

We do not sell your information. We do not share it with anyone else unless you agree or the law requires it.

Where it is stored

We use these companies to run the website. They store or process information for us and must keep it safe. Some are overseas, so your information may be held in Japan or the United States.

CompanyWhereWhat it does
SupabaseTokyo, JapanOur database and file storage. It holds form details, waitlist voice recordings and job application documents.
VercelUnited StatesHosts the website. It also counts page visits for us (Vercel Analytics).
ResendUnited StatesSends our emails. Waitlist and contact details are emailed to our team. If you say yes to news, your name and email go on our mailing list.
StripeUnited States and other countriesTakes card payments if you buy something from us. We never see or store your full card number.
DeepgramUnited StatesTurns speech into text for one game, “Can Sally Hear It?”. The child’s voice is sent to Deepgram while they play. We do not keep it.
ElevenLabs and Microsoft AzureUnited States and other countriesMake the voices that read our own practice words. We do not send them any information about you or your child.

How long we keep it

We keep waitlist information until your child is seen, or until you ask us to remove it. You can ask us to delete a recording at any time.

Keeping it safe

We limit who can see your information and use providers with strong security. If a privacy breach is likely to cause serious harm, we will tell the Privacy Commissioner and the families affected as soon as we can.

Children

Our forms are for parents and caregivers. You give us information about your child. Children should not fill in the forms themselves. Children may play our games with an adult nearby.

Your rights

You can ask us to:

  • show you the information we hold about you or your child,
  • correct it if it is wrong,
  • delete it, including any recording.

Email hello@sallysays.co.nz. We will reply within 20 working days.

If you are not happy with our answer, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

Changes

We may update this page. The date at the top shows the latest version. See also our Terms.