Working with a Dhaka Dev Team from New Zealand: IPP 12, NZD and Overlap

A New Zealand business can use offshore developers in Dhaka, but the overlap is short: about 3 working hours a day with Auckland outside daylight saving and 2 during it. If the team only handles personal information on your behalf, section 11 of the Privacy Act 2020 treats it as yours; if not, IPP 12 applies and the Privacy Commissioner's model clauses are the practical route.

This guide is for New Zealand founders and business owners searching for app developers and weighing an offshore team against a local one. RAITHub is a software studio in Dhaka, so we have an interest in the answer. We will be plain about the trade-off: the rate difference is large, the overlap is small, and the model only works if you are comfortable working mostly in writing. The privacy and tax points below are general information, not legal or tax advice; confirm them with your adviser and the Office of the Privacy Commissioner.

How many working hours do Auckland and Dhaka actually share?

Two or three, depending on the season. Dhaka is on UTC+6 with no daylight saving. New Zealand daylight saving starts at 2am on the last Sunday in September and ends at 3am on the first Sunday in April; for this season, 27 September 2026 to 4 April 2027 (govt.nz: daylight saving). With both sides working 9:00 to 18:00:

New Zealand time	Dhaka is behind by	Shared hours	Window in Auckland	Window in Dhaka
NZST (UTC+12), April to September	6 hours	3	15:00–18:00	09:00–12:00
NZDT (UTC+13), September to April	7 hours	2	16:00–18:00	09:00–11:00

That is not enough for a team that expects to talk through problems all day. It is enough for a short daily check-in and a weekly demo, if the rest runs in writing. The upside is the handover: the Dhaka working day runs from about 15:00 to 00:00 Auckland time in winter, so work requested in your afternoon is often done by your next morning.

How do you make a 2-hour overlap work?

By treating the overlap as a checkpoint, not the place where work happens. The habits that make it work are the same ones that make any remote team reliable.

• Written tickets with acceptance criteria. "Done" is defined before work starts, so nobody waits for a call to find out what was meant.
• A written daily handoff. What shipped, what is blocked, and the one or two questions that need your answer. You reply when you start your day.
• A staging environment you can click. You review working software, not screenshots.
• A weekly demo in the overlap window, with decisions recorded in the ticket, not only in the meeting.
• One decision-maker on your side. Async work stalls when three people each answer a question differently.

RAITHub agrees the working week with each client and works this way by default: async, with written daily handoffs. If you need a developer on a call through the New Zealand business day, a local team or one in Australia is a better fit, and the section at the end says so.

Does IPP 12 apply when an offshore team works on my app?

Not always. Information privacy principle 12 governs disclosing personal information to a foreign person or entity (OPC: principle 12). The first question is whether sending information to your vendor is a disclosure at all.

The Privacy Commissioner's decision tree says there is no disclosure when information goes to an agent for storage or processing and the agent "does not use or disclose the information for its own purposes"; that is the effect of section 11 of the Act (OPC: IPP 12 decision tree). In that case the information is treated as held by you, and you stay responsible for it. The OPC's guidance on overseas cloud services makes the same point: you are responsible for the personal information you put in the cloud, not the provider (OPC: sending information overseas).

A development vendor that works only on your instructions, and never uses your data for its own purposes, may fit the section 11 agent test. Whether yours does depends on the contract and the facts, so confirm it with your adviser. Either way, responsibility stays with you, so the security measures below still matter.

If IPP 12 does apply, what are the options?

Principle 12 allows a disclosure overseas only on one of several grounds (OPC: principle 12). In summary:

• Authorisation. The individual agrees after being told the recipient may not have to protect the information with comparable safeguards.
• The recipient is subject to the NZ Privacy Act, for example because it carries on business in New Zealand. RAITHub does not.
• Comparable foreign law, or a prescribed binding scheme or country. Do not assume this for Bangladesh; confirm the position with your adviser.
• An agreement giving comparable safeguards. You reasonably believe the recipient must protect the information comparably under a contract. This is where the OPC's model clauses come in.

The OPC publishes model contract clauses as a template, a version with its commentary, and two example agreements, and its decision tree describes a model-clauses agreement as the most practical way to meet the requirement (OPC: sending information overseas). For a small business hiring a vendor, starting from the OPC template is simpler than drafting from scratch. RAITHub signs it.

What should the contract with an offshore developer cover?

Clause	Why it matters in New Zealand	What to ask for
Acts only on your instructions	Supports the section 11 agent position	A written scope and a ban on using your data for the vendor's own purposes
Comparable safeguards	The IPP 12 agreement ground, if it applies	The OPC model clauses, completed for your data
Breach notice to you	You must notify the Commissioner and affected people of a serious-harm breach as soon as you are practically able (OPC: privacy breaches)	A duty to tell you of a suspected breach within an agreed number of hours
Subcontractors	Your data should not travel further without your say	A named list, and your approval before changes
Return or deletion	Limits what remains overseas after the project	Written deletion confirmation at offboarding
IP assignment and NDA	You need to own the code to change vendors later	Full assignment to your company, repository in your account

The offshore IP assignment checklist was written for US founders, but its repository and handover steps apply in New Zealand too; have your lawyer check the assignment wording under New Zealand law.

Can I keep personal information in New Zealand?

Yes. AWS lists an Asia Pacific (New Zealand) region, ap-southeast-6, which must be enabled before use, alongside Asia Pacific (Sydney), ap-southeast-2 (AWS Regions). Keep production in your own account, give the offshore team synthetic data for development and staging, and deploy through your pipeline so nobody needs routine production access. Code travels; customers do not.

What do app developers cost in NZD, local vs offshore?

SEEK's New Zealand data puts the average advertised software engineer salary in the information and communication technology sector at NZ$115,265 (SEEK New Zealand, September 2026). Arc puts senior freelancers in Australia and New Zealand at US$80 to US$125 an hour (Arc freelance rates 2026), and most Bangladesh agencies in Clutch's directory list under US$25 or US$25 to US$49 (Clutch Bangladesh).

Converted at US$1 = NZ$1.77, derived from the Reserve Bank of Australia's 29 September 2026 AUD/USD and AUD/NZD rates (RBA exchange rates), and applied to an illustrative 660 to 1,080 hours for a first web app release:

Option	Rate in NZD	660–1,080 hours (illustrative)	What the rate includes
Senior freelancer in NZ or Australia	NZ$141–221/hr	NZ$93,060–238,680	One person; you supply design, QA and review
Bangladesh agency (US$25–49 band)	NZ$44–87/hr	NZ$29,040–93,960	A team; check that QA and code review are in the quote
In-house engineer in NZ	NZ$115,265 a year average advertised	About NZ$57,600 for six months of salary alone	One skill set; add recruitment, KiwiSaver and on-costs

The hours are an assumption, not a benchmark, and neither row is a RAITHub price; RAITHub publishes no hourly rate. Use the MVP cost estimator for a range on your own scope, and what developers cost in Bangladesh for the detail behind the offshore figures.

On invoices from an overseas supplier, ask your accountant whether GST applies to imported services for your business. General information only; confirm with your adviser and Inland Revenue.

Which NZ payment options should an app plan for?

Scope each one as its own integration. This is engineering guidance: RAITHub has shipped Stripe payments, in PropDesk's rent collection, but has not shipped POLi, Windcave or NZ direct debit integrations.

• Cards through Stripe. Stripe's New Zealand pricing lists 2.65% + NZ$0.30 for domestic cards and 3.5% + NZ$0.30 for international cards (Stripe NZ pricing, checked 30 September 2026).
• NZ BECS Direct Debit through Stripe, listed at 1% + NZ$0.40, capped at NZ$4.00. On a NZ$2,000 recurring payment, that is NZ$4.00 against NZ$53.30 by domestic card.
• POLi. POLi continues to operate in New Zealand under local ownership, although it closed in Australia on 30 September 2023 (POLi NZ). Do not plan it for Australian customers.
• Windcave, a payment gateway offering tokenisation and cross-border services (Windcave). Worth evaluating if your business already has a merchant relationship there.

Why RAITHub for a New Zealand business?

• Async is how we already work. Written tickets, written daily handoffs, a clickable staging site and weekly demos, so a 2-hour overlap is enough.
• We sign the paperwork. The OPC model clauses, your data terms and an NDA, and we follow your controls. We make no certification claims.
• Your data stays in your account. Production in your cloud account, in New Zealand or Sydney as you choose; synthetic data in development.
• Tested builds. PropDesk runs 1,024 automated tests with Stripe rent collection; BlockEstate reached its MVP in 6 weeks. Every build ships with a test suite gated in CI.
• Clear terms. A free 15-minute technical audit, then a fixed written quote; fixed scope or a dedicated monthly team. First releases run under MVP development, and pricing explains the models.

When you don't need us

• You need someone on calls through the NZ working day. With 2 to 3 shared hours, choose a local team.
• You need a native iOS or Android app. RAITHub builds web applications only.
• Personal information must never be accessible from overseas, even for debugging. Choose a New Zealand vendor.
• You want a developer placed in your team. RAITHub does not offer staff augmentation.
• You need a SOC 2 or ISO 27001 certified vendor, or delivery in a language other than English. RAITHub holds neither certification and delivers in English only.

Before hiring any offshore vendor, run the checks in how to check a Bangladesh software agency, and set a realistic timeline with how long an MVP takes.

Sources checked on 30 September 2026. General information only; confirm privacy and tax points with your adviser.

If the async model suits you, book the free 15-minute technical audit. We will schedule it inside the overlap window and follow up in writing.

Frequently asked questions

How many hours overlap between New Zealand and Bangladesh?

With a 9:00 to 18:00 day on both sides, about 3 hours outside NZ daylight saving and 2 hours during it, in the Auckland late afternoon. The Dhaka working day then continues through the New Zealand evening, so work is often ready by the next morning.

Does IPP 12 apply to an offshore development team?

Not if the team acts only as your agent under section 11 of the Privacy Act 2020 and never uses the information for its own purposes; then it is treated as held by you, and you remain responsible. If IPP 12 does apply, an agreement based on the Privacy Commissioner's model clauses is the practical route. Confirm your case with an adviser.

What are the IPP 12 model contract clauses?

They are template clauses published by the Office of the Privacy Commissioner, with a commented version and two example agreements, for agreeing comparable safeguards with an overseas recipient. They are optional but are the practical way to rely on the agreement ground in IPP 12.

How much do app developers cost in New Zealand?

SEEK puts the average advertised software engineer salary in NZ's ICT sector at NZ$115,265. Arc puts senior freelancers in Australia and New Zealand at US$80 to US$125 an hour, about NZ$141 to NZ$221, while most Bangladesh agencies on Clutch list US$49 an hour or less, about NZ$87 or less.

Can personal information stay in New Zealand if developers are offshore?

Yes. Host production in your own cloud account, for example AWS's Asia Pacific (New Zealand) region, give developers synthetic data, and deploy through your pipeline. The team then works on code rather than customer records.

Does RAITHub have an office in New Zealand?

No. RAITHub is based in Dhaka, Bangladesh, and has no office or entity in New Zealand or Australia. It works with New Zealand clients remotely, in English.

Can RAITHub integrate POLi or Windcave?

RAITHub has shipped Stripe payments but has not yet shipped POLi or Windcave integrations. It can scope them as separate line items with their own tests, and says so in the quote.