Privacy policy

 From you directly 

Most of the personal information we collect is provided directly by you, or your authorised representative, when you engage with us and our services. You do not have to voluntarily provide your personal information to us. However, we may not be able to effectively provide you with services (such as responding to requests for information) if you do not provide us with the information we need.

​

The personal information we may collect from you directly includes:

• your name

• your contact details, including your address, email address or phone number

• information about your employment, such as your organisation, team, or role

• information about your business, service, or organisation

• any documents or other information you provide to us as part of our service delivery

• your responses to satisfaction/feedback/evaluation

• surveys we may ask you to complete

​

 From your organisation or other agency 

Our services may also require us to receive or request personal information about you from your employer or contracting organisation. We may collect personal information from the following people or agencies:

• your employer (or contracting organisation): this would include information such as your role and contact details. This enables us to begin to see where you fit in the organisation and contact you about the services we are providing to your employer.

• We may also collect publicly available information about you – such as any media reports – where this is relevant to carrying out our professional service functions, for example if we want to understand more about someone we are engaging with who has a public profile.

​

 How we use it 

In order to carry out our services, we need to use your personal information in the ways set out below. Where we need to use the information in a way not anticipated here, we will only do so if required or permitted by law or with your authorisation.

• provide you with relevant reports or resources

• provide you with technical support including access to information for remotely / digitally provided services.

• measure, review and improve the delivery of our services, including conducting satisfaction surveys

• conduct internal statistical analysis and reporting

• invite you to register for events or training

​

 When we share it 

We do not share your personal information with third parties (other than third parties that are providing services to us) for example - software we use in the day to day running of our business. See Storage and retention for details.

​

 Accessing our website 

Where your browser settings permit, we collect the following information about your use of our website (though please note we make no efforts to associate this with your identity):

• your IP address

• the search terms you used

• the pages you accessed on our website and the links you clicked on

• the date and time you visited the site

• the referring site or medium (if any) through which you clicked to our website 

• your operating system (such as Windows 10)

• the type of web browser you use (such as Mozilla Firefox)

• your usage location and type of device/operating system

​

 Storage and retention 

We don't store any customer data on our local computers, everything is stored and processed using cloud based software providers. These include but are not limited to:

• Office 365- https://privacy.microsoft.com/en-ca/privacystatement

• Google Cloud - https://policies.google.com/privacy?hl=en-NZ

• Wrike - https://www.wrike.com/security/privacy/

• Miro - https://miro.com/legal/privacy-policy/

• Nintex - https://www.nintex.com/legal/privacy-policy/

​

 Security 

We take all reasonable steps to ensure the personal information we collect is protected against loss, unauthorised access and disclosure or any other misuse, including meeting the requirements prescribed by the New Zealand government for the secure handling, storage and disposal of any protectively marked or security classified information.

​

We ensure that our third-party data processors can meet our privacy and security requirements. We are satisfied, for example, that Microsoft has adequate security and privacy safeguards in place to protect information it holds on our behalf. You can read more about Microsoft’s privacy and security practices at www.microsoft.com/en-nz/trustcenter.​