Privacy Policy
Website: www.nzcg.nz
1. About Us
New Zealand Consulting Group Limited (NZCG) is a New Zealand‑registered company (NZBN 9429047435643) providing advisory and consultancy services across a range of sectors. This privacy policy explains how NZCG collects, uses, stores and discloses personal information that you provide when you visit www.nzcg.nz or use our online services.
2. What Personal Information We Collect
NZCG collects only the information that is necessary for the purposes set out in this policy. The types of data we may collect include:
| Category | Typical Data Collected | Context |
|---|---|---|
| Contact | Email address, telephone number, postal address | Requesting information, support, marketing opt‑in |
| Professional | Job title, company name, sector | Providing relevant content, case studies |
| Technical | IP address, browser type, device ID, page views | Analysing site performance, security |
| Cookie/Tracking | Session cookies, analytics data | Improving user experience, analytics |
We do not collect special categories of personal information (e.g. race, religion, health) unless explicitly requested for a specific service (e.g. dietary requirements for an event) and only with your consent.
3. How We Use Your Information
NZCG uses your personal information for the following legitimate purposes:
| Purpose | Details |
|---|---|
| Service provision | Responding to enquiries, delivering reports, scheduling meetings |
| Marketing | Sending newsletters, invitations to events, product updates – only if you have opted‑in |
| Analytics & improvement | Understanding how visitors use the site, monitoring performance, detecting security threats |
| Legal & regulatory | Complying with tax, audit, and contractual obligations |
| Customer support | Resolving queries, providing technical assistance |
We never sell or rent your personal information to third parties for unrelated commercial purposes.
4. Data Retention
We keep personal information only for as long as necessary:
- Operational use – until the relationship or project ends, or the information is no longer required for its original purpose.
- Legal obligations – for periods required by New Zealand law (e.g. tax records, audit trails).
- Security – we maintain logs for a maximum of 12 months to investigate incidents.
After the retention period expires, data is securely deleted or anonymised.
5. Security Measures
NZCG implements technical, organisational and administrative safeguards:
- Encryption of data in transit (HTTPS) and at rest.
- Access controls – only authorised staff and contractors with a legitimate need can view personal data.
- Regular security reviews – vulnerability scanning, penetration testing, and staff training.
- Incident response – procedures to detect, contain and report data breaches, including notification to affected individuals and the Information Commissioner’s Office (ICO) when required.
6. Cookies & Similar Technologies
We use essential cookies for site functionality and analytics cookies (e.g. Google Analytics).
- Functional cookies – enable navigation and personalise content.
- Analytical cookies – aggregate usage data to improve the site.
You can manage cookie preferences via the browser settings or the cookie banner on our site. No personal data is sent overseas through these cookies.
7. Third‑Party Services
NZCG may use third‑party services (e.g. email marketing platforms, analytics providers) that operate within New Zealand or have servers located in countries recognised by the New Zealand privacy framework. All providers are bound by written agreements ensuring they:
- Provide a level of protection equivalent to New Zealand law.
- Do not use the data for any purpose other than those agreed.
We do not share personal data with overseas entities beyond the New Zealand jurisdiction.
8. Your Rights
Under the New Zealand Privacy Act 2020 you have the following rights regarding your personal information:
- Access – request a copy of the information NZCG holds about you.
- Correction – request corrections to any inaccurate or incomplete data.
- Withdrawal of consent – withdraw consent for marketing communications at any time.
- Object – object to processing for direct marketing or legitimate interest purposes.
- Deletion – request deletion where data is no longer required or you withdraw consent.
To exercise any of these rights, contact us using the details in Section 12 below.
9. Data Breach Notification
In the event of a personal data breach that could result in serious harm, NZCG will notify the affected individuals and the ICO within 72 hours of discovery, following the ICO’s guidance.
10. Changes to this Privacy Policy
We may update this policy from time to time. The date of the most recent version will appear at the top of the page. We encourage you to review the policy periodically. Any substantial changes will be communicated via the website or email.
11. Contact Information
If you have any questions, concerns or wish to exercise your privacy rights, please contact us:
New Zealand Consulting Group Limited
Email: info@nzcg.nz
Phone: 0800 555 215 (New Zealand)
We are committed to protecting your privacy and will respond to all enquiries promptly.