Privacy

What we collect, and what we do with it.

This site collects very little, and none of it for advertising. This page says plainly what is collected, why, who else is involved and how long it is kept — under the Privacy Act 2020.

Collection

What we collect.

When you send an enquiry

Your name, email address, the company you name, the topic you choose and the message you write. We also record the page the form was submitted from, the country our network resolved for the request, the time, and the fact that you ticked the consent box. We do not record your IP address.

When you simply read the site

Nothing that identifies you. There is no analytics, no advertising pixel and no tracking of any kind. Our network provider handles requests as any web host must, and keeps its own operational logs.

What we never ask for

We have no reason to know your date of birth, your address, your finances or anything about your health, and we do not ask. If you volunteer something in the message field, it is stored as part of the message and kept no longer than the rest.

Use

Why we collect it.

To answer you

The reason you filled in the form. Your email address exists in our records so that a person can reply to it.

To sort the queue

A language model reads each enquiry once and suggests a category, an urgency and the questions worth asking on a first call. It has no ability to act on anything: its reading is stored beside your message, never in place of it, and a person decides everything. Its opinion is not treated as fact, including by us.

To keep the form usable

A spam check runs before anything is stored, and a repeat of the same message within ten minutes is treated as the same enquiry rather than a second one.

Not for marketing

We do not add you to a mailing list, we do not sell or share your details, and we do not send anything you did not ask for. If you enquire and we reply, that is the whole of it.

Sharing

Who else is involved.

Cloudflare

Serves this website, runs the spam check on the form and holds the enquiry database. The database is located in the Oceania region, nearest to New Zealand. The model that reads enquiries also runs on Cloudflare's network.

Google

Notification of a new enquiry is delivered to a Gmail mailbox, so a copy of what you sent is held by Google, in the United States, for as long as that email exists. This is the one place your information leaves the Oceania region.

Nobody else

There are no other processors, no third-party scripts and no fonts, maps or embeds loaded from anyone else's servers. Every other request this site makes goes to imady.co.nz.

Sending information overseas

Principle 12 of the Privacy Act 2020 requires us to be satisfied that anyone we send your information to protects it comparably. Cloudflare and Google both publish binding privacy commitments and operate under GDPR-aligned terms. If that is not acceptable to you, email us instead of using the form and say so — we will keep the exchange to email.

Retention

How long we keep it.

Twelve months, if nothing comes of it

An enquiry that does not lead to a conversation or a piece of work is anonymised twelve months after you send it. Your name, email address, company, message and consent record are erased. What remains is the date, the topic, the category and the country — nothing that points to a person — so we can still answer questions about our own business, such as how many enquiries of a given kind arrive in a year.

Longer, if we work together

Once an enquiry becomes an actual conversation or a piece of work, it stops being an enquiry and becomes a business record. New Zealand tax law requires business records to be kept for seven years, and we keep them for that period and no longer.

Sooner, if you ask

You can ask us to delete your enquiry at any time and we will, unless it has already become a business record we are legally required to keep. Email us and say so; we do not require a reason.

Cookies

Cookies and browser storage.

We set no cookies

This site does not set a single cookie of its own, which is why you are not being asked to dismiss a banner. Cloudflare may set a cookie of its own to distinguish visitors from automated traffic; that is a security measure, not a tracker, and we cannot read anything from it about you.

Three things remembered in your browser

Your choice of light or dark, your choice of language, and — if you have opened the design panel — its settings. They are stored by your browser, on your device only. They never reach us, contain nothing that identifies you, and clearing your browser data removes them.

No analytics

We do not run Google Analytics or any equivalent. We do not know who you are, which pages you read, or where you came from. What we know about our own website is what our host reports in aggregate.

Your rights

What you can ask us for.

A copy of what we hold

Ask, and we will send you everything we have that relates to you. Under the Privacy Act 2020 we must respond within twenty working days; in practice it will be much sooner, because there will not be much.

A correction

If something we hold about you is wrong, tell us and we will correct it. If we disagree, we will attach your statement of the correction you sought to the record.

Deletion

See above. Ask and it is done, unless the law requires us to keep it.

A complaint

If you are not satisfied with how we have handled your information, please raise it with us first — we would rather fix it than have it escalated. You are also entitled to complain to the Office of the Privacy Commissioner at privacy.org.nz at any time, and you do not need our agreement to do so.

Security

How it is looked after.

Where it lives

Enquiries are held in a database that is not reachable from the public internet. Nothing is stored on a laptop, a shared drive or a spreadsheet.

Who can see it

One person: the director of imady NZ Limited. There are no other staff accounts, and no contractor has access.

If something goes wrong

If information is lost or exposed in a way that could cause serious harm, the Privacy Act 2020 requires us to notify the Privacy Commissioner and the people affected. We would tell you, plainly and promptly, whether or not the threshold was met.

Contact and changes

Who we are

imady NZ Limited, Auckland, New Zealand

Privacy contact

fs@imady.co.nz

Governing law

Privacy Act 2020 (New Zealand)

Regulator

Office of the Privacy Commissioner · privacy.org.nz

Version

2026-09-04

Changes

If this statement changes materially, the version date above changes with it. We will not apply a new version retrospectively to information already collected under an earlier one.