Privacy.
What this site collects, how we use what you send us, where it is held, how client data is treated in an engagement, and your rights.
Who we are
Confidirect is a data consultancy based in Auckland, New Zealand. The contracting entity is named in the agreement for each engagement. Privacy questions and requests go to the email address at the top of this page.
What this website collects
This site has no accounts, no forms, no analytics and no cookies. Nothing about your visit is recorded by us; the company that hosts the site keeps the ordinary server logs any host keeps.
If you email us, we hold what you send: your name, your address and the content of the message.
How correspondence is used
Email is used to reply, to scope work and to deliver it. It is not added to any marketing list and is not sold or passed to anyone for their own purposes. The providers we use to run the business, our email and file storage provider and the company that hosts this site, handle it on our behalf and for no other purpose. We also disclose information where the law requires it.
We keep correspondence for as long as it is relevant to an enquiry or an engagement, and delete it on request unless we are required to keep it.
Where information is held
Our email and files are held with cloud providers, and this site is served from an overseas hosting network. Information you send us may therefore be stored or processed outside New Zealand. We use providers whose terms commit them to protecting it to a standard comparable to the Privacy Act 2020.
Correspondence and work files are held in access-controlled accounts, and access is limited to the people working on the engagement.
Client data in an engagement
Data we work with during an engagement belongs to the client and is handled under the written scope and the agreement for that engagement. Where the work allows, it stays in the client's own systems and we work inside them.
Where that data includes personal information, we hold it on the client's behalf, as their agent. A request about information held in a client's systems should go to the client, and we will help them answer it.
We do not use client data for anything other than the engagement it was provided for, and we return or delete it at the end as the agreement sets out.
Your rights
Under the New Zealand Privacy Act 2020 you can ask what personal information we hold about you and ask us to correct it. Email the address at the top of this page and we will respond within 20 working days. You can also ask us to delete correspondence, and we will unless we are required to keep it.
If you are not satisfied with how we have handled a privacy issue, you can complain to the Office of the Privacy Commissioner at privacy.org.nz, by email to [email protected], or on 0800 803 909.
If something goes wrong and a breach could cause someone serious harm, we will tell the people affected and the Privacy Commissioner, as the Act requires.
Changes
If this page changes, the date at the top changes with it.