Last Updated: March 2026

Connect Consultancy is committed to protecting your privacy and handling personal information responsibly, transparently, and securely. 

This Privacy Policy explains how we collect, use, store, and protect personal information in accordance with the Privacy Act 2020 (New Zealand) and recognised best practice standards. 

1. Who We Are 

Connect Consultancy is a New Zealand-based professional services firm operating across the ANZPAC region. 

For the purposes of the Privacy Act 2020, Connect Consultancy is the agency responsible for the personal information we collect and hold. 

2. What Information We Collect 

We collect personal information only where it is necessary for our business operations or where you choose to provide it. 

This may include: 

• Name and contact details (email address, phone number) 
• Organisation and role information 
• Communication records (emails, enquiries, meeting notes) 
• Website usage information (IP address, browser type, cookies) 
• Event registrations and newsletter subscriptions 
• Information required for contractual or employment purposes. 

We do not collect sensitive personal information unless required for a lawful purpose and with appropriate safeguards in place. 

3. How We Collect Information 

We collect personal information: 

• Directly from you (e.g. website forms, email correspondence, meetings) 
• Through service delivery engagements 
• Through recruitment processes 
• Through cookies and website analytics tools 
• From third-party service providers where authorised. 

Where reasonable and practicable, we collect information directly from you. 

4. Why We Use Your Information 

We use personal information to: 

• Provide and improve our services 
• Respond to enquiries and communications 
• Manage client relationships and contracts 
• Comply with legal and regulatory obligations 
• Send relevant updates or marketing communications (with your consent) 
• Maintain security and system integrity. 

We do not sell personal information. 

5. Cookies & Website Analytics 

Our website uses cookies and similar technologies to: 

• Improve functionality and performance 
• Analyse website traffic and user behaviour 
• Enhance user experience. 

You may disable cookies via your browser settings; however, some website functionality may be affected. 

6. Disclosure of Personal Information 

We may disclose personal information to: 

• Trusted service providers (e.g. cloud hosting or IT support) 
• Professional advisers (e.g. legal or accounting services) 
• Regulatory authorities where required by law. 

Cross-Border Disclosure (IPP 12) 

Where personal information is shared with overseas service providers, we ensure that: 

• The recipient is subject to privacy safeguards comparable to the Privacy Act 2020; or 
• Contractual protections require equivalent privacy standards; or 
• Another permitted exception under IPP 12 applies. 

All overseas disclosures are risk-assessed before engagement. 

7. Data Security 

We implement appropriate technical and organisational safeguards to protect personal information, including: 

• Encryption and secure cloud configurations 
• Role-based access controls 
• Multi-factor authentication 
• Secure backup and restoration processes 
• Ongoing cyber security monitoring. 

Our cyber security controls are governed by our internal Cyber Security Policy and outlined publicly in our Cyber Security Statement. 

For further information about how we protect digital systems and respond to cyber incidents, please refer to our Cyber Security Statement: https://www.connect-consultancy.co.nz/cyber-security-statement/ 

8. Data Retention 

We retain personal information only for as long as necessary to fulfil: 

• The purpose for which it was collected; or 
• Legal, contractual, or regulatory requirements. 

When no longer required, personal information is securely deleted or anonymised. 

9. Your Rights 

Under the Privacy Act 2020, you have the right to: 

• Request access to your personal information 
• Request correction of inaccurate information. 

We will respond to requests as soon as reasonably practicable and within statutory timeframes. 

To make a request, please contact us using the details below. 

10. Privacy Breaches 

If a privacy breach occurs that is likely to cause serious harm, we will: 

• Notify the Office of the Privacy Commissioner; and 
• Notify affected individuals, as required under the Privacy Act 2020. 

We maintain an Incident Response Plan to manage such events responsibly and promptly. 

11. Use of Emerging Technologies (Including AI) 

Where digital tools or AI-enabled systems are used in our operations: 

• We apply governance-first risk assessment principles 
• We assess data protection impacts 
• We ensure appropriate human oversight 
• We align with recognised New Zealand guidance and international best practice. 

We do not use automated decision-making systems that produce legal or similarly significant effects. 

12. Marketing Communications 

We only send marketing communications where: 

• You have opted in; or 
• We have an existing relationship and the communication is relevant. 

You may unsubscribe at any time using the link provided in our emails or by contacting us directly. 

13. Complaints 

If you believe your privacy has been breached, please contact us first so we can investigate and resolve the issue. 

If you are not satisfied with our response, you may contact: 

Office of the Privacy Commissioner 
www.privacy.org.nz  

14. Contact Us 

For privacy enquiries, access requests, or complaints: 

📧 info@connect-consultancy.co.nz 
 

15. Updates to This Policy 

We review this policy at least annually or sooner if required due to legislative or operational changes. 

The most current version will always be available on our website.