Privacy Policy

Definitions

For the purposes of this Privacy Policy:

Personal Information means any information about an identifiable individual.

Processing means collecting, recording, storing, organising, using, analysing, transmitting, deleting, or otherwise handling Personal Information.

Client means any person or business that purchases or enquires about our services.

Website means the Tangaroa Digital Limited website and associated online platforms.

Services means all digital marketing, advertising, consulting, web development, AI-assisted marketing, analytics, lead generation, and related professional services offered by Tangaroa Digital Limited.

Third-Party Provider means any external company or service provider that assists us in operating our business or delivering our Services.

Information We Collect

The information we collect depends on how you interact with us.

Personal Information You Provide

You may voluntarily provide information including:

• Full name
• Business name
• Job title
• Email address
• Telephone number
• Postal address
• Billing address
• Company website
• Industry information
• Marketing requirements
• Project information
• Business objectives
• Payment information (where applicable)
• Information contained in enquiries or correspondence

You are not required to provide Personal Information; however, if you choose not to provide certain information, we may be unable to respond to your enquiry or provide some or all of our Services. This aligns with the transparency requirements of the Privacy Act regarding collection and use of personal information.

Information Collected Automatically

When you visit our website, certain technical information may be collected automatically, including:

• IP address
• Browser type and version
• Device type
• Operating system
• Language preferences
• Time zone
• Pages visited
• Date and time of access
• Referring website
• Exit pages
• Session duration
• Clickstream data
• Error logs
• Website performance information

This information helps us:

• improve website functionality
• understand website usage
• maintain website security
• diagnose technical issues
• improve user experience
• measure marketing effectiveness

Where possible, we use aggregated or anonymised information for analytics and reporting.

Information We Receive From Third Parties

We may receive Personal Information from third parties where permitted by law or where you have authorised the disclosure.

These sources may include:

• advertising platforms
• CRM systems
• analytics providers
• social media platforms
• business partners
• publicly available business directories
• referral partners
• event organisers
• payment providers
• identity verification providers

Where we collect Personal Information indirectly, we will take reasonable steps to ensure the collection complies with applicable legal requirements. From 1 May 2026, New Zealand's Privacy Act includes additional notification obligations (IPP 3A) for information collected from sources other than the individual, requiring organisations to take reasonable steps to inform affected individuals in many circumstances.

Business Information

As a B2B marketing agency, we may collect business-related information including:

• company name
• business address
• business email addresses
• professional contact details
• business size
• industry sector
• publicly available corporate information
• publicly available social media information
• advertising account information
• website analytics data
• CRM information provided by the Client

Where business information also identifies an individual, we treat it as Personal Information and handle it in accordance with this Privacy Policy.

Marketing and Communication Information

If you communicate with us, we may collect information such as:

• emails
• contact form submissions
• live chat conversations
• telephone call records (where notified)
• meeting notes
• support requests
• consultation notes
• survey responses
• feedback
• testimonials you choose to provide

This information helps us respond to enquiries, provide support, improve our Services, and maintain accurate records of our interactions.

Cookies and Similar Technologies

Our website may use cookies and similar technologies to improve functionality and user experience.

Cookies are small text files stored on your device that help websites recognise your browser and remember certain information.

We may use:

• essential cookies
• performance cookies
• analytics cookies
• functionality cookies
• preference cookies
• security cookies

Cookies may help us:

• remember your preferences
• understand website usage
• improve website performance
• personalise website content
• maintain website security
• measure marketing campaign effectiveness

Most web browsers allow you to control or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

Lawful Collection of Information

We collect Personal Information only where it is reasonably necessary for our legitimate business activities and the delivery of our Services.

Depending on the circumstances, we may collect Personal Information to:

• respond to enquiries
• prepare quotations
• provide marketing services
• communicate with Clients
• process payments
• comply with legal obligations
• protect our legal rights
• improve our Services
• maintain website security
• prevent fraud and misuse

We aim to collect Personal Information by lawful, fair, and transparent means, consistent with the principles of the New Zealand Privacy Act. Organisations should collect only information needed for a lawful business purpose, inform individuals why it is being collected, and protect it appropriately.

How We Use Your Personal Information

Tangaroa Digital Limited uses Personal Information only for legitimate business purposes and in accordance with applicable privacy laws.

We may use your Personal Information to:

• provide our digital marketing and consulting services
• respond to enquiries and requests
• prepare proposals and quotations
• communicate with you regarding our Services
• establish and manage client relationships
• create and manage advertising campaigns
• manage SEO, website, and marketing projects
• process payments and issue invoices
• verify your identity where appropriate
• provide customer support
• improve our website and Services
• conduct research and business analysis
• detect fraud or unlawful activity
• maintain the security of our systems
• comply with legal obligations
• enforce our Terms and Conditions
• protect our legal rights and business interests

We will not use your Personal Information for purposes that are unrelated to those for which it was collected unless permitted or required by law or with your consent.

Marketing Communications

Where you have requested information from us or have an existing business relationship with us, we may send you communications relating to:

• digital marketing insights
• industry news
• service updates
• newsletters
• promotional offers
• webinars
• events
• educational resources
• company announcements

You may unsubscribe from marketing communications at any time by:

• clicking the unsubscribe link included in our emails
• contacting us directly
• updating your communication preferences where available

Even if you unsubscribe from marketing communications, we may still send you important service-related communications, including:

• invoices
• project updates
• security notices
• contractual notices
• account notifications
• other communications necessary for providing our Services

Artificial Intelligence (AI) and Automated Technologies

Tangaroa Digital Limited may use artificial intelligence ("AI") tools and automation technologies to improve the efficiency and quality of our Services.

AI technologies may assist with:

• content drafting
• keyword research
• search trend analysis
• campaign optimisation
• data analysis
• reporting
• workflow automation
• translation
• image generation
• productivity enhancement

Where AI tools are used:

• human review is applied where appropriate before content is delivered
• AI-generated content may be edited, modified, or rewritten
• We take reasonable steps to minimise inaccuracies

AI tools are used to support—not replace—professional judgment.

We do not make solely automated decisions that produce legal or similarly significant effects on individuals without appropriate human involvement.

Website Analytics

To better understand how visitors use our website, we may use analytics services.

These services may collect information including:

• pages visited
• session duration
• navigation paths
• referral sources
• browser information
• device information
• approximate geographic location
• interactions with website features
• website performance data

Analytics information helps us:

• improve website usability
• optimise content
• identify technical issues
• understand visitor behaviour
• measure the effectiveness of marketing campaigns

Where possible, analytics information is aggregated or anonymised before analysis.

Cookies and Advertising Technologies

Our website may use cookies, pixels, tags, and similar technologies to:

• remember user preferences
• improve website functionality
• analyse website traffic
• personalise website experiences
• measure advertising performance
• understand campaign effectiveness

These technologies may include services provided by advertising and analytics partners.

Depending on your browser settings and applicable laws, you may be able to:

• refuse certain cookies
• delete existing cookies
• manage advertising preferences
• disable browser tracking technologies

Please note that disabling cookies may affect certain website features and functionality.

Third-Party Service Providers

We may engage trusted third-party providers to assist us in operating our business and delivering our Services.

These providers may include:

• website hosting providers
• cloud storage providers
• customer relationship management (CRM) platforms
• accounting software providers
• payment processors
• email service providers
• marketing automation platforms
• analytics providers
• customer support platforms
• project management software
• cybersecurity providers
• domain registrars

These providers may process Personal Information solely for the purposes of providing services to Tangaroa Digital Limited and are expected to protect that information appropriately.

Advertising Platforms

Where we manage digital advertising campaigns on behalf of Clients, we may process information through advertising platforms including:

• Google Ads
• Microsoft Advertising
• Meta Ads
• LinkedIn Ads
• TikTok Ads
• YouTube Ads
• and other advertising platforms requested by the Client

Information processed through these platforms may include:

• advertising account information
• campaign performance data
• audience information provided by the Client
• conversion tracking information
• website interaction data

The operation of these platforms is governed by their own privacy policies and terms of service.

Tangaroa Digital Limited does not control how third-party advertising platforms process information beyond the settings and instructions available to us.

Social Media Platforms

If you interact with Tangaroa Digital Limited through social media platforms, we may receive information that you make publicly available, including:

• your name
• profile information
• comments
• messages
• reactions
• publicly available content

Your interactions with those platforms remain subject to the privacy policies of the relevant social media providers.

We encourage you to review the privacy settings available on any social media platform you use.

Payment Information

Where payments are made for our Services:

• payment transactions may be processed by independent payment service providers

Tangaroa Digital Limited generally does not store complete credit or debit card information on its own systems unless specifically required for legitimate business purposes.

Payment providers may collect information including:

• billing information
• transaction information
• payment verification information
• payment status

Payment information is processed in accordance with the privacy and security practices of the relevant payment provider.

When We May Disclose Personal Information

We may disclose Personal Information where reasonably necessary to:

• provide our Services
• engage trusted service providers
• comply with legal obligations
• respond to lawful requests from government authorities
• enforce our legal rights
• protect our business
• investigate suspected fraud
• protect the safety of individuals
• complete a business transaction involving the sale, merger, or restructuring of our business

We do not sell Personal Information to third parties.

Where Personal Information is disclosed to service providers, we take reasonable steps to ensure they use the information only for authorised purposes and protect it appropriately.

International Disclosure of Personal Information

Tangaroa Digital Limited may use reputable third-party service providers that store or process Personal Information outside New Zealand.

These providers may include:

• cloud hosting providers
• customer relationship management (CRM) platforms
• email service providers
• marketing automation platforms
• analytics providers
• cybersecurity providers
• advertising platforms
• payment processors
• project management software
• artificial intelligence service providers

As a result, your Personal Information may be transferred to or accessed from countries outside New Zealand.

Where Personal Information is disclosed overseas, Tangaroa Digital Limited will take reasonable steps to ensure that the recipient protects the information in a manner that provides comparable safeguards to those required under the Privacy Act 2020, unless otherwise permitted by law.

How We Protect Your Personal Information

Tangaroa Digital Limited takes reasonable technical, administrative, and organisational measures to safeguard Personal Information against loss, misuse, unauthorised access, alteration, disclosure, or destruction.

These measures may include:

• encrypted website connections (SSL/TLS)
• secure cloud infrastructure
• password-protected systems
• multi-factor authentication where available
• restricted employee and contractor access
• firewall protection
• endpoint security software
• security monitoring
• regular software updates
• secure backup procedures
• access logging
• staff awareness and confidentiality obligations
• Only authorised personnel who require access to Personal Information to perform their duties are permitted to access that information

While we take reasonable steps to protect Personal Information, no method of electronic transmission, internet communication, or electronic storage can be guaranteed to be completely secure.

Accordingly, we cannot guarantee absolute security.

Data Retention

Tangaroa Digital Limited retains Personal Information only for as long as reasonably necessary to:

• provide our Services
• fulfil contractual obligations
• comply with legal requirements
• resolve disputes
• maintain business records
• protect our legal interests
• enforce our agreements

Retention periods may vary depending on:

• the type of information collected
• the purpose for which it was collected
• legal and regulatory requirements
• accounting and taxation obligations
• contractual obligations
• dispute resolution requirements

When Personal Information is no longer required, we will take reasonable steps to securely delete, destroy, anonymise, or de-identify the information unless we are legally required to retain it.

Your Privacy Rights

Subject to applicable law, you may have the right to:

• request access to the Personal Information we hold about you
• request correction of inaccurate, incomplete, or outdated Personal Information
• request that we update your contact details
• withdraw consent where processing is based on consent
• request information about how your Personal Information has been used
• object to certain uses of your Personal Information where permitted by law

We may request reasonable evidence of identity before responding to privacy-related requests to protect the security of Personal Information.

Some requests may be declined where permitted or required by applicable law, including where disclosure would adversely affect the privacy rights of another individual or where legal privileges apply.

Access and Correction Requests

If you believe the Personal Information we hold about you is inaccurate, incomplete, or out of date, you may request that it be corrected.

We will consider your request and, where appropriate, update the information within a reasonable period.

If we decline a correction request, we will explain the reasons where required by law.

Requests for access or correction should be submitted using the contact details provided at the end of this Privacy Policy.

Data Breach Response

Tangaroa Digital Limited takes data security seriously and has procedures designed to identify, assess, and respond to security incidents.

In the event of a suspected or confirmed privacy breach, we may:

• investigate the incident
• contain and minimise the impact
• restore affected systems where appropriate
• review security controls
• notify affected individuals where required by law
• notify the Office of the Privacy Commissioner where legally required

We continually review our security practices to improve our ability to prevent and respond to privacy incidents.

Business Transfers

If Tangaroa Digital Limited undergoes:

• a merger
• acquisition
• corporate restructuring
• sale of assets
• financing transaction
• business transfer

Personal Information may be transferred as part of that transaction.

Any successor organisation receiving Personal Information will be required to handle that information in accordance with applicable privacy laws and, where practicable, in a manner consistent with this Privacy Policy.

Children's Privacy

Our Services are intended primarily for businesses and professionals.

Our website and Services are not directed toward children under the age of 16.

We do not knowingly collect Personal Information from children without appropriate legal authority or parental consent where required.

If we become aware that Personal Information has been collected from a child in circumstances where it should not have been collected, we will take reasonable steps to delete that information as soon as practicable.

If you believe that a child has provided Personal Information to us inappropriately, please contact us immediately.

Your Choices

You may choose to:

• decline to provide certain Personal Information
• unsubscribe from marketing communications
• disable cookies through your browser settings
• request access to your Personal Information
• request correction of your Personal Information
• contact us regarding our privacy practices

Please note that choosing not to provide certain information may affect our ability to provide some Services.

Third-Party Websites

Our website may contain links to third-party websites, platforms, or services.

These websites operate independently from Tangaroa Digital Limited and have their own privacy policies and practices.

We do not control, endorse, or accept responsibility for:

• the content of third-party websites
• their privacy practices
• their security measures
• their terms of use

We encourage you to review the privacy policies of any third-party websites you visit before providing Personal Information.

Do Not Track Signals

Some internet browsers support "Do Not Track" (DNT) signals.

Because there is currently no universally accepted standard governing DNT signals, our website may not respond to all browser-based Do Not Track requests.

You may still manage cookies and tracking technologies through your browser settings or other available privacy controls.

Changes to This Privacy Policy

Tangaroa Digital Limited may update this Privacy Policy from time to time to reflect:

• changes in applicable laws or regulations
• changes to our business operations
• new products or services
• technological developments
• improvements to our privacy practices
• changes in how we collect, use, or protect Personal Information

The updated version will be published on our website with a revised Effective Date.

Where required by law or where changes are material, we may also notify clients by email or through other appropriate communication channels.

Your continued use of our website or Services after the updated Privacy Policy becomes effective constitutes your acceptance of the revised Policy.

Privacy Complaints

If you believe Tangaroa Digital Limited has breached your privacy rights or failed to comply with this Privacy Policy, we encourage you to contact us first so we can investigate and attempt to resolve the matter promptly.

Please include:

• your name and contact details
• a description of your concern
• any relevant dates or supporting information
• the outcome you are seeking

We will acknowledge your complaint within a reasonable timeframe and investigate it in good faith.

If we require additional information to investigate your complaint, we may contact you.

If you remain dissatisfied after our response, you may have the right to lodge a complaint with the Office of the Privacy Commissioner (New Zealand) in accordance with applicable privacy laws.

Your Privacy Choices

You have choices regarding how your Personal Information is used.

Depending on the circumstances, you may:

• request access to your Personal Information
• request correction of inaccurate information
• withdraw consent where processing is based on consent
• opt out of marketing communications
• manage cookie preferences through your browser settings
• request information about how your Personal Information has been used, where permitted by law

Please note that exercising certain choices may affect our ability to provide some or all of our Services.

Data Accuracy

Tangaroa Digital Limited takes reasonable steps to ensure that the Personal Information we hold is accurate, complete, relevant, and up to date.

However, we rely on the information provided by clients and website users.

You are responsible for informing us if your contact details or other Personal Information changes.

Keeping your information current helps us provide accurate and efficient Services.

Security Disclaimer

Although Tangaroa Digital Limited implements reasonable administrative, technical, and organisational safeguards to protect Personal Information, no method of internet transmission or electronic storage is completely secure.

Accordingly:

• we cannot guarantee absolute security
• internet communications may be intercepted
• unauthorised access may occur despite reasonable safeguards
• users transmit information to us at their own risk

Nothing in this Privacy Policy guarantees that our website or electronic systems will be free from cyber attacks, malware, hacking attempts, or other security incidents.

In the event of a security incident, we will take reasonable steps to investigate, mitigate, and respond in accordance with applicable legal obligations.

Third-Party Services Disclaimer

Our website and Services may integrate with or link to third-party platforms and service providers, including:

• Google
• Microsoft
• Meta
• LinkedIn
• TikTok
• YouTube
• Shopify
• WooCommerce
• Stripe
• HubSpot
• Mailchimp
• Klaviyo
• cloud hosting providers
• analytics providers
• other technology partners

These organisations operate independently and maintain their own privacy practices.

Tangaroa Digital Limited does not control and is not responsible for:

• the content of third-party websites
• their security practices
• their privacy policies
• their use of cookies or tracking technologies
• the handling of Personal Information after it has been transferred to them in accordance with your instructions or the Services you have requested

We encourage you to review the privacy policies of any third-party service you use.

Business Contact Information

Where Personal Information relates to business representatives, employees, directors, or authorised contacts of a Client, Tangaroa Digital Limited may use that information to:

• manage the business relationship
• administer projects
• provide requested Services
• communicate regarding proposals, invoices, and campaigns
• comply with legal obligations
• protect our legitimate business interests

This information will be handled in accordance with this Privacy Policy.

Compliance with Applicable Laws

Tangaroa Digital Limited is committed to complying with applicable privacy and data protection laws.

Where applicable, we aim to comply with:

• the Privacy Act 2020 (New Zealand)
• applicable anti-spam and electronic communications laws
• applicable consumer protection laws
• other privacy obligations relevant to the jurisdictions in which we operate or provide Services

Where local laws impose additional obligations in relation to Personal Information, those obligations will apply to the extent required by law.

Contact Us

If you have any questions about this Privacy Policy, wish to access or correct your Personal Information, or would like to make a privacy enquiry or complaint, please contact us using the details below.

Tangaroa Digital Limited

Website: https://www.tangaroadigital.com

Email: sales@tangaroadigital.com

Address: Nepia Stewart, 9 Owen Road, Inner Kaiti, Gisborne, 4010, New Zealand

Acceptance of This Privacy Policy

By accessing our website, submitting an enquiry, communicating with us, or using our Services, you acknowledge that you have read, understood, and accepted this Privacy Policy.

When you provide Personal Information on behalf of another individual or organisation, you confirm that you have the authority to do so and that the information has been provided in accordance with applicable privacy laws.

If you do not agree with this Privacy Policy, please discontinue use of our website and Services.

Final Statement

Tangaroa Digital Limited is committed to maintaining the trust of our Clients, website visitors, and business partners by handling Personal Information responsibly, securely, and transparently.

We regularly review our privacy practices to ensure they remain aligned with evolving technology, industry standards, and legal requirements.

If you have any questions about how we collect, use, disclose, or protect your Personal Information, we encourage you to contact us.