Privacy Policy
The attachment is a website terms and conditions template, rather than a privacy policy. Below is a Wynand-specific privacy policy using the same numbered format, aligned with New Zealand privacy statement guidance.
Replace the bracketed details and confirm the collection, tracking and provider arrangements before publishing.
Privacy Policy
Last updated: 09/14/2026
1. Introduction
Wynand is an Auckland-based consulting firm providing commercial advisory, marketing execution and technology implementation services.
This Privacy Policy explains how [legal entity name], trading as Wynand (“we”, “us” and “our”), collects, uses, holds and shares personal information through our website, communications and professional engagements.
We handle personal information in accordance with the New Zealand Privacy Act 2020 and other applicable privacy requirements.
2. Personal Information We Collect
Depending on your interactions with us, we may collect:
Your name, email address, telephone number, organisation and role.
Information you provide through enquiries, meetings, correspondence or requests for services.
Information relating to proposals, engagements, billing and payment administration.
Your communication preferences and newsletter subscription details.
Personal information provided in connection with client projects.
Technical information about your use of our website, as described in section 6.
Please avoid submitting sensitive personal information through general enquiry forms unless we have requested it through an appropriate channel.
3. How We Collect Personal Information
We generally collect personal information directly from you when you contact us, subscribe to updates, attend a meeting or engage our services.
Where permitted by law, we may also receive information from your organisation, professional contacts, referral partners, publicly available sources or providers of business contact information.
When we collect personal information from another source, we take reasonable steps to provide the required collection notice unless a legal exception applies. This may involve a separate notification explaining the source, purpose and intended recipients of the information. New Zealand’s indirect collection requirements.
Providing information is generally voluntary. If you choose not to provide information needed for an enquiry or engagement, we may be unable to respond fully or provide the requested services. We will explain any mandatory requirements when relevant.
4. How We Use Personal Information
We use personal information for purposes connected with our operations and services, including:
Responding to enquiries and discussing prospective engagements.
Preparing proposals, delivering services and managing professional relationships.
Administering contracts, invoices and payments.
Sending requested updates and permitted marketing communications.
Understanding and improving our website and communications.
Maintaining security, addressing misuse and resolving disputes.
Meeting legal, regulatory and recordkeeping obligations.
We will only use personal information for another purpose where permitted by law, including where we obtain your authorisation.
5. Information Handled for Clients
Some engagements require access to personal information held by a client, such as customer, subscriber or business contact records.
Where we process that information solely on a client’s behalf, we handle it in accordance with the relevant engagement terms, authorised instructions and applicable law. We do not use client-controlled personal information for our own marketing without a separate lawful basis.
If your enquiry concerns information controlled by a client, we may direct you to that organisation or assist it in responding.
6. Website Information and Cookies
Our website and its supporting services may collect technical information such as your IP address, browser type, device information, pages visited and the time of your visit.
[Before publishing, specify the analytics, cookies, embedded content and advertising technologies actually enabled, their purposes and the controls available to visitors. If none are used, state this accurately.]
You can manage cookies through your browser settings. Disabling certain cookies may affect website functionality. Where applicable law requires consent for particular tracking technologies, we obtain that consent before using them.
7. Marketing Communications
We send newsletters and promotional communications where you have subscribed or where we otherwise have the consent required by applicable law.
You can unsubscribe using the link in a marketing email or by contacting us. Unsubscribing from marketing does not prevent us from sending communications necessary to administer an existing engagement.
8. Sharing Personal Information
We may share personal information with:
Employees and authorised contractors who need it to perform their responsibilities.
Providers supporting our hosting, communications, customer relationship management, project administration and accounting.
Professional advisers where necessary for advice or representation.
Other parties where you have authorised the disclosure.
Authorities or other recipients where disclosure is required or permitted by law.
We limit disclosure to information relevant to the purpose and require appropriate safeguards from providers handling information on our behalf.
9. Overseas Storage and Processing
Some providers or authorised contractors may store or process personal information outside New Zealand.
Where an overseas provider acts solely on our behalf, we remain responsible for the information within the requirements of New Zealand privacy law. Where a transfer constitutes an overseas disclosure, we take steps to satisfy the applicable legal requirements, including comparable privacy safeguards where required. Guidance on overseas processing and disclosure.
[Confirm the relevant overseas providers, processing locations and safeguards before publishing.]
10. Security
We take reasonable steps to protect personal information against loss, unauthorised access, modification, disclosure and misuse. Access is limited to people who need the information for an authorised purpose.
No electronic system can guarantee absolute security. If a privacy breach causes or is likely to cause serious harm, we will notify the Privacy Commissioner and affected individuals as required by law. Privacy breach notification requirements.
11. Retention
We retain personal information only for as long as necessary for the purposes for which it may lawfully be used.
Retention periods depend on the nature of the information, the engagement and any applicable accounting, legal or contractual requirements. When information is no longer required, we take reasonable steps to securely delete it or remove identifying details.
12. Access and Correction
You may request access to personal information we hold about you and ask us to correct information you believe is inaccurate.
We may need to verify your identity before responding. We will respond as soon as reasonably practicable and generally make a decision within 20 working days, unless a lawful extension or another applicable provision applies. Access and correction request guidance.
If we decline a request, we will explain the reason where required. If we do not make a correction you request, you may ask us to attach a statement of the correction sought.
Please direct requests to the Privacy Officer using the details below.
13. Third-Party Links
Our website may link to external websites or services. Those organisations handle personal information under their own privacy policies. Please review their policies before providing personal information.
14. Questions and Complaints
For questions, requests or complaints about our handling of personal information, contact:
Privacy Officer
Wynand
Legal entity: [Legal entity name]
Email: [Privacy contact email]
Address: [Business postal address]
We will consider your concern and work with you to address it. You may also contact the Office of the New Zealand Privacy Commissioner.
15. Changes to This Policy
We may update this Privacy Policy to reflect changes to our operations, services or legal obligations. The current version will be published on our website with an updated date. Where required, we will provide a separate notice of material changes.