Legal
Privacy Policy.
1. Who we are
AI New Zealand Limited provides advice, workshops and training to businesses in New Zealand. This policy explains how we collect, use, store and disclose personal information, and what rights you have over it.
We handle personal information in accordance with the Privacy Act 2020 and its information privacy principles. This policy forms part of our Terms of Service.
2. The short version
We collect very little. We use Google Analytics to understand which pages are read and how people find us, which sets cookies. We run no advertising networks and no advertising pixels, and we do not sell personal information.
The only information you can give us directly through this site is what you type into the toolkit download form. Everything else, booking a call, joining the AI Academy or paying for a course, happens on a named third party platform with its own privacy policy.
The AI Academy is the exception worth reading properly. It is a membership community on a separate platform, with its own account, its own subscription billing and content other members can see. Sections 3.3 and 3.4 cover it.
3. What we collect, and why
3.1 The toolkit download form
This is the only form on this website. When you request a toolkit we collect:
- Your name and work email address, so we can identify who requested it and send you related material.
- Your LinkedIn profile URL, which is optional, to help us understand who our resources are reaching.
- The page you submitted the form from and your browser's user agent string, so we know which toolkit was requested and can diagnose problems.
We use this to send you the toolkit and occasional email about practical AI for New Zealand businesses. You can unsubscribe from that at any time, and unsubscribing does not affect anything you have already downloaded.
3.2 Booking a call
Bookings are made through Microsoft Outlook Bookings. The details you enter go to Microsoft and into our calendar. We do not operate a contact form on this site.
3.3 The AI Academy
The AI Academy is a membership community running on Circle, a third party platform. It is a separate system from this website, with its own account and its own login. If you join, Circle holds the following for us:
- Your account: name, email address and password, and the record of when you joined and last signed in.
- Your profile: whatever you choose to add, such as a photo, headline, bio, location and links.
- What you post: posts, comments, replies, reactions, direct messages to other members, event RSVPs, and your progress through any course you take.
- How you use it: sign in records, the spaces and posts you open, and your notification settings.
The Academy is a community, so some of this is visible to other people. Your profile, your posts and your comments can be seen by the other members of any space you belong to, and by us as administrators. Direct messages are visible to the member you send them to. Please treat anything you post there as something other members will read, and do not post confidential information about your organisation or anyone else's.
Circle also sends email about activity in the community, such as replies to your posts and event reminders. Which of those you receive is yours to set, in your Academy notification settings.
Circle processes this information under its own privacy policy as well as under this one.
3.4 Membership subscriptions and payments
Premium Membership is a paid monthly subscription. You subscribe through the Academy's checkout, which runs on Circle, and the payment itself is handled by Stripe.
Your card details go straight to Stripe. They are typed into Stripe's own secure fields, they never pass through this website, and we never see or store your full card number. Because the membership recurs each month, Stripe keeps your payment method on file so it can take the next payment, and it stops doing so when you cancel.
What we can see and keep is the record of the subscription itself:
- Your name and email address, and the billing details you entered.
- Which plan you are on, whether it is in trial, active, past due or cancelled, and the dates it started, renews or ended.
- Your payment history and the receipts issued, including the amount, the date, and the card brand and last four digits. Never the full card number.
Membership starts with a 7 day free trial. Your card is collected when you sign up but is not charged during the trial, and the first payment is taken at the end of it unless you cancel before then. Receipts are issued automatically by email.
Stripe processes payment information under its own privacy policy. It also uses that information to detect and prevent fraud, which is a purpose of its own as well as ours.
3.5 Email and correspondence
If you email us, we keep the correspondence so we can respond and maintain a record of what was agreed.
3.6 Server logs and analytics
Our host, Netlify, records standard technical information such as IP address, request time and page requested. This is used for security and to keep the site running, not to build a profile of you. We also use Google Analytics, which is described in section 4.
4. Cookies and analytics
We use Google Analytics 4 to understand how the site is used: which pages are read, how long people stay, and how they arrived. This is the only tracking on the site and the only JavaScript we load.
To do that, Google Analytics sets cookies in your browser that distinguish one visitor from another and group your page views into a session. It also records your approximate location, which Google derives from your IP address and does not store, along with your device and browser type and the page that referred you.
We use this in aggregate, to decide what to write and what to fix. We do not use it to build a profile of you as an individual, we do not combine it with the details you give us through the toolkit form, and we do not use it for advertising.
4.1 How to opt out
- Install Google's Analytics opt-out browser add-on, which blocks it on every site.
- Block cookies or use your browser's tracking protection. Nothing on this site depends on JavaScript, so blocking it costs you nothing: every page works exactly the same.
We run no advertising networks and no advertising or social media pixels, and we do not sell or rent personal information to anyone.
Third party platforms we link out to, including Circle, Microsoft and Stripe, set their own cookies once you are on their sites. Their policies apply there.
5. Who we share information with
We share personal information only with the service providers that make our services work, and only as far as they need it:
| Provider | What for | Where it is held |
|---|---|---|
| Supabase | Our database, including toolkit form submissions and client records | Singapore |
| Netlify | Website hosting and server logs | United States |
| Circle | The AI Academy membership community, and the checkout you subscribe through | United States |
| Stripe | Payment processing, recurring subscription billing and fraud prevention | United States and global |
| Microsoft | Email, calendar and bookings | Australia and global |
| Website analytics | United States and global |
We may also disclose information where the law requires it. We do not sell personal information.
6. Where your information is stored
As the table above shows, some of our providers hold information outside New Zealand. Under the Privacy Act 2020, sending personal information overseas is treated as a disclosure, and we rely on those providers being subject to comparable privacy safeguards. If you would rather your information were not held offshore, contact us before using the relevant service, because for most of these there is no local alternative we can offer.
7. How long we keep it
- Toolkit and marketing contacts: until you unsubscribe or ask us to delete your details.
- Client and engagement records: for seven years after the engagement ends, which is the period our tax and business records obligations require.
- Academy accounts: for as long as your account is open, then in line with Circle's deletion process. Posts and comments you made in the community are not always removed along with the account, so tell us if you want those taken down too.
- Subscription and payment records: for seven years, for the same tax and business records obligations. This is the record of what was paid and when, not your card details, which we never hold.
- Server logs: for the short period our host retains them.
We do not keep personal information for longer than we need it for the purpose we collected it.
8. Keeping it secure
Access to our systems is restricted to the people who need it. Our database enforces row level security, so the tables holding personal information cannot be read by the public website or by anyone without explicit authorisation. Data is encrypted in transit. No system is perfectly secure, and we cannot guarantee absolute security, but if a privacy breach occurs that is likely to cause serious harm we will notify you and the Office of the Privacy Commissioner as the Privacy Act requires.
9. Your rights
Under the Privacy Act 2020 you have the right to:
- Ask what we hold about you, and get a copy of it.
- Ask us to correct it if it is wrong, or to attach a statement of correction if we disagree.
- Ask us to delete it, which we will do unless we are required to keep it.
- Unsubscribe from our email at any time.
Email justin@newzealand.ai and we will respond within 20 working days, which is the timeframe the Act sets. We do not charge for this.
10. Complaints
If you think we have mishandled your personal information, please tell us first so we can put it right. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner:
privacy.org.nz · 0800 803 909
11. Children
Our services are intended for business users and professionals, and are not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe we have, contact us and we will delete it.
12. Changes to this policy
We may update this policy to reflect changes in our services or the law. The effective date at the top of this page shows when the current version took effect. If we make a material change we will say so by email or a prominent notice on the site.
13. Contact us
For any question about this policy or the information we hold: