Privacy Policy (GDPR)

Last updated: December 2024

1. Who we are (data controller)

Auckland Advertising Agency
Business Registration: [To be provided]
Address: 75 Valley Road, Mount Eden, Auckland 1024, New Zealand
Email: support@aucklandadvertisingagency.digital

2. Scope of application

This privacy policy applies to our website aucklandadvertisingagency.digital and associated forms and communication channels (such as email and phone). We respect European privacy legislation (GDPR) and New Zealand privacy laws.

3. Personal data we process

• Contact and account data: name, email address, phone number (optional), company name, job title.
• Communication data: messages you send to us, consultation notes, project requirements, and our responses.
• Technical data: IP address, device and browser information, pages you visit (only after cookie consent for analytics).
• Project/service data: project details, service requirements, budget information, campaign performance data.
• Marketing data: preferences, interests, and engagement with our marketing communications.

4. Data sources

We receive data directly from you (e.g., when you contact us, request a consultation, or engage our services). Technical/analytical data is collected via cookies and similar technologies only after you have given consent. See also our cookie policy.

5. Purposes and legal bases

We process your personal data for the following purposes:

• Service delivery: To provide marketing services, consultations, and project management (legal basis: contract performance).
• Communication: To respond to inquiries, provide updates, and maintain client relationships (legal basis: legitimate interest).
• Marketing: To send relevant marketing communications with your consent (legal basis: consent).
• Analytics: To improve our website and services with your consent (legal basis: consent).
• Legal compliance: To comply with applicable laws and regulations (legal basis: legal obligation).

6. Data retention

We retain your personal data for as long as necessary to fulfill the purposes outlined above:

• Client data: Retained for the duration of our business relationship plus 7 years for legal and accounting purposes.
• Marketing data: Retained until you withdraw consent or opt-out of communications.
• Technical data: Retained for up to 26 months (Google Analytics default) with your consent.
• Communication data: Retained for 3 years after the last contact for business purposes.

7. Data sharing

We may share your personal data with:

• Service providers: Third-party tools and platforms we use to deliver our services (e.g., email marketing platforms, analytics tools).
• Legal requirements: When required by law or to protect our rights and interests.
• Business transfers: In the event of a merger, acquisition, or sale of assets.

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

8. International transfers

Some of our service providers may be located outside New Zealand. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by the European Commission
• Adequacy decisions by relevant authorities
• Other appropriate safeguards as required by law

9. Your rights

Under GDPR and New Zealand privacy laws, you have the following rights:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data (subject to legal obligations)
• Restriction: Request limitation of processing in certain circumstances
• Portability: Request transfer of your data to another service provider
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Withdraw consent for processing based on consent

10. Data security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication
• Staff training on data protection

11. Children's privacy

Our services are not directed to children under 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information.

12. Changes to this policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically.

13. Contact us

If you have any questions about this privacy policy or wish to exercise your rights, please contact us:

Email: support@aucklandadvertisingagency.digital
Phone: +64 21 205 0136
Address: 75 Valley Road, Mount Eden, Auckland 1024, New Zealand

14. Complaints

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with the relevant supervisory authority:

• New Zealand: Office of the Privacy Commissioner
• European Union: Your local data protection authority