Privacy Policy
Last updated: 29 September 2026
This privacy policy was last updated on 29 September 2026
We respect your privacy and are committed to protecting your Personal Information. This policy is intended to provide you with clear information about why and how we collect, use, disclose and protect Personal Information.
This policy applies to Ideally Group Ltd and any entity that Ideally Group Ltd (i) ultimately partly or fully owns, or (ii) is operated under, in each case wherever incorporated, that provides a Service to which this policy applies (together us, we, or our). Please refer to the “Definitions” section at the end of this policy to understand the meaning of some of the terms used in this policy.
Applicable Data Protection Laws
This policy explains how we handle Personal Information and comply with the requirements of applicable Data Protection Laws.
Where we process, use or disclose personal information for our own purposes, or for purposes related to our business, we will be an “agency” governed by the NZ Privacy Act.
Where we process or hold personal information solely on behalf of another organisation, we do so as an “agent” under the NZ Privacy Act.
The NZ Privacy Act requires us to notify individuals when we collect their personal information, whether directly from them or from another source. This policy serves as our primary notification to individuals in both cases. The specific information we are required to give you - including what we collect, why, who receives it, and your rights - is set out in the relevant sections of this policy below.
Collecting your Personal Information
We process Personal Information from actual and prospective customers, authorised users (of a customer’s account on our services), suppliers, employees, job applicants, contractors and other individuals. We only seek to collect Personal Information that is necessary for us to provide our services or for our necessary business purposes.
Generally, the types of Personal Information we may collect, hold and process includes:
The contact information of our actual and prospective customers, suppliers and other business contacts. Typically, this includes names, addresses, telephone numbers, email addresses and job titles. To the extent permitted by applicable law, we may collect this information from publicly available sources.
Personal Information collected in the course of providing our services to our customers. For example:
when you sign up for a Service, we may require your name, email address, role, company address and phone number;
customers or other users of the services may provide us with your Personal Information, including when identifying the authorised users of their account on the services;
we collect information about your interactions with our services, including the content you view and engaged with. How much information we collect depends on the type and settings of the device you use to access the services. For example we may collect your IP address, device information, approximate geographic location, web browser and/or device type, the web pages or sites visited just before or just after using the 2918/4- 463485 2 service, the pages or other content you view or interact with on the service, and the dates and times of the visit, access, or use of the services];
we collect financial information (like billing and GST number information, date, time, amounts charged) when customers make payments to us for the services.
Personal Information collected when individuals communicate with us (including via in-app messenger, email or telephone). If you contact us, we may keep a record of our correspondence with you. Where we intend to record a telephone conversation (or any part of a telephone conversation) we will advise you at the appropriate time.
Personal Information about your preferences in receiving marketing from us, and your communication preferences.
Personal Information collected from job applicants when they apply for a job with us and individual contractors when performing a role for us (in some instances this may include Sensitive Information such as health information if related to the role being applied for or being performed).
Personal Information collected from our employees during the course of carrying out our duties and activities as an employer (in some instances this may include Sensitive Information such as health information if related to the employee's role).
Personal Information collected from people who attend events we run, sponsor or are otherwise involved in.
We may also capture IP details when you use our website and we also use "cookies". These "cookies" may collect anonymous information from your computer and our website may use and combine such passively collected information and allows us to remember important information that will make future visits to the site more useful and promote our products or services to you by way of targeted advertising. You may use the various options on your browser to warn you each time a "cookie" is being sent. You can also turn "cookies" off at any time. However, in doing so you will restrict the access you might have to many features available on our website.
If we collect information about you from third parties, we will take reasonable steps to ensure the third party has first obtained your permission or has a lawful basis to share the information with us. This includes de-identified data we collect from research partners to enable our market research as part of our services. This data cannot be linked to you individually and we will not make any attempts to reidentify you.
Where collect most Personal Information from you directly, when we deal with you.
We generally do not intend to collect, and we ask you not to submit, any Sensitive Information to our services. If you choose to provide Sensitive Information about yourself to us for any reason, the act of doing so constitutes your explicit consent, (where such consent is necessary), for us to collect and use that information as necessary in the ways described in this policy or as described at the point you choose to disclose this information.
Using your Personal Information
The primary purposes for which we collect, hold and process Personal Information are:
Dealing with your enquiries and requests;
Creating and maintaining a relationship with you as a customer;
To provide you with products and services;
To conduct research and statistical analysis using Anonymous Data;
To improve the products and services that we provide to you;
To keep our services safe and to protect the rights of you, third parties or us, including detecting and preventing fraud, spam, abuse, security incidents, and other harmful activity;
To comply with any requirement of applicable law, including Data Protection Laws, regulation or code;
To market our products and services to you;
Keeping you updated and informed about the products and services we offer.
For recruitment purposes; and
For purposes related to the employment of our personnel and providing internal services to our personnel.
If you choose not to provide us with Personal Information which we have requested from you, we may be unable to fulfil any of the above purposes, including providing services, responding to your requests, or processing your application for employment.
If we process Personal Information in ways other than as stated in this policy, we will ensure we do so pursuant to the requirements of the applicable Data Protection Laws.
Sharing Personal Information
Besides our personnel, we may share your Personal Information with our third party service providers for the purposes set out in section 3, including:
CRM software providers;
website, application development, hosting, maintenance providers;
cloud-storage providers;
marketing providers;
invoicing providers,;
data analytics or research providers; and
our consultants, lawyers, accountants, insurers, and professional advisors.
Each service provider’s access to Personal Information is limited to the information needed to perform tasks on our behalf, and they are contractually obliged to use your Personal Information consistently with this policy.
We may also disclose Personal Information under the following circumstances:
when explicitly requested by you;
to courts, law enforcement, government agencies, or third parties for the purposes of protecting rights and interests, to the extent we believe that disclosure is appropriate or permitted by the applicable Data Protection Laws;
to entities partly or fully owned by us, wherever incorporated, which are governed by this policy; or
to facilitate a proposed or actual sale or other disposition of our business as a going concern. We will ensure that the transferee (or proposed transferee) will be bound by this policy.
We may also share Anonymous Data for research or promotional purposes. Except as set out in this policy, we do not sell to or trade Personal Information with third parties.
Transferring Personal Information outside New Zealand
Some of our third party service providers are located outside of New Zealand and may not be subject to the NZ Privacy Act. We use a commercially reasonable selection process, set out in section 4, to confirm that the provider can protect Personal Information in a way that, overall, provides comparable safeguards to those under the NZ Privacy Act.
Retention
We will retain Personal Information for so long as is necessary for the purpose for which it was collected. To determine the appropriate retention period for Personal Information, we consider:
the amount, nature and sensitivity of the Personal Information;
the potential risk of harm from unauthorised use or disclosure of the Personal Information; and
the purposes for which we process the Personal Information and whether we can achieve those purposes through other means.
Personal Information may be held for longer periods where required by law or regulation and as necessary in order to defend our legal rights.
Security
We are committed to protecting the Personal Information we receive, whether electronically or in hard copy. We also require our personnel and third party service providers to respect the confidentiality of any Personal Information held by us, and comply with applicable Data Protection Laws.
We have put in place generally accepted industry standards to prevent your Personal Information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. This includes firewalls, encrypted data transfers, password protection and other access and authentication controls. We regularly review the appropriateness of these measures to keep the Personal Information we hold secure.
We would notify you and any applicable privacy regulatory in accordance with Data Protection Laws if a breach of your Personal Information did occur.
Access and correction of Personnel Information
It is important that the Personal Information we hold about you is up to date and accurate. Please keep us informed of any changes to your Personal Information.
Under the NZ Privacy Act, you are entitled to:
access your Personal Information; and/or
request that your Personal Information be corrected.
Please contact us at if you would like to do so. You will find our contact details further below.
We will provide access to Personal Information upon request by an individual, except in the limited circumstances in which it is permitted for us to withhold this information.
When you make a request to access Personal Information, we may require you to provide some form of identification so we can verify that you are the person to whom the information relates.
Sometimes we'll need to charge an administrative fee to cover the cost of access. For example, if the request is very broad and the Personal Information requested is likely to take significant time and resources to find and prepare. In these situations, we'll get in touch to discuss your request and give you an estimate of the cost before doing anything.
Contact information
If you would like to exercise your privacy rights, make a complaint, or if you have any questions or concerns about this policy, please contact us via email at: [email protected]
Complaints
You are welcome to contact us if you have any complaints or concerns about anything covered in this policy. We will endeavour to deal with any complaints or concerns as quickly as possible, but in any event, in accordance with the timeframes and procedures set out in the applicable Data Protection Laws.
If you are not satisfied with our handling of your problem or complaint you may make a complaint to the relevant privacy regulator, for example the Office of the Privacy Commissioner (https://www.privacy.org.nz/about-us/contact/).
Changes to this privacy policy
Transparency is an ongoing responsibility, so we keep this privacy policy under regular review. We may need to update or amend this policy from time to time to reflect changes in our business or Data Protection Laws by publishing an updated version here.
So you know when we make changes, we will amend the revision date at the top of this policy. The newly amended policy will apply from that revision date. Therefore, we encourage you to review this policy periodically to stay informed about how we are protecting your Personal Information.
Any amended policy will apply between us whether or not we have given you specific notice of any change.
Third party websites
Our services may contain links to third party websites or services. We don’t own or control those websites or services or endorse them in any way and, if you interact with them, you may be providing Personal Information directly to the third party concerned. We encourage you to review their privacy policies accordingly.
Definitions
Please refer to this section to understand the meaning of some of the terms used in this policy:
Anonymous Data means Personal Information that has been processed such that no specific individual can be identified from the information.
Data Protection Laws means the data protection laws applicable to the Personal Information that we collect, hold and process, including as applicable the Privacy Act 2020 (NZ Privacy Act).
Personal Information is information about an identifiable living person. It has the meaning given to it under the NZ Privacy Act. Personal Information does not include Anonymous Data.
Processing or process is how we sometimes refer to the collecting, handling, storing and protecting of your Personal Information.
Sensitive Information includes information about your race or ethnic origin; political opinions or political affiliations; religious or philosophical beliefs; trade union membership; physical or mental health; genetic data; biometric data that uniquely identifies someone; sexual life or sexual orientation; and criminal records.
You or your means the relevant individual who is the subject of the Personal Information.