1. Who we are (Data Controller)
Noria Enterprises Limited, 9-2 Morgan Street,Auckland, 1024, New Zealand
Privacy contact: privacy@noria.nz
If you have any questions about this policy or how we handle your information, please contact us using the details above.
2. The personal information we collect
We collect personal information in a few ways:
Information you give us directly — for example when you fill in our contact form, request a proposal, subscribe to updates or articles, or otherwise correspond with us. This may include your name, company name, email address, phone number, website, and the contents of your message.
Information collected automatically — when you visit our website we and our service providers may automatically collect usage data such as your IP address, browser type and version, device information, the pages you view, referring URLs, time spent on pages, and approximate location (e.g. city/country). This is collected through cookies and similar tracking technologies (see section 6).
Information from third parties — we may receive limited information about you from advertising and analytics platforms (for example, when you click one of our ads) and from social media platforms where you interact with our pages.
We do not intentionally collect sensitive information, and we do not knowingly collect personal information from children.
3. How we use your information
We use personal information to:
- respond to your enquiries, provide quotes, and communicate with you about our services;
- provide, operate and improve our website and services;
- send you marketing communications, newsletters or articles where you have subscribed or where otherwise permitted by law (you can opt out at any time);
- measure and analyse website traffic and the performance of our content and advertising;
- comply with our legal obligations and protect our legal rights; and
- detect, prevent and address fraud, security issues or misuse.
4. Legal bases for processing (EU/UK visitors)
Where the EU or UK GDPR applies, we rely on the following legal bases:
- Consent — for example, for non-essential cookies and for marketing emails. You can withdraw consent at any time.
- Performance of a contract — to provide services you have requested or to take steps at your request before entering into a contract.
- Legitimate interests — to run, secure and improve our business and website, where these interests are not overridden by your rights.
- Legal obligation — where we are required to process your information to comply with the law.
5. How we share your information
We do not sell your personal information. We share it only with:
- Service providers and processors who help us operate our business and website (for example hosting, analytics, email delivery and advertising providers listed in section 7), under contracts that require them to protect your information;
- Professional advisers such as lawyers and accountants where necessary;
- Authorities or other parties where required by law, to enforce our terms, or to protect our rights, users or the public.
Some of these providers are located overseas (including the United States and Europe), so your information may be transferred and stored outside New Zealand. Where we transfer information internationally we take steps to ensure it is protected by comparable safeguards (for example, standard contractual clauses under GDPR).
6. Cookies and tracking technologies
Our website uses cookies and similar technologies to make the site work, to understand how it is used, and to support our marketing. Cookies fall into the following categories:
- Strictly necessary — required for the website to function. These are always active.
- Analytics — help us understand how visitors use the site so we can improve it.
- Marketing — used to deliver and measure advertising that is relevant to you.
- Personalisation — remember your choices and preferences.
Where required by law, we will ask for your consent before setting non-essential cookies, and you can change your preferences at any time via the cookie settings on our site. You can also control cookies through your browser settings.
7. Third-party services we use
The services below may process your personal information. Each has its own privacy policy:
Purpose - Website hosting & platform
Provider - Webflow, Inc. (USA)
Data processed - Usage data, technical data
More information - https://webflow.com/legal/privacy
Purpose - Analytics
Provider - Google Analytics 4 — Google LLC / Google Ireland Ltd
Data processed - Usage data, device & browser info, approximate location
More information - https://policies.google.com/privacy
Purpose - Tag management
Provider - Google Tag Manager — Google
Data processed - Trackers, usage data
More information - https://policies.google.com/privacy
Purpose - Advertising & conversion tracking
Provider - Google Ads — Google
eData processed - Trackers, usage data
More information - https://policies.google.com/privacy
Purpose - Advertising & conversion tracking
Provider - Meta Pixel — Meta Platforms
Data processed - Trackers, usage data
More information - https://www.facebook.com/about/privacy/
Purpose - Cookie consent
Provider - CookieYes
Data processed - Consent preferences
More information - https://www.cookieyes.com
8. How long we keep your information
We keep personal information only for as long as necessary for the purposes described in this policy, including to satisfy any legal, accounting or reporting requirements. Enquiry and client information is generally retained for the duration of our relationship and for a reasonable period afterwards; marketing contacts are retained until you unsubscribe. When information is no longer needed, we securely delete or de-identify it.
9. Your rights
All visitors (New Zealand Privacy Act 2020): You have the right to access the personal information we hold about you and to request correction of anything inaccurate. To make a request, contact us using the details in section 1.
EU/UK visitors (GDPR): In addition, you may have the right to erasure, to restrict or object to processing, to data portability, and to withdraw consent. You also have the right to lodge a complaint with your local data protection authority.
California residents (CCPA/CPRA): You may have the right to know what personal information we collect, to request deletion, to correct it, and to opt out of any "sale" or "sharing" of personal information. We do not sell your personal information. You will not be discriminated against for exercising these rights.
We will respond to verified requests as soon as reasonably practicable and within any timeframe required by law (within 20 working days under the NZ Privacy Act, and within one month under GDPR).
10. Data security and breach notification
We take reasonable technical and organisational measures to protect personal information against loss, misuse and unauthorised access, disclosure or alteration. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. If a privacy breach occurs that is likely to cause serious harm, we will notify affected individuals and the Office of the Privacy Commissioner as required by the Privacy Act 2020 (and other authorities where applicable).
11. Third-party links
Our website may contain links to third-party websites and social media platforms (including Instagram, LinkedIn and Facebook). We are not responsible for the privacy practices of those sites, and we encourage you to read their privacy policies.
12. "Do Not Track"
Our website does not currently respond to "Do Not Track" browser signals. You can manage tracking through our cookie settings and your browser settings.
13. Changes to this policy
We may update this Privacy Policy from time to time. The current version will always be posted on this page with the "Last updated" date above. Where changes are significant, or where required by law, we will take additional steps to notify you.
14. How to contact us or make a complaint
If you have questions, requests or a complaint about how we handle your personal information, please contact us at privacy@noria.nz.
If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner (New Zealand) at www.privacy.org.nz. EU/UK visitors may also contact their local data protection authority.
