Privacy Policy
Privacy Policy
last updated 29 July 2026
Colab Marketing Group Limited, trading as Colab Connects, respects your privacy. This policy explains what personal information we collect, why we collect it, how we use and protect it, and the rights you have in relation to it.
We handle personal information in accordance with the Privacy Act 2020 and its thirteen information privacy principles. This policy does not limit or exclude any rights you have under that Act. For more information about your privacy rights, see the Office of the Privacy Commissioner at privacy.org.nz.
In this policy, "we", "us", and "our" mean Colab Marketing Group Limited. "Personal information" means information about an identifiable individual, as defined in the Privacy Act 2020.
1. Who we are
Colab Marketing Group Limited (NZBN 9429050677320) is a digital marketing agency based in Auckland, New Zealand. We provide paid media, search engine optimisation, website development, content, social media, and creative services to clients in New Zealand and overseas.
Our privacy officer can be contacted using the details in section 17.
2. What personal information we collect
Information you give us
Your name, email address, phone number, job title, and organisation when you complete a form on our website, request a proposal, subscribe to our updates, or contact us.
Information you provide during the course of a project, including account access details, brand materials, and business information.
Billing and payment details where you are a client.
Information you provide when you apply for a role with us, including your CV and references.
Information we collect automatically
Technical information when you visit our website, including your IP address, browser type, device type, operating system, referring pages, the pages you view, and the time and duration of your visit.
Information collected through cookies and similar technologies, described in section 5.
Information we obtain from other sources
Publicly available business information, for example from company websites, the New Zealand Companies Office, or professional networking platforms, where we are researching a prospective client.
Information from our clients, where they engage us to work on their marketing and provide us with access to their systems or audiences.
Aggregated reporting and audience data from advertising and analytics platforms.
We collect personal information directly from you wherever it is reasonable and practicable to do so.
3. Information we handle on behalf of our clients
A significant part of our work involves handling personal information that belongs to our clients rather than to us. Examples include customer contact lists used for email marketing, enquiry data submitted through a client’s website, audience data used in advertising platforms, and analytics data about visitors to a client’s website.
Where we hold personal information solely as an agent for a client, and only for the purpose of safe custody or processing on that client’s behalf, that information is treated under the Privacy Act 2020 as being held by our client rather than by us. In those cases our client is responsible for how the information is collected and used, and their privacy policy applies. We act on our client’s instructions, use the information only for the purposes they have specified, and apply the security measures described in section 11.
If you have a question about personal information held by one of our clients, we will refer you to that client, or pass your request to them promptly.
4. How we use your information
We use personal information to:
provide, manage, and improve our services;
respond to your enquiries and prepare proposals;
administer client accounts, invoicing, and payments;
plan, deliver, and report on marketing and advertising campaigns;
send you marketing communications where you have asked to receive them or where we are otherwise permitted to do so;
understand how our website is used and improve its performance;
recruit and assess candidates for roles with us;
meet our legal, regulatory, and tax obligations; and
protect our legal interests and the security of our systems.
We will not use your personal information for a purpose that is unrelated to the purpose for which it was collected unless you have consented, or we are otherwise permitted to do so under the Privacy Act 2020.
5. Cookies and similar technologies
Our website uses cookies, which are small text files stored on your device, along with similar technologies such as pixels and tags. We use them to make the website function properly, to remember your preferences, to measure how the site is used, and to measure the performance of our advertising.
You can control or disable cookies through your browser settings. If you disable cookies, some parts of our website may not work as intended.
6. Analytics and advertising
We use third-party analytics and advertising services, which may include Google Analytics, Google Ads, Microsoft Advertising, Meta, and LinkedIn. These services may set cookies or use similar technologies to collect information about your use of our website and other websites, and may combine it with information they hold about you.
This allows us to understand website performance and to show our advertising to people who have previously visited our site. We do not sell your personal information.
You can opt out of personalised advertising from Google at adssettings.google.com, and from participating advertising networks at youronlinechoices.com. Each platform operates under its own privacy policy, which we recommend you review.
7. Who we share information with
We may disclose personal information to:
our staff and contractors, where they need it to do their work;
service providers who support our business, including hosting, email, cloud storage, project management, accounting, analytics, advertising, and customer relationship management providers;
our clients, where the information relates to work we are carrying out for them;
professional advisers such as lawyers and accountants;
a purchaser or prospective purchaser of our business, or part of it; and
any person where we are required or authorised to do so by law.
We require our service providers to protect personal information and to use it only for the purposes for which we provide it.
8. Overseas storage and disclosure
Some of the service providers we use store information on servers outside New Zealand, including in Australia, the United States, and the European Union. This means your personal information may be held or processed overseas.
Where we disclose personal information to an overseas provider, we take reasonable steps to satisfy ourselves that the provider is required to protect the information with safeguards comparable to those in the Privacy Act 2020, as required by information privacy principle 12.
9. Artificial intelligence tools
We use artificial intelligence tools to help us produce and analyse work, for example to draft and review content, summarise documents, and analyse campaign performance data. Where we use these tools we do so under business or enterprise agreements that restrict the provider from using our inputs to train their models.
We take care not to enter personal information into these tools unless it is necessary for the task, and we review AI-assisted output before it is used or published. Decisions that materially affect an individual are made by our people, not by an automated system alone.
10. How long we keep information
We keep personal information only for as long as we need it for the purposes set out in this policy, or for as long as we are required to keep it by law. Business and financial records are generally retained for at least seven years to meet our tax and company law obligations. When information is no longer required, we securely delete or de-identify it.
11. How we keep information secure
We take reasonable steps to protect personal information from loss, unauthorised access, use, modification, or disclosure. These steps include access controls and role-based permissions, multi-factor authentication on business systems, encryption in transit, reputable cloud providers with their own security programmes, and staff training on privacy and information handling.
No method of transmission or storage is completely secure. If you send us information over the internet, you do so at your own risk.
12. Your rights: access and correction
You have the right to ask us for a copy of the personal information we hold about you, and to ask us to correct it if you think it is wrong. To make a request, contact us using the details in section 17. We may need to verify your identity before we respond.
We will respond to your request as soon as reasonably practicable, and in any case within 20 working days of receiving it. In limited circumstances we may decline a request, for example where the information is not held by us, or where the Privacy Act 2020 allows us to withhold it. If we decline, we will tell you why.
There is no charge for making a request, although we may charge a reasonable fee in some circumstances, and we will tell you before we do.
13. Marketing communications
If you receive marketing emails from us, every message includes a way to unsubscribe, and we will action your request promptly. You can also contact us directly to be removed from our lists. We comply with the Unsolicited Electronic Messages Act 2007.
Unsubscribing from marketing does not affect communications we need to send you about a project or service we are providing.
14. Privacy breaches
If a privacy breach occurs that has caused, or is likely to cause, serious harm, we will notify the Office of the Privacy Commissioner and the affected individuals as soon as practicable, in accordance with our obligations under the Privacy Act 2020.
15. Children and young people
Our website and services are directed at businesses, not at children. We do not knowingly collect personal information from children. If you believe we hold information about a child, please contact us and we will delete it.
16. Changes to this policy
We may update this policy from time to time. The current version will always be available on our website, and the date at the top of this page shows when it was last updated. Material changes will take effect from the date the revised policy is published.
17. Contact us and complaints
If you have a question about this policy, want to access or correct your information, or wish to make a complaint, contact our privacy officer:
Email: privacy@colabmarketing.co.nz
Phone: 0800 122 193
We take complaints seriously and will investigate and respond to you. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner, who can be contacted through privacy.org.nz.
